Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326131323a616638303a3a2f33322d3332203d3e203437393337.roa
File: 326131323a616638303a3a2f33322d3332203d3e203437393337.roa (raw, json)
Hash identifier: frWJBxaCPiC7WJHxI3yPn8uJd/kNY9lALvTgbWvxH8I=
Subject key identifier: 90:E3:B7:68:30:53:FA:E4:17:05:68:CC:8E:9E:AA:55:4B:7B:8C:2C
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 0F794108848B0E77DA4910681F4583D49268DADC
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326131323a616638303a3a2f33322d3332203d3e203437393337.roa
Signing time: Thu 01 Oct 2026 12:27:49 +0000
ROA not before: Thu 01 Oct 2026 12:22:49 +0000
ROA not after: Thu 30 Sep 2027 12:27:49 +0000
asID: 47937
IP address blocks: 2a12:af80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:79:41:08:84:8b:0e:77:da:49:10:68:1f:45:83:d4:92:68:da:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 1 12:22:49 2026 GMT
Not After : Sep 30 12:27:49 2027 GMT
Subject: CN=90E3B7683053FAE4170568CC8E9EAA554B7B8C2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:c7:08:07:40:9e:9e:86:68:9b:b9:54:5e:
42:f6:54:7d:c0:0f:0f:44:51:0e:d2:51:d3:5b:da:
e2:30:c6:18:02:7f:67:4f:83:e9:50:be:5d:bd:95:
1e:0f:e9:e1:ad:6e:cf:5d:42:f2:27:56:5e:b1:6a:
47:ea:a0:08:cf:12:45:53:44:f7:7a:0f:c5:05:51:
69:85:85:8d:bd:db:eb:f5:3b:25:0a:f2:6d:4f:73:
34:37:72:ed:63:92:3c:91:53:bf:e8:d0:4b:d5:29:
43:ae:f6:6c:3a:7b:f7:1d:ee:eb:61:85:9c:af:56:
6e:85:7c:b3:6d:b3:19:70:9e:94:8d:7e:72:b8:3c:
c6:8c:9b:5a:ba:1c:1d:dd:11:2c:ee:51:3b:9b:ae:
fa:15:12:ec:4c:9c:3f:23:f1:1c:4b:56:fd:2a:4e:
5b:a1:5a:2c:5b:8b:80:eb:74:f8:45:36:0a:cb:3c:
98:45:6b:87:9a:3c:21:c8:02:0a:0c:5b:7f:f5:a9:
be:84:75:2b:b2:74:9f:c4:f3:53:e3:ad:9a:04:b5:
66:57:a9:51:94:86:04:73:0f:27:71:2e:cb:3f:6f:
66:ae:e3:75:1a:a5:8a:23:ad:45:eb:20:29:e4:e4:
0f:d0:f1:79:de:cc:d6:bc:b5:0f:f5:6e:13:ea:f1:
a5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E3:B7:68:30:53:FA:E4:17:05:68:CC:8E:9E:AA:55:4B:7B:8C:2C
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326131323a616638303a3a2f33322d3332203d3e203437393337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:af80::/32
Signature Algorithm: sha256WithRSAEncryption
22:ba:09:3a:6d:8f:86:f5:e5:7d:d6:7f:22:79:20:83:f7:96:
0d:6d:00:fc:0b:f8:52:33:3a:1c:f2:fa:ba:56:21:4d:d9:26:
ac:8d:3e:b9:bc:19:09:dd:39:41:67:0c:b5:b7:85:63:dd:80:
ac:a2:28:41:3c:7d:34:33:23:fd:6c:97:9d:f2:4b:98:a9:0c:
4c:43:94:11:f3:fb:c1:23:de:4f:2b:11:19:71:ed:db:e2:60:
ae:d8:9f:78:9a:d6:cf:62:d6:9d:61:ff:2e:12:7a:94:53:56:
93:72:53:90:e7:17:fc:7e:28:c8:71:43:b2:7e:19:71:cf:8a:
9c:93:e6:c1:8f:4a:4f:3c:ee:66:9a:52:2d:b0:66:e9:36:c0:
6b:13:e0:0e:f0:c6:3d:1d:c5:b4:cf:a8:f9:d4:6d:24:ab:c1:
af:2a:01:0c:1b:2e:bc:fa:cd:44:93:ca:06:4c:22:15:72:92:
fd:8a:d2:0c:a9:cd:15:c3:ac:8b:c1:5e:bf:2f:92:ef:95:fa:
5d:30:4b:fd:5f:28:3a:d8:60:77:26:e7:fe:2f:31:af:70:74:
68:e0:e4:78:76:0b:5a:60:8f:56:d9:dd:28:5c:83:1e:85:1e:
c9:c9:9b:51:2c:6e:2f:5a:c8:19:18:49:3b:76:77:5f:a1:4d:
c7:d1:d9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:40:30 2026 by rpki-client