Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032313a3a2f34382d3438203d3e20323131343938.roa
File: 326130653a386630323a663032313a3a2f34382d3438203d3e20323131343938.roa (raw, json)
Hash identifier: ZPTkKfF0hPSZGGX36J3xTo9L66EIS/sxwUqynoxVgaU=
Subject key identifier: A1:BC:5D:F5:0C:DB:86:4C:A9:CD:A7:FB:FB:7F:57:B9:7E:C6:29:5A
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 674F95486D1184636CC8D5969EA8D88C5BA3F35B
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032313a3a2f34382d3438203d3e20323131343938.roa
Signing time: Thu 22 Oct 2026 19:49:55 +0000
ROA not before: Thu 22 Oct 2026 19:44:55 +0000
ROA not after: Thu 21 Oct 2027 19:49:55 +0000
asID: 211498
IP address blocks: 2a0e:8f02:f021::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:4f:95:48:6d:11:84:63:6c:c8:d5:96:9e:a8:d8:8c:5b:a3:f3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:44:55 2026 GMT
Not After : Oct 21 19:49:55 2027 GMT
Subject: CN=A1BC5DF50CDB864CA9CDA7FBFB7F57B97EC6295A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:39:68:74:6d:4e:c0:0c:3f:b2:98:0c:cd:9f:
76:5d:95:aa:8d:d9:bf:1a:3c:b0:56:a4:28:9f:47:
fe:7d:1f:54:25:c2:aa:2d:f1:59:94:97:5b:9c:95:
2f:52:1d:bd:66:36:c8:d7:b7:dc:0d:ea:5e:2a:ef:
16:d2:81:da:11:d1:fb:fb:15:de:95:02:e7:a6:81:
d3:c2:ee:a8:95:03:26:97:d0:0c:b0:1c:d8:41:59:
c9:54:2f:5e:77:f8:3f:10:5c:a9:d5:aa:ee:79:57:
ac:a8:69:24:db:8e:1e:cb:43:aa:34:41:3f:71:b8:
94:96:e8:53:06:01:0c:fb:5a:e8:af:fa:e8:36:66:
91:40:3c:45:96:6c:3a:dd:0b:85:cf:fb:17:9f:82:
57:b0:cc:dc:ca:c4:87:0f:04:4b:32:7f:1f:a7:d0:
37:18:21:55:56:da:7b:9d:6d:6e:b4:19:79:76:da:
ac:d8:b9:97:ed:c0:a1:c1:0a:df:09:5b:2f:54:82:
0e:ce:0f:d4:9c:2d:61:94:9c:ad:00:a9:8b:14:89:
25:68:7c:8a:ed:2e:da:a8:b2:d0:e5:1a:90:01:06:
81:63:cd:e3:20:f4:8a:e9:e3:3c:ba:b9:74:cf:6c:
67:ae:f6:7b:14:63:7e:cd:24:6b:b8:8a:fc:2c:c3:
d3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BC:5D:F5:0C:DB:86:4C:A9:CD:A7:FB:FB:7F:57:B9:7E:C6:29:5A
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032313a3a2f34382d3438203d3e20323131343938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f021::/48
Signature Algorithm: sha256WithRSAEncryption
1c:6e:c8:24:78:6d:e1:1e:51:36:01:9d:81:76:c1:72:d0:a7:
86:7d:c4:a7:86:50:10:4b:12:1f:f9:39:1a:71:e8:e9:4c:b4:
58:fa:69:91:a2:3e:d1:42:57:55:2e:4c:94:c8:d1:6e:0d:e3:
94:1a:c2:f6:95:a4:41:cc:39:39:37:f2:94:32:8f:5f:71:51:
fa:72:5a:9b:67:af:74:89:43:fc:c0:61:52:f9:6a:41:15:75:
b3:ac:68:df:05:dc:65:5b:69:3d:fb:d7:da:06:2c:d7:0e:85:
c0:11:b6:b1:6e:2e:ac:52:c6:83:14:8a:0a:29:57:c5:66:63:
21:3a:85:92:59:bd:f1:0a:5d:ea:d9:44:e7:87:65:8c:9a:5b:
6d:37:5e:b2:ee:c5:be:7c:88:ed:1d:32:f5:88:5c:f2:db:6d:
19:4b:a0:4a:40:6c:bd:72:08:be:7a:93:ee:2f:81:77:d8:72:
a4:49:a4:b5:f0:a2:21:93:d3:7f:5e:12:4f:bb:8e:6c:82:ec:
54:d2:8f:cd:dc:f7:41:45:8b:3c:38:ea:cc:43:80:67:27:31:
5f:bc:d2:f3:4d:08:1c:36:c8:c7:6a:cf:fb:30:4d:ba:a3:bc:
cc:d3:82:2a:7d:f7:73:29:cb:83:ad:26:1e:1e:48:8a:39:08:
ad:db:01:4c
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUZ0+VSG0RhGNsyNWWnqjYjFuj81swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjEwMjIxOTQ0NTVaFw0yNzEwMjExOTQ5NTVaMDMxMTAvBgNV
BAMTKEExQkM1REY1MENEQjg2NENBOUNEQTdGQkZCN0Y1N0I5N0VDNjI5NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLOWh0bU7ADD+ymAzNn3ZdlaqN
2b8aPLBWpCifR/59H1Qlwqot8VmUl1uclS9SHb1mNsjXt9wN6l4q7xbSgdoR0fv7
Fd6VAuemgdPC7qiVAyaX0AywHNhBWclUL153+D8QXKnVqu55V6yoaSTbjh7LQ6o0
QT9xuJSW6FMGAQz7Wuiv+ug2ZpFAPEWWbDrdC4XP+xefglewzNzKxIcPBEsyfx+n
0DcYIVVW2nudbW60GXl22qzYuZftwKHBCt8JWy9Ugg7OD9ScLWGUnK0AqYsUiSVo
fIrtLtqostDlGpABBoFjzeMg9Irp4zy6uXTPbGeu9nsUY37NJGu4ivwsw9O5AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUobxd9Qzbhkypzaf7+39XuX7GKVowHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2
LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz
MjNhNjYzMDMyMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzEzNDM5Mzgu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqDo8C8CEwDQYJKoZIhvcNAQELBQADggEBABxuyCR4beEeUTYB
nYF2wXLQp4Z9xKeGUBBLEh/5ORpx6OlMtFj6aZGiPtFCV1UuTJTI0W4N45QawvaV
pEHMOTk38pQyj19xUfpyWptnr3SJQ/zAYVL5akEVdbOsaN8F3GVbaT3719oGLNcO
hcARtrFuLqxSxoMUigopV8VmYyE6hZJZvfEKXerZROeHZYyaW203XrLuxb58iO0d
MvWIXPLbbRlLoEpAbL1yCL56k+4vgXfYcqRJpLXwoiGT039eEk+7jmyC7FTSj83c
90FFizw46sxDgGcnMV+80vNNCBw2yMdqz/swTbqjvMzTgip993Mpy4OtJh4eSIo5
CK3bAUw=
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:50 2026 by rpki-client