Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: QU/qLFlf7Sr1KA9+iD+5Imt5VThEplitcuFuGbMjhew=
Subject key identifier: 31:B2:EC:58:94:C7:5C:A6:61:B7:3F:86:C9:71:47:BA:47:E8:43:07
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 1C1E25BB0F6183FA564BE2BFBAED7F9F503FAC30
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS0.roa
Signing time: Wed 04 Nov 2026 21:27:54 +0000
ROA not before: Wed 04 Nov 2026 21:22:54 +0000
ROA not after: Wed 03 Nov 2027 21:27:54 +0000
asID: 0
IP address blocks: 2a0e:8f02:1100::/40 maxlen: 48
2a0e:8f02:2220::/44 maxlen: 48
2a0e:8f02:f001::/48 maxlen: 48
2a0e:8f02:f011::/48 maxlen: 48
2a0e:8f02:f014::/48 maxlen: 48
2a0e:8f02:f032::/48 maxlen: 48
2a0e:8f02:f047::/48 maxlen: 48
2a0e:8f02:f055::/48 maxlen: 48
2a0e:8f02:f057::/48 maxlen: 48
2a0e:8f02:f078::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:1e:25:bb:0f:61:83:fa:56:4b:e2:bf:ba:ed:7f:9f:50:3f:ac:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 21:22:54 2026 GMT
Not After : Nov 3 21:27:54 2027 GMT
Subject: CN=31B2EC5894C75CA661B73F86C97147BA47E84307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:2b:13:71:4f:b7:07:42:fe:6e:01:26:61:
db:0f:b0:03:c9:53:cf:89:37:d1:28:ac:f6:72:2c:
90:13:e5:56:0e:ce:7b:70:a3:b3:96:8c:d2:e0:3e:
93:e1:43:4a:f1:dc:e7:e2:cd:d1:67:03:a7:95:0e:
33:6c:98:f8:19:83:7a:85:18:c4:b7:1f:12:76:03:
6d:37:a5:48:9b:85:4e:33:7c:46:ba:99:bb:8d:e5:
97:ad:56:2b:0a:aa:7e:48:9d:2a:29:53:b9:e6:c5:
11:4e:e9:73:a2:19:fa:c3:3a:21:96:4c:ac:31:31:
df:01:e1:08:3c:46:55:24:91:65:30:29:65:4c:7d:
51:dc:ee:8f:16:dd:1c:f7:ea:5f:17:4c:bc:d3:7d:
d2:f8:e8:b4:44:4b:e8:fd:25:48:3c:a2:df:55:ad:
59:a1:00:ec:63:50:e8:e6:db:5d:33:b0:d2:f8:cf:
21:8d:5c:7c:96:e6:70:ea:58:f8:56:d7:94:4b:91:
e9:dd:da:28:fa:49:8d:34:12:59:78:0f:2a:c2:29:
f6:fa:bf:b2:d2:cb:d2:35:ef:fc:00:f5:fa:80:07:
3a:28:16:38:10:95:04:f1:41:32:b8:bc:b3:8b:8a:
ac:4a:cd:e9:29:af:0e:2a:37:55:cf:e4:6b:45:cd:
b1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B2:EC:58:94:C7:5C:A6:61:B7:3F:86:C9:71:47:BA:47:E8:43:07
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:1100::/40
2a0e:8f02:2220::/44
2a0e:8f02:f001::/48
2a0e:8f02:f011::/48
2a0e:8f02:f014::/48
2a0e:8f02:f032::/48
2a0e:8f02:f047::/48
2a0e:8f02:f055::/48
2a0e:8f02:f057::/48
2a0e:8f02:f078::/48
Signature Algorithm: sha256WithRSAEncryption
6c:53:27:98:f0:18:5d:3b:06:5f:cf:e8:ae:01:3c:1e:2e:d8:
