Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032323a3a2f34382d3438203d3e20323131343739.roa
File: 326130653a386630323a663032323a3a2f34382d3438203d3e20323131343739.roa (raw, json)
Hash identifier: vrT1FbNNbXbfm3Kri1HOCM+otOhQnUmA5Ggzet3OqVY=
Subject key identifier: 3F:DC:E1:C6:22:C3:38:5D:27:E7:92:3A:C9:D1:05:94:48:CD:25:3B
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 49287D80E5050AD3219186733B7BB5DC1E20DADF
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032323a3a2f34382d3438203d3e20323131343739.roa
Signing time: Thu 22 Oct 2026 19:50:03 +0000
ROA not before: Thu 22 Oct 2026 19:45:03 +0000
ROA not after: Thu 21 Oct 2027 19:50:03 +0000
asID: 211479
IP address blocks: 2a0e:8f02:f022::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:28:7d:80:e5:05:0a:d3:21:91:86:73:3b:7b:b5:dc:1e:20:da:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:45:03 2026 GMT
Not After : Oct 21 19:50:03 2027 GMT
Subject: CN=3FDCE1C622C3385D27E7923AC9D1059448CD253B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:26:d0:79:17:e3:93:86:9c:34:04:11:16:
1d:8a:18:7a:bb:80:0f:9b:90:5e:c8:85:22:de:fd:
a0:0a:eb:3e:e7:96:a7:27:11:c6:48:79:f2:81:e2:
67:68:c8:51:32:50:08:77:25:9a:3e:94:38:fe:ab:
49:68:11:8b:a0:63:33:05:84:35:87:89:b2:c4:eb:
fa:71:17:d2:e0:9f:f7:65:05:7c:25:7c:b8:30:89:
97:bd:76:07:97:f2:2c:7c:11:17:ea:69:b6:e5:a0:
94:3c:f6:dd:03:14:76:ee:00:7f:c7:6f:c5:65:a0:
7c:b4:79:a4:5f:1e:d9:c6:d9:67:d1:e9:e2:0e:0e:
70:70:bf:6f:d9:ea:d0:44:48:81:fd:5b:16:b8:96:
b3:e4:4b:f1:e5:3c:ac:39:2b:92:7a:f0:63:cb:1c:
ca:99:4d:41:62:a5:fc:64:6a:79:c9:c3:2f:f0:01:
4e:2f:fa:1e:84:89:73:06:b5:b1:2d:2c:e2:08:ad:
90:32:78:ec:28:98:3a:48:f6:1c:54:da:21:1b:73:
b7:34:79:ef:b7:ae:65:47:cc:6b:f1:fa:64:e5:3a:
1f:75:42:eb:f2:d1:da:79:f7:e3:11:32:5a:66:96:
68:c5:0c:1f:06:41:62:54:25:21:be:99:7c:dd:c6:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DC:E1:C6:22:C3:38:5D:27:E7:92:3A:C9:D1:05:94:48:CD:25:3B
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032323a3a2f34382d3438203d3e20323131343739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f022::/48
Signature Algorithm: sha256WithRSAEncryption
32:d4:ab:1f:6f:8a:87:d4:73:3d:7e:6d:14:29:40:96:4b:2a:
32:d0:ff:db:d6:c5:86:a5:5a:02:95:03:37:23:40:eb:5f:45:
af:1a:01:ed:99:4a:9e:c3:9a:41:5e:c3:17:92:e2:ab:c9:71:
1b:47:59:1e:ed:13:1f:84:96:4e:2c:3e:d6:09:db:20:02:2b:
6d:e0:3f:35:94:aa:ed:07:07:8a:c7:ff:7c:14:fb:16:ee:3b:
fe:df:37:7d:58:70:81:29:6a:01:79:27:c9:ce:b0:f1:d8:c8:
13:a9:1e:5e:17:f5:a4:ff:8e:f3:63:ad:8a:6f:02:db:9d:dd:
08:a6:e7:97:81:c3:b2:c2:25:a7:51:77:47:26:b6:0a:38:94:
43:ac:9b:c1:a2:82:bc:ba:e4:9a:d2:e2:6a:c2:30:cf:70:cf:
38:39:23:f8:2f:c7:e1:d7:1b:96:1b:3f:49:50:aa:cb:94:5c:
86:ed:fc:87:f8:6b:94:6e:55:04:5a:28:ee:98:e8:02:63:3a:
95:e7:16:f2:c7:9b:c1:c1:98:3c:55:46:22:67:8d:43:86:f9:
b3:9b:c3:76:ca:7e:21:54:33:24:9f:1c:7e:18:6e:3a:72:16:
42:21:d4:b7:54:85:8e:fc:d0:cb:10:a2:21:02:30:5a:bb:e6:
d0:57:f4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:48 2026 by rpki-client