Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032623a3a2f34382d3438203d3e20323036343737.roa
File: 326130653a386630323a663032623a3a2f34382d3438203d3e20323036343737.roa (raw, json)
Hash identifier: RTomgXhhCpD0xOPWHJRSBp1TRBbmXs4XKoG8jj5lYus=
Subject key identifier: AC:A4:60:B4:CC:7E:A0:CB:FC:1A:0A:10:05:AD:A6:E9:54:53:53:EB
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 0521199C4E25559FD67A522375F9B0228FFD9E8C
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032623a3a2f34382d3438203d3e20323036343737.roa
Signing time: Thu 22 Oct 2026 19:49:59 +0000
ROA not before: Thu 22 Oct 2026 19:44:59 +0000
ROA not after: Thu 21 Oct 2027 19:49:59 +0000
asID: 206477
IP address blocks: 2a0e:8f02:f02b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:21:19:9c:4e:25:55:9f:d6:7a:52:23:75:f9:b0:22:8f:fd:9e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:44:59 2026 GMT
Not After : Oct 21 19:49:59 2027 GMT
Subject: CN=ACA460B4CC7EA0CBFC1A0A1005ADA6E9545353EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:27:34:84:4b:b0:16:23:40:98:20:16:6d:93:
dd:a0:61:c1:1a:6b:52:65:76:d7:e3:e5:cc:b3:60:
d3:99:97:6f:67:cd:5b:ed:d3:f1:57:ed:e0:b4:38:
3e:2d:28:1c:9c:69:65:f9:0a:c1:22:5e:31:93:6e:
ac:04:67:ec:68:c0:54:0e:5d:3c:2a:1a:b5:5a:a2:
40:05:f9:41:33:64:93:5b:a9:2f:f8:6a:2e:c7:95:
ee:49:11:6c:0a:7d:62:6f:28:7b:90:04:48:fc:97:
6c:2d:94:5f:dc:82:8c:af:57:e2:44:ef:bd:ab:dc:
ec:f5:7d:37:26:4e:ab:e6:32:48:f7:52:ef:2b:d2:
4b:d5:63:6f:47:35:63:15:0b:76:52:9a:4c:89:22:
3f:55:a0:ed:3e:1f:99:4c:ea:89:e4:a5:f1:32:15:
a4:b0:de:8e:25:9d:0c:ba:57:20:8a:9f:bf:84:91:
9d:8f:42:b0:b2:89:65:89:38:85:63:6f:f4:37:82:
a0:7a:3b:36:24:0e:91:7e:59:cb:bd:2e:81:bb:fd:
99:c8:bf:f5:ff:1b:e7:46:83:d7:fb:32:25:0c:e8:
29:6e:04:7d:e9:d7:a0:f9:bc:b1:7b:da:2c:3d:40:
f2:de:84:1c:b4:29:67:df:6a:2e:b2:ef:f9:73:bd:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A4:60:B4:CC:7E:A0:CB:FC:1A:0A:10:05:AD:A6:E9:54:53:53:EB
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032623a3a2f34382d3438203d3e20323036343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f02b::/48
Signature Algorithm: sha256WithRSAEncryption
93:f8:68:61:6e:69:85:99:4e:e2:09:45:2b:30:8f:e4:a4:20:
83:f7:11:ce:04:df:45:bc:36:a8:af:4b:dc:24:8b:88:c3:1a:
04:c7:10:18:15:2c:34:22:45:bb:9b:dc:6c:0e:6b:dc:ed:fb:
c2:e9:7a:59:65:d5:2f:00:f5:94:50:a6:ca:2d:61:8c:c8:42:
08:6c:63:d0:00:c5:82:f1:26:53:85:5c:d3:a7:41:72:6e:09:
ce:65:ad:33:ce:bf:bc:73:a2:84:13:da:4f:1a:a3:a8:b2:3e:
03:d2:31:75:24:7f:85:ee:28:c4:3c:6a:e5:08:26:36:20:cc:
db:cc:9e:22:cd:a0:89:6c:44:b4:3a:f8:00:6a:c4:96:8a:9b:
76:92:b6:ab:aa:e0:53:5f:32:63:a5:dd:03:11:4d:57:07:8b:
13:32:06:73:23:9e:ad:2c:4c:69:9c:ca:f8:cc:d3:17:f1:68:
84:13:ff:63:68:59:73:e8:49:34:ce:4c:49:43:f6:b2:60:31:
12:f5:b9:9c:4d:6f:ea:a2:08:b3:93:a9:83:94:a9:af:70:32:
17:22:ae:40:7d:7e:09:10:fb:71:01:8c:89:67:6c:6c:f1:aa:
59:e9:1a:bc:b0:03:d2:4d:52:c9:0c:95:65:7c:21:31:0f:f9:
8a:bf:11:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:06:53 2026 by rpki-client