Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032613a3a2f34382d3438203d3e20323132353737.roa
File: 326130653a386630323a663032613a3a2f34382d3438203d3e20323132353737.roa (raw, json)
Hash identifier: 4LC3RKDy3VC1kYsgCkf5yAOJwapIJNE3pCLXj3ugrqE=
Subject key identifier: BC:62:70:95:69:4A:CE:D8:67:D5:6B:A7:DB:BE:DA:5B:BC:95:44:D3
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 386730CB56BD2232A735C703E603ACCBBC683932
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032613a3a2f34382d3438203d3e20323132353737.roa
Signing time: Thu 22 Oct 2026 19:49:54 +0000
ROA not before: Thu 22 Oct 2026 19:44:54 +0000
ROA not after: Thu 21 Oct 2027 19:49:54 +0000
asID: 212577
IP address blocks: 2a0e:8f02:f02a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:16:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:67:30:cb:56:bd:22:32:a7:35:c7:03:e6:03:ac:cb:bc:68:39:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:44:54 2026 GMT
Not After : Oct 21 19:49:54 2027 GMT
Subject: CN=BC627095694ACED867D56BA7DBBEDA5BBC9544D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:5d:7b:20:36:e0:88:19:6d:8b:6f:65:e5:
cd:af:7d:60:f7:49:1f:99:53:a6:49:d6:e0:a0:84:
c0:96:3e:e6:30:75:b5:bf:e8:4e:90:29:18:f5:51:
9f:19:f8:5c:cb:02:a4:8b:c4:da:af:d1:64:57:53:
6b:89:63:a9:03:c7:f3:8c:ae:06:4e:c5:b0:a2:ff:
93:26:82:d2:14:05:05:eb:fd:32:ae:84:55:62:95:
44:1b:10:1e:a9:51:fe:18:7d:71:3b:ca:60:ab:06:
43:5a:30:98:ad:0d:cd:bb:a9:43:12:9a:d0:9a:ad:
9f:60:18:2f:a8:22:f5:39:fe:9d:0d:12:1e:75:58:
ea:af:0f:61:fa:ef:2c:42:89:13:9c:72:bf:2c:11:
f1:47:0c:56:8c:41:65:8b:14:75:28:28:ad:22:e7:
47:89:9d:35:fe:da:0b:6f:b0:af:65:67:44:d1:84:
e5:ae:22:06:85:3d:83:25:eb:22:45:ba:8f:d4:20:
21:8a:76:56:ec:00:6c:ae:cd:57:ec:22:8e:5d:e1:
8f:44:c0:f6:58:63:33:0f:d2:9b:28:3e:a6:4d:f7:
f9:9c:be:08:ed:7b:c7:e9:37:92:0f:16:87:53:ce:
05:91:59:ef:8c:d8:46:46:e0:a0:24:7e:18:85:81:
70:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:62:70:95:69:4A:CE:D8:67:D5:6B:A7:DB:BE:DA:5B:BC:95:44:D3
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032613a3a2f34382d3438203d3e20323132353737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f02a::/48
Signature Algorithm: sha256WithRSAEncryption
b1:7d:d9:1f:c2:7e:3f:aa:14:e4:c2:88:10:57:0e:cd:8f:79:
7a:54:9a:38:c7:37:19:af:22:89:e1:ff:48:6f:9a:37:fc:29:
e2:d2:75:ee:ba:47:f5:7b:6c:1c:a0:ce:a7:3e:26:c6:fc:ab:
1e:5b:c9:04:43:65:06:dc:e8:98:bb:30:a4:a4:eb:4e:92:d0:
a9:5f:f8:b3:31:b7:91:0a:5a:de:3b:3f:2e:6a:ed:c1:04:4f:
3b:14:aa:85:77:d1:66:25:4e:ad:7c:c4:57:5b:9f:9a:5a:76:
45:fc:a8:e1:46:df:0b:50:0e:5a:a9:d5:71:22:d2:4e:40:24:
5f:c9:a0:c5:34:c3:11:fb:f7:74:48:9c:56:4b:98:30:af:17:
86:0d:f3:90:0b:48:1b:69:72:ef:dd:5e:be:ab:0c:b7:30:e6:
f5:7f:b1:af:7e:49:dc:44:33:d6:2f:42:93:c9:f7:5c:2a:75:
c9:eb:09:89:1d:b7:77:c3:e5:23:f8:f3:cc:b4:9c:da:f6:a9:
72:76:3a:cf:e5:37:e4:5a:6b:a0:16:32:ca:0b:35:d8:26:b0:
74:30:35:b3:de:37:4e:c3:da:d4:39:27:75:e6:51:a3:39:e3:
2c:87:09:a5:2d:f9:ce:8e:1d:57:36:88:1c:cc:24:f5:e3:4e:
1c:98:d6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:51:38 2026 by rpki-client