Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663034373a3a2f34382d3438203d3e20323132313534.roa
File: 326130653a386630323a663034373a3a2f34382d3438203d3e20323132313534.roa (raw, json)
Hash identifier: iBcZmWprmbBG92I2eXzaANp4QMS8LulooJsX0K16FXE=
Subject key identifier: 43:8A:5C:EE:D9:8F:E6:FC:FF:87:F0:1E:1E:48:E7:0B:6E:C8:4E:98
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 2F1557F88EB16378EC405101E4501B9AFE6D59
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663034373a3a2f34382d3438203d3e20323132313534.roa
Signing time: Thu 22 Oct 2026 19:49:59 +0000
ROA not before: Thu 22 Oct 2026 19:44:59 +0000
ROA not after: Thu 21 Oct 2027 19:49:59 +0000
asID: 212154
IP address blocks: 2a0e:8f02:f047::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:15:57:f8:8e:b1:63:78:ec:40:51:01:e4:50:1b:9a:fe:6d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:44:59 2026 GMT
Not After : Oct 21 19:49:59 2027 GMT
Subject: CN=438A5CEED98FE6FCFF87F01E1E48E70B6EC84E98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ac:c2:e5:4f:26:11:7c:20:a0:6d:e5:84:69:
0f:07:38:f3:93:18:7e:c4:28:84:72:b7:fa:71:a0:
c2:26:45:1f:da:30:10:d0:45:b3:dc:dd:3e:37:e5:
ef:f4:de:b9:8e:cc:ee:de:a5:7d:86:51:bb:6d:d2:
bb:c6:ec:bf:f4:07:9b:eb:da:52:4f:b9:bb:a4:a1:
2d:6e:1f:26:58:ea:ad:19:35:00:bf:f8:b2:8d:18:
6f:0d:53:79:e0:03:b0:cc:9d:5b:99:d4:89:bf:d5:
7b:55:bf:5b:03:16:05:28:39:22:4c:29:51:a4:13:
5b:70:49:ad:6e:20:83:70:3d:bc:e4:57:fd:b7:de:
06:46:80:2e:7c:ea:87:7b:c3:af:a6:39:10:b9:d0:
38:f3:37:af:d6:5c:84:fc:82:73:bc:cf:02:42:67:
06:68:9f:d0:1f:ee:70:3d:0e:8a:fb:a0:58:7b:ff:
0d:b1:97:01:97:c7:fc:28:96:a3:4e:ca:1d:f8:f4:
6c:58:1f:ac:33:e6:34:7c:ae:b1:6e:c1:85:05:01:
6d:82:72:a2:31:96:3c:ab:d5:1d:fd:1c:a7:ba:a8:
7f:fe:66:46:ed:ab:ca:c4:70:7c:11:ee:44:04:92:
44:69:75:f3:ed:b7:d1:b0:65:06:59:d4:0b:4c:82:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8A:5C:EE:D9:8F:E6:FC:FF:87:F0:1E:1E:48:E7:0B:6E:C8:4E:98
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663034373a3a2f34382d3438203d3e20323132313534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f047::/48
Signature Algorithm: sha256WithRSAEncryption
01:49:76:55:9d:79:a0:86:48:1b:08:da:38:40:6c:a8:8d:e8:
ad:9d:32:e0:2d:f2:9b:f5:a2:1a:39:61:c9:96:5f:ae:0d:3d:
5b:cb:08:ca:5f:ac:49:6d:0d:04:27:e0:9f:79:2b:d2:ed:a7:
16:ca:e6:99:a1:28:5c:2b:3d:7d:e3:8e:b7:c2:b1:42:dd:b4:
