Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037663a3a2f34382d3438203d3e20323138333439.roa
File: 326130653a386630323a663037663a3a2f34382d3438203d3e20323138333439.roa (raw, json)
Hash identifier: Rr7KqHUzVPIDl3YbV0IjKy4z6yGifUcsyS7EFpjZgrQ=
Subject key identifier: A7:CC:A5:F6:1D:77:B8:E4:87:72:A3:11:35:65:73:72:4D:CA:FD:8F
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 35B079B5D14998F2C19F91ED4D5B4B2A5E052A67
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037663a3a2f34382d3438203d3e20323138333439.roa
Signing time: Thu 22 Oct 2026 18:48:54 +0000
ROA not before: Thu 22 Oct 2026 18:43:54 +0000
ROA not after: Thu 21 Oct 2027 18:48:54 +0000
asID: 218349
IP address blocks: 2a0e:8f02:f07f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:b0:79:b5:d1:49:98:f2:c1:9f:91:ed:4d:5b:4b:2a:5e:05:2a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 18:43:54 2026 GMT
Not After : Oct 21 18:48:54 2027 GMT
Subject: CN=A7CCA5F61D77B8E48772A311356573724DCAFD8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:04:6f:7b:77:1d:88:e4:66:95:16:8c:ca:
dd:c0:35:20:55:c8:ef:82:b9:ba:15:45:3d:4c:f7:
50:a7:8b:76:ea:04:29:44:f6:91:cb:3a:98:9e:61:
fc:2d:b0:5e:0d:3f:62:a1:e6:3d:53:da:ca:41:30:
f9:00:f4:94:ac:6b:25:49:8d:06:87:a4:ef:49:30:
12:ee:bb:99:10:e6:e3:67:22:06:c5:7e:46:41:bf:
25:96:26:c1:15:75:61:34:4d:c5:51:19:e1:07:41:
aa:4c:bb:86:5f:d6:28:1e:50:e8:d4:e1:90:07:b2:
82:68:a5:41:34:9f:bb:f1:87:b9:16:15:a8:46:e3:
5e:a6:42:25:2e:30:ea:ec:a9:8a:22:83:34:b5:83:
d2:02:89:23:ba:e5:39:5b:20:f2:28:d5:99:cd:59:
97:65:54:b7:06:0a:83:b3:9e:34:23:a6:9b:ce:70:
68:36:7c:17:cd:25:12:26:89:28:4e:4e:f4:48:f6:
9b:a8:ed:49:8e:aa:88:f5:38:6c:78:26:2f:cd:01:
89:7a:1d:17:e3:99:4c:c5:04:d4:be:bb:0e:3e:1f:
e2:e1:4b:87:1d:6d:ed:11:2d:a2:f1:11:1b:ee:f8:
ab:38:21:38:58:d2:a8:cd:0b:45:d4:68:4e:e1:a9:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CC:A5:F6:1D:77:B8:E4:87:72:A3:11:35:65:73:72:4D:CA:FD:8F
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037663a3a2f34382d3438203d3e20323138333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f07f::/48
Signature Algorithm: sha256WithRSAEncryption
2b:9a:eb:2a:9b:df:3a:72:73:1f:c2:16:6c:07:f6:28:9c:91:
d1:23:98:05:50:75:e8:8c:e1:05:94:65:63:b1:29:af:a3:a6:
bf:04:de:25:bc:18:df:c5:ac:a2:47:16:71:19:e8:96:1c:80:
a2:4c:e2:64:08:5f:73:3b:43:5b:8b:c8:c0:aa:6c:b3:14:2d:
d4:d4:2f:c6:f1:fa:2c:47:77:b5:42:86:b4:b9:38:09:d8:4b:
89:08:3e:9a:31:a1:97:c4:e9:fd:b1:33:25:8d:b0:8d:12:42:
5a:34:13:87:65:0b:1f:62:eb:d5:dd:e2:31:28:76:33:74:a3:
ab:c1:aa:20:87:c1:d7:66:79:41:2b:e1:8d:1d:8a:09:e9:59:
7a:b9:94:c8:b4:2c:fc:ee:a4:b3:8b:00:f3:65:4c:bd:f0:71:
80:56:27:ba:cf:e7:30:81:9c:ec:1b:44:1a:28:6c:b5:d5:29:
c6:3d:0f:35:c7:e9:4f:37:2a:e8:5f:4f:d6:af:d8:e2:37:3e:
36:c0:d8:13:7f:b3:b0:8b:9d:a7:b9:c7:cc:1e:58:e0:ff:4a:
d5:f0:aa:d0:ae:9d:5b:39:14:8e:be:84:6c:53:de:41:00:e6:
c3:d1:4e:2e:de:84:1d:4b:b5:bf:c9:e6:68:b2:e1:1c:9b:cf:
e6:45:aa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:06:08 2026 by rpki-client