Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323038303a3a2f34342d3438203d3e20323134303736.roa
File: 326130653a386630323a323038303a3a2f34342d3438203d3e20323134303736.roa (raw, json)
Hash identifier: o1sHOM85aoxtRyr6aKKyzQqnvJEqVYHtEe373/R2CXo=
Subject key identifier: 29:6A:6F:BB:59:DB:DA:36:5F:1E:F7:74:9B:2F:1E:C0:6D:3C:EF:81
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 7736F3BA4E8C291AB3FE11694544A48A777A0A9E
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323038303a3a2f34342d3438203d3e20323134303736.roa
Signing time: Fri 13 Feb 2026 00:16:41 +0000
ROA not before: Fri 13 Feb 2026 00:11:41 +0000
ROA not after: Fri 12 Feb 2027 00:16:41 +0000
asID: 214076
IP address blocks: 2a0e:8f02:2080::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:36:f3:ba:4e:8c:29:1a:b3:fe:11:69:45:44:a4:8a:77:7a:0a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Feb 13 00:11:41 2026 GMT
Not After : Feb 12 00:16:41 2027 GMT
Subject: CN=296A6FBB59DBDA365F1EF7749B2F1EC06D3CEF81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:58:eb:a1:d2:11:33:4c:00:59:83:fb:99:34:
a4:39:72:95:90:74:83:a6:1d:4f:0e:8e:a7:10:ca:
67:5e:e5:db:bc:72:8a:a3:44:46:64:af:86:cc:42:
a0:c9:c9:da:82:46:8c:11:a2:b1:3a:13:fb:66:40:
00:32:a3:2c:4e:8b:05:ea:34:d7:3f:90:61:bf:98:
b8:94:c2:5f:37:25:0b:b6:9e:50:5f:17:ea:3e:5c:
aa:7c:1d:37:08:c6:0e:d4:d2:68:eb:1c:fc:e6:49:
fb:63:f8:51:ee:f1:33:40:3e:54:0d:2e:e4:2a:e4:
c6:a5:55:b3:8b:75:18:db:37:b0:97:5f:60:bb:4e:
49:45:4c:e2:ad:55:68:02:b0:99:09:a6:a7:33:a4:
91:5f:a8:6d:6a:b3:62:23:ce:04:f1:2d:20:5a:33:
82:58:1c:ed:06:dc:f2:28:ab:64:74:74:8b:ee:44:
f4:af:86:f4:7f:cc:7a:48:42:eb:95:f2:b6:fe:12:
75:7f:32:b3:21:8f:ab:52:57:77:a6:0c:ce:65:bc:
00:9f:3d:18:a8:25:6d:16:af:49:27:d7:6e:3b:df:
8c:cb:b6:3c:0c:9a:31:fa:95:3c:20:3b:d8:03:fc:
cb:d4:7b:e2:cd:dd:20:2e:49:3f:29:38:c1:3f:8c:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6A:6F:BB:59:DB:DA:36:5F:1E:F7:74:9B:2F:1E:C0:6D:3C:EF:81
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323038303a3a2f34342d3438203d3e20323134303736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2080::/44
Signature Algorithm: sha256WithRSAEncryption
22:72:4b:61:dc:b7:6d:be:86:2c:bf:b9:f1:51:e1:08:7c:f3:
55:9e:2f:70:a4:d8:ff:d9:de:d8:75:6b:10:4b:a3:af:fe:40:
0e:15:15:30:ed:67:50:3f:07:15:51:79:7a:c8:2f:7a:2e:c7:
e4:e0:d5:87:92:78:f5:07:83:6f:4b:f9:12:7a:6e:76:a4:00:
7d:81:21:91:d2:55:f4:20:05:5e:87:f5:76:ac:13:c8:c0:40:
e9:29:1d:bc:32:aa:5b:97:34:86:ba:db:8c:6d:c3:df:f2:23:
cb:3b:ee:01:80:63:ad:68:95:95:43:b7:a5:1e:13:47:00:74:
b0:cd:07:a3:95:2e:4a:0b:a9:1d:a9:5a:3f:28:eb:d0:70:2c:
06:76:20:6e:29:63:68:a5:0a:e5:6f:39:ab:b4:1e:2d:7e:05:
9e:34:a1:7e:6a:18:93:da:be:4b:b5:59:44:cf:c9:f4:fa:05:
19:a5:e3:50:ea:22:5f:35:eb:72:28:8c:32:9e:0d:a9:c2:e6:
ae:80:cb:82:0a:38:e7:0a:26:ea:8f:a2:0f:19:cd:fc:0e:1e:
a6:81:60:3b:b3:77:7d:6f:04:ea:c7:de:cb:a6:6f:b8:f1:2d:
ad:3a:e7:90:7c:5b:8d:94:fd:bd:d5:2a:97:3e:20:68:e1:76:
98:31:94:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:22:57 2026 by rpki-client