Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130303a363334303a3a2f33322d3438203d3e203538323939.roa
File: 326130303a363334303a3a2f33322d3438203d3e203538323939.roa (raw, json)
Hash identifier: brQqD8eAqLHHMgoGL89MZdwhO0pCKwXMRfAI/sMwS0g=
Subject key identifier: EC:23:B6:28:58:25:E1:73:FA:80:7E:6F:DB:99:63:F9:EA:A5:63:96
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 772A21E6CB4E5B67872379436FDBFA09F8A3564E
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130303a363334303a3a2f33322d3438203d3e203538323939.roa
Signing time: Fri 18 Sep 2026 07:58:08 +0000
ROA not before: Fri 18 Sep 2026 07:53:08 +0000
ROA not after: Fri 17 Sep 2027 07:58:08 +0000
asID: 58299
IP address blocks: 2a00:6340::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:2a:21:e6:cb:4e:5b:67:87:23:79:43:6f:db:fa:09:f8:a3:56:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Sep 18 07:53:08 2026 GMT
Not After : Sep 17 07:58:08 2027 GMT
Subject: CN=EC23B6285825E173FA807E6FDB9963F9EAA56396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:5e:72:81:3d:ac:2a:07:23:d1:b4:aa:b5:
23:cf:7f:e3:68:3c:af:bb:c2:ec:a4:d1:d8:a1:66:
be:7b:82:2c:d4:4f:ef:ed:f9:11:67:1d:07:15:9a:
7e:f7:8d:2a:95:5f:3f:15:0a:f1:d9:d6:44:74:e5:
19:05:4a:c2:43:8a:22:d5:b5:a1:69:d3:fe:49:ed:
75:f5:0c:11:8b:26:b0:5f:d4:09:ca:8a:4d:04:e1:
bb:37:9f:76:eb:88:f8:db:53:97:a9:f8:11:6b:03:
c3:25:1d:2e:17:69:5d:6e:64:c4:8d:43:22:75:9d:
a3:5c:81:1a:04:d0:ce:cc:63:bb:46:23:d6:c2:07:
7b:01:f8:ae:3b:91:2d:03:57:20:7e:df:e2:a3:d7:
9e:3c:3c:37:d9:62:a6:02:7a:24:51:68:6b:4c:9c:
52:44:bd:b3:f2:f7:c6:42:21:66:c6:22:77:ec:ba:
58:78:73:47:86:64:3b:2c:7e:b7:05:4b:d1:f2:fb:
c8:f0:61:2a:94:d0:56:05:fc:1a:4a:39:48:00:78:
32:87:df:fc:85:19:c1:f8:79:c8:4a:bc:2f:cd:da:
11:91:9e:9d:e8:c4:1c:4c:6c:2e:74:f2:eb:68:9b:
33:e5:02:b3:c7:88:15:41:6c:e9:20:40:b2:0a:f6:
e4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:23:B6:28:58:25:E1:73:FA:80:7E:6F:DB:99:63:F9:EA:A5:63:96
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130303a363334303a3a2f33322d3438203d3e203538323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:6340::/32
Signature Algorithm: sha256WithRSAEncryption
76:75:28:d3:eb:80:52:69:58:8a:c8:6e:0a:73:5f:ce:40:46:
6a:49:de:32:d4:85:89:73:74:81:4a:66:d7:53:ba:bc:93:1d:
69:c8:67:c6:bb:be:2b:21:e2:a3:7d:ca:d0:b8:f0:8b:19:4e:
86:92:5a:dd:f5:cb:a2:8a:fc:78:32:42:95:1a:05:da:8e:6c:
f3:b2:25:ea:5d:d0:3a:93:26:4a:ab:2f:bc:d0:51:58:96:2d:
eb:b7:c3:b9:9e:8f:23:01:ce:e6:41:24:fa:45:90:8f:76:ff:
95:7e:8d:68:a1:3d:d7:88:de:ad:7e:c1:38:9b:66:17:cc:e2:
da:01:52:2c:7c:8f:78:ee:78:e5:bc:78:ae:7a:28:1f:48:b3:
1f:1a:01:11:2a:59:e9:de:b3:21:fb:0e:09:8e:20:f6:45:78:
8c:30:11:a6:df:0e:75:d2:0a:ed:7a:d6:ed:b3:3e:8a:05:41:
48:fa:54:cd:0f:38:cd:b0:8e:a9:1c:59:09:0b:90:95:2a:fe:
4b:e5:e8:d4:2e:df:66:bd:d6:f9:95:3e:44:35:d3:c5:51:e6:
9a:d2:e3:94:16:d7:db:4c:4f:1e:be:5a:6f:a0:d7:b6:05:b0:
2a:c5:33:e9:6c:fa:de:11:e6:b8:db:01:47:a7:1b:64:ea:24:
ce:b8:63:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:24:39 2026 by rpki-client