Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663034363a3a2f34382d3438203d3e20323033343732.roa
File: 326130653a386630323a663034363a3a2f34382d3438203d3e20323033343732.roa (raw, json)
Hash identifier: ol7gJljZKHmxkr4GKXV92sNtPxZcEP7iZcTEnu2mWCc=
Subject key identifier: 5F:49:3C:67:D0:B2:A3:7D:AE:29:94:51:C2:6C:78:C3:06:F2:A9:84
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 7EF0F8F6C8687C0FC90EED15EEFD2BB44C0B54E2
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663034363a3a2f34382d3438203d3e20323033343732.roa
Signing time: Thu 22 Oct 2026 19:49:53 +0000
ROA not before: Thu 22 Oct 2026 19:44:53 +0000
ROA not after: Thu 21 Oct 2027 19:49:53 +0000
asID: 203472
IP address blocks: 2a0e:8f02:f046::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:16:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:f0:f8:f6:c8:68:7c:0f:c9:0e:ed:15:ee:fd:2b:b4:4c:0b:54:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:44:53 2026 GMT
Not After : Oct 21 19:49:53 2027 GMT
Subject: CN=5F493C67D0B2A37DAE299451C26C78C306F2A984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8d:48:ef:33:4b:c3:97:0a:7a:d4:ec:6f:31:
a8:b7:21:04:b6:34:ee:a9:85:41:8f:cb:9a:c4:5b:
95:70:86:89:7a:bd:99:48:a9:2d:71:5e:d0:6b:3e:
06:02:dc:cf:b3:4d:e2:7e:03:87:c7:ea:c7:12:c8:
d4:50:b8:1e:bc:d6:eb:3b:64:c4:5e:20:2b:c1:09:
1d:6c:b6:d3:3b:2f:0e:29:30:f1:0b:89:33:9a:a4:
96:42:44:bb:1d:a1:2c:91:e0:04:b1:a9:95:81:f1:
cd:52:dd:f7:f4:b2:22:da:79:3f:47:e4:6e:97:99:
cf:27:78:77:33:07:c5:4c:07:e0:48:30:0b:74:59:
01:bd:95:b7:b3:00:0e:52:d1:e9:d2:45:1b:7b:69:
2e:fa:43:ae:42:6f:68:11:46:6d:d6:6d:aa:b5:3e:
d5:e6:02:0e:cc:e7:82:4c:7f:65:73:93:d9:ea:3b:
9b:0c:86:d1:24:0d:98:34:7c:3c:7e:19:6f:dd:8e:
a3:80:0b:9b:93:71:8c:5d:eb:35:b9:27:5d:8d:15:
29:b4:87:d8:c9:9e:fd:26:8f:cc:3c:6e:79:d2:86:
ad:52:c3:28:0b:a2:d6:e5:7f:3e:fd:d2:18:70:a0:
43:a9:ac:65:58:95:ea:8e:7c:bc:fe:46:5f:fd:78:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:49:3C:67:D0:B2:A3:7D:AE:29:94:51:C2:6C:78:C3:06:F2:A9:84
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663034363a3a2f34382d3438203d3e20323033343732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f046::/48
Signature Algorithm: sha256WithRSAEncryption
0f:eb:67:98:50:49:2b:d1:e4:df:86:00:5e:9e:12:55:9b:33:
85:1a:24:a5:85:1f:0e:d1:4f:47:f5:59:71:1f:96:ef:8f:cb:
87:8d:54:ce:50:9b:c5:98:77:69:7e:38:79:10:4f:aa:43:5b:
09:40:3a:3a:2e:40:2f:d4:1c:1f:8c:6a:23:cd:58:5f:11:22:
2e:fc:23:31:e5:80:90:52:4a:95:33:e1:0c:bc:30:d3:43:60:
95:86:29:5d:40:65:e1:53:ee:f3:1e:f4:df:ac:9e:dc:b8:f8:
11:9f:b1:e1:48:89:a3:03:e8:e9:6a:87:20:c2:9c:c2:fb:c9:
9f:50:4b:df:8a:ff:53:c9:b5:e8:63:37:d0:45:c0:d6:f6:eb:
8f:91:96:ee:65:c5:04:f7:39:48:56:5e:b3:04:4b:c2:b3:cc:
16:3e:56:a8:a8:c0:de:df:a7:a9:25:71:73:37:18:eb:54:b8:
ef:ff:95:f0:ea:9e:c7:5f:8c:98:53:38:52:c2:f0:74:82:6a:
c9:99:a2:c6:6c:fc:17:3a:71:6a:e5:fb:0d:93:49:33:b2:7b:
bf:4a:04:2e:35:1c:17:bb:69:3c:00:fd:f8:6b:53:9a:33:42:
1d:c3:a3:d8:c6:aa:a9:3f:bb:87:59:1c:46:34:1b:4d:9d:32:
df:30:f1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:58:54 2026 by rpki-client