Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037653a3a2f34382d3438203d3e20323138343032.roa
File: 326130653a386630323a663037653a3a2f34382d3438203d3e20323138343032.roa (raw, json)
Hash identifier: YEMtvaE9xsF3RxAUM1/pzkWflaI1zyCnw4dc8yTDb0k=
Subject key identifier: 07:A6:78:71:64:13:19:A6:17:D8:75:D5:30:C5:F8:63:2C:43:22:37
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 075562CFD7EF5703923F8131ED9199DFA5980CC8
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037653a3a2f34382d3438203d3e20323138343032.roa
Signing time: Wed 14 Oct 2026 15:01:50 +0000
ROA not before: Wed 14 Oct 2026 14:56:50 +0000
ROA not after: Wed 13 Oct 2027 15:01:50 +0000
asID: 218402
IP address blocks: 2a0e:8f02:f07e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:16:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:55:62:cf:d7:ef:57:03:92:3f:81:31:ed:91:99:df:a5:98:0c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 14 14:56:50 2026 GMT
Not After : Oct 13 15:01:50 2027 GMT
Subject: CN=07A67871641319A617D875D530C5F8632C432237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:4f:3f:6e:af:e6:45:6f:2c:fb:af:db:79:
39:fe:f4:97:77:e3:b2:1e:bc:81:8b:4d:30:13:22:
38:98:b1:f7:15:a8:89:c2:8b:d6:50:bb:4e:1f:ff:
db:22:10:23:92:72:c1:76:b5:1e:0a:3d:af:4a:7d:
4b:53:87:60:a0:d3:e2:e7:84:44:01:1d:c1:dd:3b:
d7:44:17:a0:e7:b9:30:cf:e9:be:fa:e4:93:da:07:
cf:2c:a3:36:dc:81:6b:c7:a6:94:dc:c4:2f:cd:e8:
60:39:3c:63:a0:82:c6:16:d2:86:e8:cf:98:d9:2f:
64:1b:ea:8b:08:bf:91:4d:5e:09:54:48:99:ec:73:
40:a0:15:84:42:47:90:55:cb:7f:79:bf:0c:da:16:
26:11:b4:91:9a:f1:e6:08:dd:54:1d:53:48:f5:bb:
60:85:42:24:40:61:3f:d6:58:c8:b9:c2:05:af:93:
4f:c7:ca:60:00:9f:92:fb:af:89:f8:44:b9:38:f7:
f1:6c:d5:06:06:22:79:1c:05:bd:e1:7e:9c:d0:df:
b2:a0:2a:14:af:f8:66:a1:e9:69:e9:60:f7:4f:c1:
c5:22:ad:f5:1e:18:43:3e:d2:54:cd:d8:fb:1c:95:
7e:5b:4c:fe:d4:ae:95:f7:64:8b:50:69:6d:6f:83:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A6:78:71:64:13:19:A6:17:D8:75:D5:30:C5:F8:63:2C:43:22:37
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037653a3a2f34382d3438203d3e20323138343032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f07e::/48
Signature Algorithm: sha256WithRSAEncryption
32:3a:a3:44:5a:89:da:7d:3f:5b:e1:ab:65:73:d4:ff:c1:2f:
3f:46:b5:81:49:8c:3c:68:88:9b:de:c0:e5:d4:30:d7:ed:aa:
34:00:b2:53:2f:f5:24:8d:03:94:76:31:bb:fc:b2:46:ad:36:
ce:57:55:a1:0b:6a:ce:a1:82:65:d3:96:ce:f9:58:c3:5a:72:
36:c4:b0:22:38:0c:60:4b:78:71:f0:30:df:df:59:19:0c:44:
04:7d:79:8d:32:5c:fe:45:60:d1:37:26:41:02:4a:41:32:56:
ba:b3:81:57:68:46:d8:9f:a2:5e:be:b4:97:33:8c:73:79:a4:
1b:50:da:62:50:8e:d8:dc:01:b3:a3:e7:67:7e:81:4a:66:02:
28:84:4d:e9:78:7d:85:a0:31:7b:03:20:29:e4:65:0b:f6:c3:
98:32:18:c6:ee:b6:ad:60:b6:a8:d6:2e:83:da:8a:8e:56:98:
ff:05:df:b3:d6:d0:71:52:25:fb:ea:8d:24:b5:e7:be:4c:80:
43:86:20:06:b6:9f:91:10:e7:c0:dd:9d:20:5b:7f:f5:a0:90:
b9:80:c6:11:4d:98:18:99:75:c6:49:3d:50:6d:df:ae:e1:b5:
3a:80:3b:ee:b9:87:0c:e1:9b:21:5f:44:ef:b8:a4:de:ce:8c:
ec:16:30:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:51:35 2026 by rpki-client