Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032643a3a2f34382d3438203d3e20323036343737.roa
File: 326130653a386630323a663032643a3a2f34382d3438203d3e20323036343737.roa (raw, json)
Hash identifier: P808/LbXNIEsxTpiEEOWlCm/xLAjy3f0BYtnqhJh9eI=
Subject key identifier: C5:69:08:1E:18:27:D6:65:B8:C1:04:B9:0F:3F:70:F6:DE:50:7D:2C
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 7701B34706A9B436C8A156AB6D7EEFEC399802BE
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032643a3a2f34382d3438203d3e20323036343737.roa
Signing time: Thu 22 Oct 2026 19:49:52 +0000
ROA not before: Thu 22 Oct 2026 19:44:52 +0000
ROA not after: Thu 21 Oct 2027 19:49:52 +0000
asID: 206477
IP address blocks: 2a0e:8f02:f02d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:01:b3:47:06:a9:b4:36:c8:a1:56:ab:6d:7e:ef:ec:39:98:02:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:44:52 2026 GMT
Not After : Oct 21 19:49:52 2027 GMT
Subject: CN=C569081E1827D665B8C104B90F3F70F6DE507D2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f3:ff:36:ed:4e:60:6b:11:ca:ae:43:67:24:
32:64:f4:57:87:1b:76:b5:cf:76:ab:0b:09:2b:ac:
60:42:f9:92:c1:5f:73:53:14:b3:4c:1a:55:78:8a:
6c:85:47:0f:86:9d:41:32:8a:68:44:f4:e2:2a:8c:
66:6b:0d:54:71:cb:71:81:0e:7e:4a:b3:33:5d:2b:
94:16:98:d9:c1:c2:cd:66:17:87:66:9d:dc:0d:b5:
c8:9a:74:ed:29:19:a9:a4:83:ae:3e:28:b5:64:3b:
35:20:1e:58:6e:fc:74:e4:21:66:3c:64:b7:0f:a5:
5a:62:d6:9b:79:7f:6c:9d:ce:70:7d:82:ad:d5:e8:
a8:b9:27:ec:56:8e:31:e0:1c:58:dd:26:0e:a6:cd:
0e:5c:1d:24:96:0a:1e:72:08:22:95:56:16:fd:a7:
0a:9e:b6:2f:02:46:a9:10:69:13:81:f0:e2:0b:79:
35:1b:55:90:02:88:df:ee:be:91:77:44:cc:5e:1f:
43:08:e0:17:ff:a2:68:4f:59:36:c6:a8:aa:fc:20:
02:58:8e:6a:99:94:59:0b:f9:41:9f:dd:9e:fa:7d:
69:dc:02:74:75:79:3a:dc:36:be:4e:54:bc:a8:83:
9e:ee:b7:59:27:d0:74:6f:42:f3:21:4e:fa:7f:5e:
85:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:69:08:1E:18:27:D6:65:B8:C1:04:B9:0F:3F:70:F6:DE:50:7D:2C
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032643a3a2f34382d3438203d3e20323036343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f02d::/48
Signature Algorithm: sha256WithRSAEncryption
76:d9:62:7d:f6:24:57:90:ad:ce:7f:42:bb:6a:60:e9:7a:e5:
e3:62:ac:1f:df:91:6c:42:bf:1d:36:dd:27:d8:9a:98:f7:d8:
85:ee:61:52:68:f2:98:39:3a:0e:53:6a:41:cf:7f:dd:d3:cb:
58:26:10:7f:3c:6a:95:7a:65:79:a4:4f:54:0c:c6:04:bf:14:
f6:48:ee:4e:e8:de:92:1b:32:ca:35:9a:69:1d:fc:41:36:77:
59:1c:be:b2:e6:a3:09:fc:3b:64:ca:2d:cd:29:81:47:c1:18:
22:55:d1:ec:9e:c4:00:db:a6:e6:45:59:90:d1:1f:7f:2b:1c:
70:f0:f3:da:16:3a:c9:42:62:1d:c3:65:e7:b8:70:b1:35:6f:
be:f3:26:fe:3b:af:1b:0f:29:07:83:75:4e:33:aa:91:29:83:
3e:1e:36:55:82:ed:6b:42:01:cd:a7:bd:88:04:c1:41:d8:2c:
3c:f1:19:b2:42:7b:aa:f5:66:09:25:ee:8b:b0:0e:c7:72:42:
ce:6a:c9:e1:fd:b3:b2:8c:8d:c2:b0:6d:0f:e0:b9:1e:af:cc:
51:3e:9d:f4:dd:c2:7a:0a:60:1a:d9:db:41:f1:a5:25:c6:95:
23:f0:7b:ac:3d:35:12:e1:ff:ae:6b:52:29:af:c5:51:18:1c:
d4:c7:96:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:06:49 2026 by rpki-client