Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037623a3a2f34382d3438203d3e20323138333938.roa
File: 326130653a386630323a663037623a3a2f34382d3438203d3e20323138333938.roa (raw, json)
Hash identifier: XH992h3yrlEN+PmZ5yL2LzQfX/dpGbumKbmZDwoXLKU=
Subject key identifier: 19:85:82:9E:B3:43:A7:F6:58:17:EC:59:D0:2A:BE:3C:E6:DA:30:55
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 38403D5B0B8AEFCEE9DE865130ACBF0583EB1C4B
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037623a3a2f34382d3438203d3e20323138333938.roa
Signing time: Wed 14 Oct 2026 15:38:13 +0000
ROA not before: Wed 14 Oct 2026 15:33:13 +0000
ROA not after: Wed 13 Oct 2027 15:38:13 +0000
asID: 218398
IP address blocks: 2a0e:8f02:f07b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:40:3d:5b:0b:8a:ef:ce:e9:de:86:51:30:ac:bf:05:83:eb:1c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 14 15:33:13 2026 GMT
Not After : Oct 13 15:38:13 2027 GMT
Subject: CN=1985829EB343A7F65817EC59D02ABE3CE6DA3055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:14:c7:0a:e3:3f:2e:ed:30:80:e0:b2:d6:
dd:34:88:2d:ee:6d:01:0a:12:db:b9:59:1c:47:c7:
46:c1:51:ea:53:35:42:0b:b6:ec:cb:bb:b8:23:eb:
aa:7f:65:1a:62:e5:1f:8d:c7:11:0a:c4:24:2e:09:
c1:49:ef:43:65:a8:58:20:25:0e:8f:8e:ef:ec:09:
8f:46:64:60:7a:e7:ae:6d:c3:f5:54:94:40:ea:f9:
5b:bf:0f:31:4d:2b:33:55:7f:9f:12:a2:e4:ec:f4:
98:54:c1:c2:cf:56:93:e9:04:ed:23:fa:f4:81:29:
57:47:ed:d9:be:04:b2:ce:d7:80:91:66:f9:a4:eb:
b7:e2:d2:a8:24:8d:68:fd:22:04:04:b7:2e:8b:cc:
9c:4b:d4:ba:42:4a:60:65:d0:8a:cf:03:c7:65:91:
0d:e0:06:86:14:c4:fa:62:e6:a7:b7:71:91:3c:7c:
0a:d5:d3:a9:d2:d4:81:cc:74:94:b1:30:41:a6:2d:
3e:f3:df:9b:96:fe:9f:f6:51:00:86:4b:cc:4c:88:
e0:ff:9f:80:4f:d9:19:8b:5c:e1:c0:be:17:fe:1d:
5c:87:3a:51:0f:f2:e2:18:dd:62:9b:64:82:8e:33:
2c:09:96:e2:80:0e:43:44:5f:9b:03:17:ef:4b:c2:
ae:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:85:82:9E:B3:43:A7:F6:58:17:EC:59:D0:2A:BE:3C:E6:DA:30:55
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037623a3a2f34382d3438203d3e20323138333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f07b::/48
Signature Algorithm: sha256WithRSAEncryption
26:ea:a6:0e:a7:61:f4:71:be:3a:07:1d:e1:a1:77:aa:9d:2d:
a6:d7:3e:eb:82:b5:69:87:4c:36:27:ee:f0:41:26:cd:58:c8:
98:20:55:6d:c9:88:24:ad:8f:2d:f0:5d:7c:11:16:85:1a:c6:
fc:bd:ee:18:19:e4:89:66:0f:bf:ed:f1:4e:e7:0e:40:7d:7e:
d7:0e:4e:de:40:91:c5:55:55:47:8e:b6:c5:8d:5c:29:d4:81:
00:f2:bf:e3:ad:60:ee:69:5c:66:3e:09:7a:94:7e:be:68:e0:
52:0b:9f:b9:a9:f7:21:ab:bb:91:d4:3f:44:ae:b7:51:26:d8:
e5:72:fa:69:6d:2f:62:4d:be:ce:54:dd:ca:c6:74:86:e2:3b:
8f:ad:16:b7:5c:ea:81:4d:14:68:f5:bc:29:dc:be:2e:ba:27:
a4:e2:55:87:0c:10:f9:a6:a0:c1:f4:18:f2:e7:5b:de:b0:6e:
a8:fa:29:f5:bb:a6:2b:45:f1:b8:a8:2c:aa:02:e1:cc:17:75:
8c:0e:6a:cb:c7:ce:5d:44:1a:05:92:f9:c7:f6:10:a4:b2:81:
65:a9:82:d1:fd:77:ab:a3:24:7a:1d:b9:94:bc:b5:9e:b2:1c:
70:56:cc:46:b2:85:f3:f2:6f:16:14:14:43:7f:4a:6d:60:e6:
ec:d0:45:79
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUOEA9WwuK787p3oZRMKy/BYPrHEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjEwMTQxNTMzMTNaFw0yNzEwMTMxNTM4MTNaMDMxMTAvBgNV
BAMTKDE5ODU4MjlFQjM0M0E3RjY1ODE3RUM1OUQwMkFCRTNDRTZEQTMwNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrARTHCuM/Lu0wgOCy1t00iC3u
bQEKEtu5WRxHx0bBUepTNUILtuzLu7gj66p/ZRpi5R+NxxEKxCQuCcFJ70NlqFgg
JQ6Pju/sCY9GZGB6565tw/VUlEDq+Vu/DzFNKzNVf58SouTs9JhUwcLPVpPpBO0j
+vSBKVdH7dm+BLLO14CRZvmk67fi0qgkjWj9IgQEty6LzJxL1LpCSmBl0IrPA8dl
kQ3gBoYUxPpi5qe3cZE8fArV06nS1IHMdJSxMEGmLT7z35uW/p/2UQCGS8xMiOD/
n4BP2RmLXOHAvhf+HVyHOlEP8uIY3WKbZIKOMywJluKADkNEX5sDF+9Lwq7dAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUGYWCnrNDp/ZYF+xZ0Cq+PObaMFUwHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2
LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz
MjNhNjYzMDM3NjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzgzMzM5Mzgu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqDo8C8HswDQYJKoZIhvcNAQELBQADggEBACbqpg6nYfRxvjoH
HeGhd6qdLabXPuuCtWmHTDYn7vBBJs1YyJggVW3JiCStjy3wXXwRFoUaxvy97hgZ
5IlmD7/t8U7nDkB9ftcOTt5AkcVVVUeOtsWNXCnUgQDyv+OtYO5pXGY+CXqUfr5o
4FILn7mp9yGru5HUP0Sut1Em2OVy+mltL2JNvs5U3crGdIbiO4+tFrdc6oFNFGj1
vCncvi66J6TiVYcMEPmmoMH0GPLnW96wbqj6KfW7pitF8bioLKoC4cwXdYwOasvH
zl1EGgWS+cf2EKSygWWpgtH9d6ujJHoduZS8tZ6yHHBWzEayhfPybxYUFEN/Sm1g
5uzQRXk=
-----END CERTIFICATE-----
Generated at Mon Oct 26 06:24:01 2026 by rpki-client