Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323039313a3a2f34382d3438203d3e20323030383237.roa
File: 326130653a386630323a323039313a3a2f34382d3438203d3e20323030383237.roa (raw, json)
Hash identifier: 7nFTIPTUa21663wN+oGCOzqLYwVD8MNL+9gwQRt5xtM=
Subject key identifier: F5:28:B3:64:24:A9:25:66:75:26:7F:07:42:D4:FA:B1:08:73:BD:52
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 48A06CCA8FBEECFA249915C02AD3CAA4C0D15419
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323039313a3a2f34382d3438203d3e20323030383237.roa
Signing time: Mon 23 Feb 2026 19:15:45 +0000
ROA not before: Mon 23 Feb 2026 19:10:45 +0000
ROA not after: Mon 22 Feb 2027 19:15:45 +0000
asID: 200827
IP address blocks: 2a0e:8f02:2091::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:a0:6c:ca:8f:be:ec:fa:24:99:15:c0:2a:d3:ca:a4:c0:d1:54:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Feb 23 19:10:45 2026 GMT
Not After : Feb 22 19:15:45 2027 GMT
Subject: CN=F528B36424A9256675267F0742D4FAB10873BD52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:2c:4c:6c:c4:cb:63:29:91:3b:f4:e7:89:
cd:26:93:1a:6f:50:5c:6b:ad:0c:df:ab:e7:f4:c5:
d3:1b:ed:22:f2:70:be:1d:a3:72:ac:70:04:47:52:
28:cd:cb:a4:00:e5:c1:91:86:07:d1:2b:6b:dd:91:
15:b1:2f:71:e5:fe:df:f8:41:4f:39:09:22:29:90:
1a:33:e5:87:87:e3:ee:69:69:0f:76:c7:c8:49:5e:
fa:3d:2e:40:c6:68:8a:e8:2c:6a:60:19:21:4d:a8:
66:1e:fc:98:55:8b:f4:11:19:ab:65:e6:ee:b1:80:
7b:4b:53:4f:c5:3f:07:b0:91:95:02:be:b7:ba:55:
86:30:58:d7:4d:d7:cd:2c:e2:2e:40:49:d6:81:71:
cd:1a:d0:24:a1:b2:4a:33:68:55:3e:6f:a9:6c:f4:
0d:68:9c:0c:27:38:39:93:53:c3:e4:7d:e5:1e:b9:
f5:0e:aa:73:0d:51:e9:c2:27:2a:ed:95:6e:ca:39:
24:33:17:c6:b9:65:04:c0:85:9b:08:60:de:0b:4b:
cf:ae:40:16:ad:c5:5e:29:19:3d:7a:e4:c8:ac:1e:
af:e5:9e:ba:bb:c6:47:09:7a:35:eb:fe:c5:0e:05:
1f:3a:95:aa:4b:aa:4e:81:4b:03:2d:20:d1:4b:c8:
06:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:28:B3:64:24:A9:25:66:75:26:7F:07:42:D4:FA:B1:08:73:BD:52
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323039313a3a2f34382d3438203d3e20323030383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2091::/48
Signature Algorithm: sha256WithRSAEncryption
07:8d:e0:70:0c:8f:18:ca:1a:b5:92:a3:95:d0:8a:34:ef:e6:
10:0c:80:8f:ef:35:9e:2b:f3:48:7e:80:81:6b:ca:78:47:bb:
90:df:fd:7f:cf:de:23:7c:84:73:a7:48:35:c8:b9:41:a8:4b:
b9:23:40:99:10:6e:e9:fb:4d:13:29:97:d2:55:3d:df:b9:76:
e7:31:f3:12:dc:d6:c6:0e:6e:eb:85:f4:f3:6f:d2:06:cf:c2:
88:ed:94:a7:e7:a3:44:d6:21:12:c3:d6:45:88:f8:0e:27:ab:
5b:af:7b:68:3a:9f:e5:10:e4:7e:e5:24:98:29:06:93:21:58:
39:4a:b5:57:3e:ff:fb:6e:46:98:7b:8f:19:6d:ae:3c:a4:8a:
32:2f:1b:09:15:46:f2:51:6d:d1:9a:a7:c4:dd:bf:93:92:98:
32:b7:c0:a7:a7:7f:12:d7:b6:1c:7b:69:f3:2f:cb:59:16:71:
b2:ba:00:f5:b0:4e:0c:d9:1f:41:35:3b:90:99:32:c9:87:ce:
41:d6:a4:0d:49:63:4c:c6:68:45:55:97:a8:b7:2d:40:a9:85:
c9:e9:60:36:2e:99:0b:db:8d:9d:d5:ee:63:55:4b:4b:51:56:
e8:2d:2a:19:dc:9a:b8:31:b8:1b:75:41:c0:52:3d:7f:f5:c9:
4e:68:77:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:25:03 2026 by rpki-client