Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032653a3a2f34382d3438203d3e20323036343737.roa
File: 326130653a386630323a663032653a3a2f34382d3438203d3e20323036343737.roa (raw, json)
Hash identifier: KSBP8QmptC7ZAIPWBP1yA0ZnITHhcg7HAPWy8PD/3c0=
Subject key identifier: 93:2A:72:6E:D8:39:F1:50:7F:6E:7E:28:16:9B:07:9E:BA:D4:AD:3B
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 463BE97D0480369FF81BEA1E8F6583CF9C7B1926
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032653a3a2f34382d3438203d3e20323036343737.roa
Signing time: Thu 22 Oct 2026 19:49:58 +0000
ROA not before: Thu 22 Oct 2026 19:44:58 +0000
ROA not after: Thu 21 Oct 2027 19:49:58 +0000
asID: 206477
IP address blocks: 2a0e:8f02:f02e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:3b:e9:7d:04:80:36:9f:f8:1b:ea:1e:8f:65:83:cf:9c:7b:19:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:44:58 2026 GMT
Not After : Oct 21 19:49:58 2027 GMT
Subject: CN=932A726ED839F1507F6E7E28169B079EBAD4AD3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:5b:18:d3:2b:cd:39:90:ee:8b:67:ac:b4:
75:37:86:94:d7:bb:a5:e0:08:3f:92:2a:4a:48:72:
66:7b:ba:52:99:d6:12:2d:40:90:29:9e:dd:f2:a8:
21:a7:ae:d9:85:b3:5c:93:c2:5e:c8:84:e8:b4:a3:
fb:1c:98:e0:89:ff:ff:ee:96:5e:ea:8d:b9:7b:75:
16:18:8d:8b:07:d1:0b:ce:69:43:09:d0:fd:0d:9b:
db:16:6d:a2:7e:38:b7:9e:ed:c1:72:d8:a8:f1:f4:
c0:67:64:72:3d:94:21:d5:14:16:61:09:34:e1:fa:
e2:61:cc:36:b7:ff:09:29:a9:4a:76:a3:49:c5:78:
b9:66:17:2f:47:4c:fd:92:24:b7:6f:46:b8:39:73:
56:db:86:13:fe:c1:cb:c8:4d:a2:26:96:6d:3e:2b:
d4:ad:0a:fa:08:48:86:f1:b9:59:31:57:e3:59:ee:
93:4a:4d:94:64:5d:b6:76:18:0e:d1:c0:3f:87:aa:
1b:39:1a:bd:f6:f8:17:20:2b:36:26:8a:52:e1:99:
07:a0:5a:48:c1:d1:dc:d9:3a:aa:9b:9e:68:be:6d:
bd:fd:ae:ad:69:2d:93:f3:46:c0:df:2e:95:0f:7e:
77:38:05:8d:42:00:0b:60:6a:10:74:2c:bc:e3:b7:
fe:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2A:72:6E:D8:39:F1:50:7F:6E:7E:28:16:9B:07:9E:BA:D4:AD:3B
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663032653a3a2f34382d3438203d3e20323036343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f02e::/48
Signature Algorithm: sha256WithRSAEncryption
25:c4:72:f0:91:55:06:16:21:fc:3e:da:d6:df:b0:6c:3a:af:
58:98:be:9b:e3:7e:13:d6:8a:51:55:0c:82:27:08:cc:04:28:
f2:2a:a1:c0:8d:15:45:35:73:8e:14:04:51:36:79:fb:0e:2a:
ed:1d:1f:06:e7:39:76:49:84:9a:f8:75:23:75:79:bc:f6:bf:
8d:c2:b4:7a:9d:b3:83:e1:e2:2f:87:27:c2:d3:f2:72:78:1d:
57:03:8c:12:b1:bb:3f:a4:40:c4:1c:8e:fa:88:11:a1:ea:c3:
32:81:40:33:a4:df:00:82:29:4b:89:a5:00:89:3d:55:25:3c:
d7:7a:82:7e:47:74:99:74:db:36:5e:e4:4b:ae:ab:4b:61:21:
53:d6:07:1e:3a:bd:7a:06:dc:05:8a:0e:a5:c8:ec:b3:9c:b8:
50:70:a6:7a:20:ec:8f:11:32:d4:c7:9e:2f:b7:40:4c:8c:01:
49:84:34:43:b8:47:28:d5:f8:af:12:66:c1:e4:31:67:d1:18:
fc:b1:f4:ce:bf:22:b2:9d:c3:14:c7:44:89:0b:9d:fe:d9:df:
46:39:e1:38:23:26:3d:c6:58:58:65:05:59:26:7b:01:8d:b0:
bf:e9:a1:dc:3c:35:b8:cf:c1:4f:1f:e4:f1:1d:7d:14:9e:24:
93:91:c3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:06:50 2026 by rpki-client