fe:5e:51:be:47:e9:50:8a:af:0e:9b:5f:dc:be:e7:8b:1e:c7:
8f:08:a9:8f:cc:32:4b:12:e6:f2:61:58:9e:51:33:2a:9d:36:
0b:7b:60:66:41:0f:2c:48:13:a2:07:b6:fa:87:50:61:5c:64:
11:30:00:dc:20:74:ca:00:66:d1:08:ba:71:32:28:0e:da:db:
09:a1:da:96:a1:95:22:6e:8a:86:ad:53:2b:15:58:1a:4d:bd:
b0:f2:b9:d0:be:38:d4:a3:a5:01:be:ef:f8:23:82:5b:01:92:
94:32:c7:09:21:c2:11:2e:4f:41:3a:22:3e:1f:53:4c:3b:46:
a5:13:fd:49:48:b5:10:2d:88:41:01:e5:d3:dd:a2:c1:a2:52:
54:38:7d:4d:44:9b:73:e3:6a:47:b8:c2:ad:38:11:61:d2:a9:
2b:00:fa:b0:9e:ce:74:ba:25:82:b8:aa:d4:06:36:26:23:f2:
87:cc:a7:51
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgITLxVX+I6xY3jsQFEB5FAbmv5tWTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhmYWM0NzA4ZDdlMjY1ZGIxMDQ0ZjliYjBlZTg3Mjg1ODdm
NDhiNDg0MB4XDTI2MTAyMjE5NDQ1OVoXDTI3MTAyMTE5NDk1OVowMzExMC8GA1UE
AxMoNDM4QTVDRUVEOThGRTZGQ0ZGODdGMDFFMUU0OEU3MEI2RUM4NEU5ODCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKOswuVPJhF8IKBt5YRpDwc485MY
fsQohHK3+nGgwiZFH9owENBFs9zdPjfl7/TeuY7M7t6lfYZRu23Su8bsv/QHm+va
Uk+5u6ShLW4fJljqrRk1AL/4so0Ybw1TeeADsMydW5nUib/Ve1W/WwMWBSg5Ikwp
UaQTW3BJrW4gg3A9vORX/bfeBkaALnzqh3vDr6Y5ELnQOPM3r9ZchPyCc7zPAkJn
Bmif0B/ucD0OivugWHv/DbGXAZfH/CiWo07KHfj0bFgfrDPmNHyusW7BhQUBbYJy
ojGWPKvVHf0cp7qof/5mRu2rysRwfBHuRASSRGl18+230bBlBlnUC0yCHy0CAwEA
AaOCAkswggJHMB0GA1UdDgQWBBRDilzu2Y/m/P+H8B4eSOcLbshOmDAfBgNVHSME
GDAWgBT6xHCNfiZdsQRPm7DuhyhYf0i0hDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u
ZXQvcmVwb3NpdG9yeS81YjU4ZTY0Ni1lN2EyLTQ2NWMtODdjNS00M2MzNTlhZDkz
NjkvMC9GQUM0NzA4RDdFMjY1REIxMDQ0RjlCQjBFRTg3Mjg1ODdGNDhCNDg0LmNy
bDBlBggrBgEFBQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMS1zUndqWDRtWGJFRVQ1dXc3b2NvV0g5
SXRJUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYt
ZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5MzY5LzAvMzI2MTMwNjUzYTM4NjYzMDMy
M2E2NjMwMzQzNzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMjMxMzUzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoOjwLwRzANBgkqhkiG9w0BAQsFAAOCAQEAAUl2VZ15oIZIGwja
OEBsqI3orZ0y4C3ym/WiGjlhyZZfrg09W8sIyl+sSW0NBCfgn3kr0u2nFsrmmaEo
XCs9feOOt8KxQt20/l5RvkfpUIqvDptf3L7nix7Hjwipj8wySxLm8mFYnlEzKp02
C3tgZkEPLEgToge2+odQYVxkETAA3CB0ygBm0Qi6cTIoDtrbCaHalqGVIm6Khq1T
KxVYGk29sPK50L441KOlAb7v+COCWwGSlDLHCSHCES5PQToiPh9TTDtGpRP9SUi1
EC2IQQHl092iwaJSVDh9TUSbc+NqR7jCrTgRYdKpKwD6sJ7OdLolgriq1AY2JiPy
h8ynUQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:31:24 2026 by rpki-client