Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663034633a3a2f34382d3438203d3e20323031393739.roa
File: 326130653a386630323a663034633a3a2f34382d3438203d3e20323031393739.roa (raw, json)
Hash identifier: 7N0KXJmM3cTtXRFdkDdC29UlTEDmPQwctTlU47Gvtbc=
Subject key identifier: 07:1B:DC:17:43:11:89:B3:E8:3E:80:03:AF:DD:F9:5C:C3:BE:AA:26
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 4A97CDC13E2C2374A170B882D6F6A214F42F7766
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663034633a3a2f34382d3438203d3e20323031393739.roa
Signing time: Thu 22 Oct 2026 19:50:03 +0000
ROA not before: Thu 22 Oct 2026 19:45:03 +0000
ROA not after: Thu 21 Oct 2027 19:50:03 +0000
asID: 201979
IP address blocks: 2a0e:8f02:f04c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:16:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:97:cd:c1:3e:2c:23:74:a1:70:b8:82:d6:f6:a2:14:f4:2f:77:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:45:03 2026 GMT
Not After : Oct 21 19:50:03 2027 GMT
Subject: CN=071BDC17431189B3E83E8003AFDDF95CC3BEAA26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:dd:42:84:90:62:31:7e:33:5d:74:1e:7e:f0:
43:90:3a:d8:02:db:57:be:b3:f5:48:42:5b:85:76:
7a:8a:8d:ca:5d:c1:2b:68:06:e9:22:7b:e6:82:f4:
a5:40:51:c9:2f:42:49:8a:2b:8b:04:28:bd:5f:5a:
79:d2:1e:b8:08:11:72:3a:5e:86:f8:05:81:74:1b:
64:91:ed:9b:49:0e:86:b8:13:49:ba:05:56:de:85:
8e:2a:bb:2a:f9:9f:bb:ea:90:23:dc:58:85:1f:d1:
81:4d:58:f0:a2:dd:5f:ea:f8:e8:69:d3:b6:24:c6:
61:b3:d2:06:b7:a5:2a:81:fb:05:f0:86:f2:43:3f:
18:5b:18:75:63:e5:cb:2c:02:fb:a7:b4:9e:a8:93:
96:ee:9c:24:79:f2:00:0c:82:db:24:1d:f0:c3:22:
74:2e:16:8b:23:2f:ba:9a:af:c7:70:4e:18:af:3b:
9e:7a:bb:aa:59:9c:35:a7:3a:52:e2:0d:0a:e4:af:
6c:ef:ad:49:c4:3f:2f:f2:ab:a7:8a:39:54:96:a9:
aa:ce:66:83:34:bc:d0:73:4f:b4:a0:9f:aa:2d:ff:
b3:2b:3d:ab:75:77:7a:cc:ea:ec:86:6f:2e:0f:c8:
ac:16:01:e0:55:f5:b7:1f:1f:80:cf:a7:a8:fc:ab:
c8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1B:DC:17:43:11:89:B3:E8:3E:80:03:AF:DD:F9:5C:C3:BE:AA:26
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663034633a3a2f34382d3438203d3e20323031393739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f04c::/48
Signature Algorithm: sha256WithRSAEncryption
a6:a7:af:b2:fd:f5:0a:96:c2:8c:cc:df:af:df:69:f5:c4:be:
6b:af:7d:fe:52:5b:25:5f:63:71:96:03:f8:68:2d:35:7a:da:
e4:bc:16:a8:b4:40:8d:eb:6b:76:4d:1c:2b:92:92:bd:7d:4e:
a7:93:fc:71:3a:2e:97:e9:8e:0f:7d:23:0a:7f:db:59:91:1e:
5b:0b:ef:05:b7:d3:62:03:fa:5d:47:52:8c:8d:fb:9e:01:f9:
d5:34:52:b3:02:b1:b5:e6:c4:96:00:b4:a3:25:31:87:9b:5f:
ce:43:18:7c:9c:fe:d6:25:66:c5:d2:b0:2c:b3:e7:d5:b0:33:
26:8b:2c:32:09:f1:78:90:9a:bd:aa:38:55:88:f2:ba:b8:a4:
46:8c:15:23:16:3f:19:ff:a1:ee:35:08:ea:d7:4f:c3:ea:59:
13:03:fa:fd:2c:31:91:e5:51:c3:87:cf:07:3e:36:af:d6:69:
c2:a2:b8:9e:b2:6d:1a:67:dc:0d:2d:99:8c:7c:84:28:cb:25:
04:6f:f9:c5:29:2a:7c:0b:3e:fb:18:84:5d:87:05:b5:3e:d1:
c3:60:20:2c:11:30:16:f9:68:cc:ac:f9:99:58:50:28:ab:55:
6c:72:c2:25:76:74:79:6a:02:1a:72:0a:15:a7:a4:4a:1f:6c:
a2:83:c5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:52:06 2026 by rpki-client