Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032633a3a2f34382d3438203d3e20323036343737.roa
File: 326130653a386630323a663032633a3a2f34382d3438203d3e20323036343737.roa (raw, json)
Hash identifier: MMdAEdK2/OBLJosiy/s8x1yA5bA2OnWgxGqVF5peHQA=
Subject key identifier: 3D:61:00:BE:D4:CA:91:28:74:21:0C:C6:FF:AD:5E:0B:83:A4:0D:52
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 6D14C570745AD981EC9E023BB9F3F2278232BC73
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032633a3a2f34382d3438203d3e20323036343737.roa
Signing time: Thu 22 Oct 2026 19:49:52 +0000
ROA not before: Thu 22 Oct 2026 19:44:52 +0000
ROA not after: Thu 21 Oct 2027 19:49:52 +0000
asID: 206477
IP address blocks: 2a0e:8f02:f02c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:14:c5:70:74:5a:d9:81:ec:9e:02:3b:b9:f3:f2:27:82:32:bc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:44:52 2026 GMT
Not After : Oct 21 19:49:52 2027 GMT
Subject: CN=3D6100BED4CA912874210CC6FFAD5E0B83A40D52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:c0:36:1c:a3:0f:07:59:e0:ed:ae:0c:53:
bd:f5:f7:51:0a:c9:79:b0:5f:82:85:aa:28:66:03:
7d:ce:e6:81:28:9a:67:d4:d9:41:af:14:a5:54:5d:
73:d8:29:f4:3f:aa:da:ee:9c:8a:92:09:30:85:95:
0e:39:c9:57:4d:80:a7:1b:50:48:ad:c2:23:31:2e:
c2:a1:49:b7:a8:a6:90:9e:e6:3b:2f:10:d4:35:af:
b6:00:0f:97:9c:ea:4a:93:6d:b2:b9:fc:27:a6:54:
e1:48:b5:06:ea:9e:59:a1:a6:6d:55:ef:d7:81:94:
f7:b6:51:49:4e:7f:f0:8e:86:75:63:3f:33:15:dc:
8a:c0:a0:e4:0a:c3:f8:15:3b:21:29:1a:f8:4e:1d:
a5:38:ad:01:dc:02:3a:98:12:46:9b:3d:e0:b5:5f:
56:af:fe:4e:89:01:1e:3e:c2:84:90:12:e1:38:0a:
1c:86:97:c2:c1:40:b1:31:a7:12:c9:25:36:2f:d6:
83:ce:14:ff:e4:8c:38:d0:0e:32:5e:41:8a:2c:2b:
0b:09:dc:34:94:ed:af:3a:3a:9f:48:e6:ac:f5:d2:
38:ab:9c:1e:18:73:bd:0d:52:0f:2e:89:f9:c8:77:
53:78:71:bd:96:22:68:c4:e9:94:3e:5a:a0:a3:9f:
d9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:61:00:BE:D4:CA:91:28:74:21:0C:C6:FF:AD:5E:0B:83:A4:0D:52
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032633a3a2f34382d3438203d3e20323036343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f02c::/48
Signature Algorithm: sha256WithRSAEncryption
01:82:9e:1c:a5:e0:8f:d7:35:af:fc:0d:82:b5:e7:f7:23:2d:
2c:56:56:ed:1f:52:1c:af:a2:10:6f:72:5c:5a:19:53:e2:d4:
3d:8a:6f:4b:60:a1:9e:be:f5:2e:0b:e5:81:c6:a9:91:78:08:
73:88:3f:56:09:9d:d4:06:68:2e:3a:ba:22:ef:4d:68:6b:fa:
41:fe:fa:09:e0:96:3f:57:a4:4b:c0:31:8f:49:6f:f3:47:5f:
a7:b7:73:52:4d:9e:f4:d4:c6:c4:16:b9:75:7a:86:0a:e4:15:
da:37:f7:72:90:d9:2f:24:8c:a0:33:01:3d:41:bf:c5:ce:5b:
f7:5c:8f:a8:76:a1:ae:b1:89:13:43:e4:42:46:4a:b1:fd:79:
3d:51:1f:2d:6c:9b:dc:2c:58:dc:4e:3c:7d:75:af:f3:b8:f2:
48:e7:d2:20:f9:2e:0f:d1:8f:8c:af:38:25:45:d2:9d:5c:e2:
ee:02:e9:f7:85:26:6e:65:03:6e:ec:2b:a4:13:a4:c2:13:bf:
85:7d:42:79:79:07:83:63:d2:83:37:e5:fa:85:6d:c9:02:92:
d5:11:4b:70:49:18:8e:d1:3b:2a:d2:2b:d7:ac:5e:9e:16:09:
3f:a3:04:ec:e0:55:54:5e:9b:cf:e4:18:9b:62:ec:c0:8e:bb:
10:9b:41:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:40 2026 by rpki-client