Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663033643a3a2f34382d3438203d3e20323038323233.roa
File: 326130653a386630323a663033643a3a2f34382d3438203d3e20323038323233.roa (raw, json)
Hash identifier: zzR3qGV5S8xgyLa8Wn41uCQ0vuvIUQEV1hSr4Sg/+0o=
Subject key identifier: 46:26:7E:8E:F7:30:2F:65:EC:9D:D5:6B:39:BF:AC:2F:0E:DA:C3:6C
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 263667B64C5253818377B4D2D47C52AE97A9DDCF
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663033643a3a2f34382d3438203d3e20323038323233.roa
Signing time: Thu 22 Oct 2026 19:49:55 +0000
ROA not before: Thu 22 Oct 2026 19:44:55 +0000
ROA not after: Thu 21 Oct 2027 19:49:55 +0000
asID: 208223
IP address blocks: 2a0e:8f02:f03d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:36:67:b6:4c:52:53:81:83:77:b4:d2:d4:7c:52:ae:97:a9:dd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:44:55 2026 GMT
Not After : Oct 21 19:49:55 2027 GMT
Subject: CN=46267E8EF7302F65EC9DD56B39BFAC2F0EDAC36C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:8c:e9:9a:51:3d:b6:80:4b:f5:71:90:48:
c8:7f:4c:b5:f5:d2:4b:6e:41:5b:57:e9:84:79:18:
dc:2f:79:78:88:5c:d9:80:31:78:a0:53:8b:8c:6c:
26:32:33:65:78:1c:a8:f2:ed:40:a0:e9:74:d9:6f:
32:b0:3b:7b:2c:62:63:dd:a5:e1:71:96:18:dc:6b:
3e:f7:40:0f:1b:35:b8:da:fc:59:97:60:6a:55:22:
e5:ef:30:5c:b3:98:bb:3b:24:b8:11:6f:d8:49:03:
66:8a:d6:dd:3b:29:29:b0:b3:81:69:ce:c4:e4:4a:
e7:62:ef:11:c8:95:ab:ff:3f:5f:14:1e:d5:28:67:
71:8e:2f:46:e1:2d:8b:aa:9c:a8:c6:5c:24:e6:7b:
b7:b6:8f:58:30:cd:da:d1:7a:a5:77:35:30:a5:55:
ef:bf:ca:da:0f:28:61:a6:be:09:c3:7b:ea:e0:c1:
69:36:48:b1:97:63:6a:77:6c:4c:36:4b:d7:d1:4b:
2c:d3:17:f6:28:1e:23:a2:b9:91:d1:34:d1:0d:a7:
2e:9c:8e:df:92:bb:bb:dd:ec:6a:90:25:12:bc:44:
74:29:99:cb:45:52:a9:b4:64:62:5b:7c:15:57:ec:
a4:e2:98:ae:17:f8:ca:b2:1b:ba:08:6f:76:00:00:
38:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:26:7E:8E:F7:30:2F:65:EC:9D:D5:6B:39:BF:AC:2F:0E:DA:C3:6C
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663033643a3a2f34382d3438203d3e20323038323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f03d::/48
Signature Algorithm: sha256WithRSAEncryption
a1:ed:49:ed:04:d4:ba:65:8c:41:83:a7:a8:4f:f3:12:45:b3:
cd:97:0e:f3:fe:23:ff:a9:60:bb:d3:a2:c5:4a:2b:72:79:d8:
50:ca:24:8a:48:f0:e1:78:1d:c0:2a:b1:ef:33:f7:dd:e7:4d:
3d:d4:fe:70:c4:3a:6c:5b:74:66:21:06:73:ce:e6:ac:3f:f6:
ad:b3:4a:e3:87:60:48:e6:2a:48:45:96:89:59:49:69:c1:57:
ed:fe:55:20:db:8a:7c:c4:84:5b:28:96:75:ec:6e:dd:db:12:
30:50:2a:b0:3c:34:fd:a9:ea:fe:73:46:d8:c9:52:91:e7:f5:
7d:4c:70:99:c5:30:bd:c2:96:5e:3f:89:1f:99:56:7b:c5:09:
24:a2:ca:0e:7e:fe:cf:2e:fb:a1:42:84:00:ee:ef:d1:e9:92:
c1:4f:ff:d5:74:73:3a:bf:e5:86:ba:57:e9:5c:9d:f9:74:eb:
35:72:74:d1:18:a6:5d:6b:d5:1b:68:8b:ab:81:1d:9a:fe:fe:
91:c9:66:5b:0a:7c:67:d5:d3:a6:38:82:68:0a:d9:f0:ae:ee:
b2:46:5d:f8:d1:83:0f:5e:f2:66:c8:b4:ca:2a:11:96:65:13:
dc:3f:ff:5f:b9:71:72:62:aa:8b:60:12:ea:36:89:1c:20:86:
bc:ea:a6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:57 2026 by rpki-client