Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663034313a3a2f34382d3438203d3e20323033373338.roa
File: 326130653a386630323a663034313a3a2f34382d3438203d3e20323033373338.roa (raw, json)
Hash identifier: VKbhP36Pau1BZMITS9MN5N9kcSJcg58DNbyl6aSax44=
Subject key identifier: 6C:B1:AD:C3:12:D9:71:06:36:A5:77:0D:D3:81:B1:AA:CE:2E:26:F0
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 7C873C4326B8DB5620BD9CBD95A71F2D6C5DE3B9
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663034313a3a2f34382d3438203d3e20323033373338.roa
Signing time: Thu 22 Oct 2026 19:49:52 +0000
ROA not before: Thu 22 Oct 2026 19:44:52 +0000
ROA not after: Thu 21 Oct 2027 19:49:52 +0000
asID: 203738
IP address blocks: 2a0e:8f02:f041::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:16:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:87:3c:43:26:b8:db:56:20:bd:9c:bd:95:a7:1f:2d:6c:5d:e3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:44:52 2026 GMT
Not After : Oct 21 19:49:52 2027 GMT
Subject: CN=6CB1ADC312D9710636A5770DD381B1AACE2E26F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:89:2b:35:92:23:88:a7:a3:c1:b2:c6:bd:59:
d9:d7:ff:63:f8:aa:b0:24:ce:bc:19:bd:88:12:3d:
14:29:cd:6b:a9:8e:c3:2c:20:b0:17:99:a9:31:55:
13:44:4e:05:76:c2:d8:4e:32:e5:55:86:57:31:18:
1e:fe:6c:1b:f9:df:b4:a7:59:cd:a4:31:f7:09:18:
69:86:bb:c3:50:58:8d:0a:a8:97:97:42:1c:70:5f:
2b:08:0a:8f:df:f5:6a:61:c9:b7:3e:7f:05:e4:6b:
01:7c:03:29:40:38:78:bd:7b:b1:2e:06:d3:63:d9:
2e:6b:69:2e:16:43:20:01:a4:2e:a3:c3:26:fb:48:
cf:a3:70:59:d3:ee:c5:8d:06:7c:40:29:61:4a:58:
25:28:42:ae:0d:d1:ec:7d:32:31:77:ef:da:56:b3:
c9:02:78:aa:c9:4d:e8:e8:d2:0b:85:09:85:ef:e2:
a3:19:22:d1:73:13:9e:6f:41:77:89:da:89:cf:9c:
c2:64:6f:24:ba:ac:11:d7:e6:ba:96:cc:a9:a5:4a:
42:88:66:62:63:34:fd:9e:2f:14:7a:09:4e:95:11:
4f:97:6b:59:4a:09:59:33:66:94:e7:02:3b:90:e8:
c6:ab:9e:cb:fa:8b:cf:d8:1f:a9:ad:8a:5f:b6:dd:
f2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B1:AD:C3:12:D9:71:06:36:A5:77:0D:D3:81:B1:AA:CE:2E:26:F0
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663034313a3a2f34382d3438203d3e20323033373338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f041::/48
Signature Algorithm: sha256WithRSAEncryption
0b:7d:ea:b6:6b:52:04:95:cc:42:ed:62:cb:86:80:37:be:04:
22:21:82:03:ea:9e:67:96:c7:3f:2e:f5:66:7e:19:a4:91:30:
e1:23:19:fb:57:b3:13:f4:3f:14:9c:51:64:99:b6:bb:41:34:
e8:4c:9d:2c:07:76:65:ce:91:3d:24:76:22:8a:46:f2:01:93:
32:9e:4a:ba:9d:08:d2:4d:70:81:24:d8:a6:88:83:00:a1:c1:
78:4e:83:15:e9:c6:cb:07:09:f9:a0:d6:36:b5:a0:3c:a1:08:
4a:6f:ba:f6:d5:55:43:62:c1:1c:e6:bd:8a:3c:49:13:45:71:
9a:1c:03:ea:80:a2:72:32:ed:cf:30:3b:99:5c:aa:33:f0:5e:
b6:19:90:0b:f2:56:30:56:6d:39:46:83:6f:82:2d:29:ec:33:
95:a1:1c:ca:d8:b3:32:c8:6d:7b:7e:0c:a4:5f:e7:92:c0:84:
24:e4:62:63:54:83:ac:f3:40:c0:84:c3:9f:ad:15:18:ac:36:
34:83:d6:55:76:59:94:7f:4f:8e:d7:3b:2f:ec:38:db:e4:b6:
4f:a1:c1:b8:f6:6c:0a:2a:1b:e2:7b:fc:2e:f4:d3:1a:0c:25:
4d:85:0b:3f:c9:57:26:a4:91:70:3f:7c:08:9c:97:44:e5:37:
e6:13:67:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:58:56 2026 by rpki-client