6f:ed:d0:cb:c0:89:67:37:d9:bc:99:af:5d:69:a0:9e:04:24:
ef:8f:b1:ea:39:c3:ff:ce:8f:14:aa:71:b8:ba:e0:a3:7d:b8:
70:1d:68:80:0f:18:33:e0:0e:7b:ea:3a:b3:db:92:d6:04:44:
db:e6:91:9f:04:29:61:3a:89:3e:1c:44:dc:8b:4e:6b:52:a1:
7b:3f:4b:0f:0e:98:37:ab:f6:a6:0c:9c:d2:a4:53:40:c5:01:
54:12:14:39:63:f2:22:29:90:9f:99:be:0d:0c:eb:62:f2:08:
6d:f1:f9:96:32:26:27:d5:80:94:a9:17:2e:4a:40:ea:8e:b6:
8e:64:de:9d:ce:8a:20:3a:00:72:b3:6f:8f:47:c3:37:e6:72:
a6:29:f1:a0:82:87:cd:61:3d:d5:df:2a:39:ac:4e:c8:59:95:
5c:5d:d9:14:94:b3:0b:be:fd:21:4d:a7:9c:0f:ce:5d:a2:9a:
bb:d2:7d:39:5a:93:d8:ad:c9:d2:c6:78:f7:44:7d:d6:ca:de:
6b:04:38:78:31:28:7d:33:24:fd:63:44:91:7b:8f:74:bd:83:
9d:7f:fd:6b:5a:e8:cd:a4:02:d5:2a:0d:78:ff:6f:d9:ca:af:
d0:45:13:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHB4luw9hg/pWS+K/uu1/n1A/rDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjExMDQyMTIyNTRaFw0yNzExMDMyMTI3NTRaMDMxMTAvBgNV
BAMTKDMxQjJFQzU4OTRDNzVDQTY2MUI3M0Y4NkM5NzE0N0JBNDdFODQzMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm/SsTcU+3B0L+bgEmYdsPsAPJ
U8+JN9EorPZyLJAT5VYOzntwo7OWjNLgPpPhQ0rx3OfizdFnA6eVDjNsmPgZg3qF
GMS3HxJ2A203pUibhU4zfEa6mbuN5ZetVisKqn5InSopU7nmxRFO6XOiGfrDOiGW
TKwxMd8B4Qg8RlUkkWUwKWVMfVHc7o8W3Rz36l8XTLzTfdL46LRES+j9JUg8ot9V
rVmhAOxjUOjm210zsNL4zyGNXHyW5nDqWPhW15RLkend2ij6SY00Ell4DyrCKfb6
v7LSy9I17/wA9fqABzooFjgQlQTxQTK4vLOLiqxKzekprw4qN1XP5GtFzbFXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMbLsWJTHXKZhtz+GyXFHukfoQwcwHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMHYGCCsGAQUFBwELBGowaDBmBggrBgEFBQcwC4ZacnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81YjU4ZTY0Ni1lN2Ey
LTQ2NWMtODdjNS00M2MzNTlhZDkzNjkvMC9BUzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwcgYIKwYBBQUHAQcBAf8EYzBhMF8EAgACMFkDBgAqDo8CEQMH
BCoOjwIiIAMHACoOjwLwAQMHACoOjwLwEQMHACoOjwLwFAMHACoOjwLwMgMHACoO
jwLwRwMHACoOjwLwVQMHACoOjwLwVwMHACoOjwLweDANBgkqhkiG9w0BAQsFAAOC
AQEAbFMnmPAYXTsGX8/orgE8Hi7Yb+3Qy8CJZzfZvJmvXWmgngQk74+x6jnD/86P
FKpxuLrgo324cB1ogA8YM+AOe+o6s9uS1gRE2+aRnwQpYTqJPhxE3ItOa1Khez9L
Dw6YN6v2pgyc0qRTQMUBVBIUOWPyIimQn5m+DQzrYvIIbfH5ljImJ9WAlKkXLkpA
6o62jmTenc6KIDoAcrNvj0fDN+ZypinxoIKHzWE91d8qOaxOyFmVXF3ZFJSzC779
IU2nnA/OXaKau9J9OVqT2K3J0sZ490R91sreawQ4eDEofTMk/WNEkXuPdL2DnX/9
a1rozaQC1SoNeP9v2cqv0EUT3A==
-----END CERTIFICATE-----
Generated at Sun Nov 8 01:08:07 2026 by rpki-client