Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630303a663130303a3a2f34302d3438203d3e203439393333.roa
File: 326130653a386630303a663130303a3a2f34302d3438203d3e203439393333.roa (raw, json)
Hash identifier: Up83lk6REe+5I/MSrxX+h0LwJA3YHkAo3sS6jSKhUhM=
Subject key identifier: 16:80:73:6B:E6:22:1D:0B:BE:C1:2D:2E:A8:CD:A1:85:6F:7A:6C:3E
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 6B1AA4CAEE78B431B54CC23F90645B10E5665B75
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630303a663130303a3a2f34302d3438203d3e203439393333.roa
Signing time: Mon 16 Feb 2026 13:10:19 +0000
ROA not before: Mon 16 Feb 2026 13:05:19 +0000
ROA not after: Mon 15 Feb 2027 13:10:19 +0000
asID: 49933
IP address blocks: 2a0e:8f00:f100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 01:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:1a:a4:ca:ee:78:b4:31:b5:4c:c2:3f:90:64:5b:10:e5:66:5b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Feb 16 13:05:19 2026 GMT
Not After : Feb 15 13:10:19 2027 GMT
Subject: CN=1680736BE6221D0BBEC12D2EA8CDA1856F7A6C3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d4:41:bb:1f:c1:13:b6:bd:d5:9f:81:fd:a6:
57:a0:63:65:10:8f:47:f6:6f:a7:90:ca:3c:8b:d1:
e4:ac:ef:e5:ed:f7:bd:6f:35:f9:c0:8c:a2:32:df:
b4:a3:3c:24:11:4c:82:a8:d4:21:96:63:a3:8f:1d:
f5:ef:fd:aa:b8:7e:33:b3:a6:e2:ae:53:74:cf:51:
10:74:aa:8e:c1:ae:e9:90:f2:b3:f6:ea:96:fc:1f:
de:32:cf:3b:ad:c2:64:aa:85:ff:c3:ad:b4:66:33:
d3:8a:22:f4:dc:57:2c:d1:3e:4f:be:39:0b:e8:f1:
61:b6:4d:4e:64:9b:5c:d0:a6:5e:b8:45:14:a4:67:
19:ff:bb:0b:ef:20:20:53:4e:4e:fc:f0:68:e0:81:
7c:be:87:e8:d2:df:51:f5:c7:9a:b9:61:54:a6:41:
17:78:bc:1b:a6:99:3f:e1:7c:11:f4:92:89:b1:56:
f0:69:37:d6:41:3c:70:80:3b:ef:13:3f:de:6f:0d:
9e:27:94:e6:df:c5:0f:2e:0d:87:3f:0a:9c:c0:87:
f3:dc:96:04:c7:b8:a9:57:d9:c7:fc:dd:71:36:c6:
03:3c:8f:6d:59:5b:65:21:fb:3e:4a:a0:ae:f4:6d:
0c:8e:bd:46:0b:ff:44:89:bc:32:df:3d:9b:cf:a3:
e6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:80:73:6B:E6:22:1D:0B:BE:C1:2D:2E:A8:CD:A1:85:6F:7A:6C:3E
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630303a663130303a3a2f34302d3438203d3e203439393333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f00:f100::/40
Signature Algorithm: sha256WithRSAEncryption
4d:1e:a8:63:52:37:f7:79:34:ec:18:18:cc:f1:a4:59:2a:2c:
23:73:5e:0f:d3:09:bf:34:ea:fd:a0:3a:52:9b:cd:17:0d:4d:
a7:9c:62:49:ee:7c:bf:a1:14:b3:e2:e3:61:d9:ad:f2:37:df:
d1:02:16:58:9f:6d:f4:36:1f:87:a3:2b:39:eb:70:38:78:f0:
26:ff:cb:a1:fe:27:66:28:3f:2b:dd:15:c5:c0:72:9c:2c:ee:
36:d2:2b:56:ee:09:f9:1c:e6:e3:4c:49:66:8a:06:7b:ca:d2:
b8:44:74:df:30:33:c2:bb:0a:c4:ca:74:74:fc:ba:47:fd:41:
a9:3e:3c:0f:7e:17:e1:6c:d8:a8:57:84:e7:93:5e:a9:f4:37:
d5:49:83:64:f3:a9:7e:24:9e:bc:87:f7:39:15:ad:58:56:f6:
20:a0:19:9b:21:a1:60:ce:77:77:1f:7b:ea:54:74:89:48:4a:
80:47:56:8e:0c:4e:4a:5c:7a:12:98:7a:a1:65:70:93:c1:83:
08:bb:8a:37:da:3c:d9:85:ad:71:22:a7:05:6d:ea:b2:c1:59:
b9:cb:ca:17:b2:ba:96:3c:f1:52:6c:03:9d:48:3d:c8:9d:f5:
ce:10:79:3e:4f:36:e8:84:e0:e8:42:2d:5f:37:62:55:7e:6f:
5d:7a:ad:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:02:03 2026 by rpki-client