Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS13030.roa
File: AS13030.roa (raw, json)
Hash identifier: CRj6p3bgrndJnRUuoo2PzEvHenbAICaYcIQKWHGHlGA=
Subject key identifier: 09:F7:95:90:9C:86:7D:E0:D8:EB:62:33:5A:E3:04:D9:2F:95:B5:4D
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 41EE7E19B279F78A009982C26A0975DCF4D15FC6
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS13030.roa
Signing time: Wed 04 Nov 2026 20:32:51 +0000
ROA not before: Wed 04 Nov 2026 20:27:51 +0000
ROA not after: Wed 03 Nov 2027 20:32:51 +0000
asID: 13030
IP address blocks: 2001:67c:2648::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ee:7e:19:b2:79:f7:8a:00:99:82:c2:6a:09:75:dc:f4:d1:5f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:51 2026 GMT
Not After : Nov 3 20:32:51 2027 GMT
Subject: CN=09F795909C867DE0D8EB62335AE304D92F95B54D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:84:34:20:1c:68:9e:46:25:65:28:0e:d5:
a3:d0:26:e3:75:1d:ec:0d:52:be:ce:c7:c1:9c:ea:
a0:50:76:56:a4:e8:42:92:27:a6:d9:e8:37:bd:cd:
2a:4a:b9:df:f8:6a:3b:9c:fa:b2:a7:74:59:0b:91:
7e:e6:0a:00:56:a6:0f:fb:21:a2:68:28:99:47:79:
28:bf:e1:25:37:5f:bf:5b:cd:75:b2:cb:21:65:c4:
06:cf:ca:49:6f:34:75:cb:19:d7:68:6d:a4:69:5b:
b3:6a:70:d1:38:a3:b6:63:00:3b:67:3a:06:ba:72:
47:99:23:1f:5a:ea:70:e9:42:dd:4d:4b:93:16:f5:
5e:13:17:3b:84:9e:7c:9e:65:a8:9a:40:e1:2b:07:
b6:fc:e8:86:49:b7:6d:a8:eb:cd:8c:7f:0a:61:3c:
f8:82:dc:ae:40:2c:f2:1d:cf:cc:51:8b:b3:b1:c5:
5d:e3:3c:bf:a1:94:92:99:2d:e0:39:cb:37:09:e2:
f7:fe:34:73:5d:72:5c:50:0c:ca:2c:69:3b:8c:04:
5d:49:25:6e:3d:61:c7:84:9e:11:ae:33:f4:a3:fb:
48:9d:1c:6e:e2:30:46:ee:33:bc:31:21:6a:a9:0c:
c0:16:1a:b3:a1:ac:bc:aa:b7:10:e7:07:9d:c8:22:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F7:95:90:9C:86:7D:E0:D8:EB:62:33:5A:E3:04:D9:2F:95:B5:4D
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS13030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2648::/48
Signature Algorithm: sha256WithRSAEncryption
a9:35:fa:01:21:9a:3a:f3:44:e9:70:85:57:bd:b8:80:25:a6:
11:bf:00:47:72:5a:df:33:34:1f:09:66:55:a0:9e:1c:41:fc:
82:a3:27:6d:bd:92:cd:8f:8a:24:c6:d7:a9:1e:9e:5b:b9:67:
48:7f:90:fa:0f:d7:6b:81:61:2b:58:2f:ea:e6:32:d5:a7:80:
d1:e8:26:64:b7:c7:55:36:51:1b:b7:11:73:fc:d3:1f:ed:28:
36:97:06:73:ef:bc:ec:b1:df:47:40:af:84:74:4b:74:8e:6f:
9d:93:91:f3:b8:9b:d4:0d:e0:f9:ca:db:93:92:90:ac:42:a9:
33:88:4d:44:5d:c0:d6:d1:ab:25:4f:a4:a7:f2:c9:b4:ef:95:
dc:e3:34:27:93:16:ad:d8:c3:2d:bb:80:2d:2b:88:50:f9:0b:
cc:2d:54:32:b3:8a:e5:f4:c2:bd:3e:df:31:fb:ee:a7:61:0a:
e2:06:4a:6a:37:88:51:0b:c4:53:c6:5d:ae:3e:56:c2:aa:54:
5d:ed:c3:27:2f:5e:12:bf:bc:b6:80:73:23:6b:5d:c6:2e:7a:
c1:4f:79:7d:e9:db:4a:f7:a9:4c:90:a7:0e:02:25:c0:96:2b:
d0:59:1b:07:6b:37:00:4e:85:6f:04:4d:b0:33:66:d5:31:17:
e1:6a:a6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 01:07:52 2026 by rpki-client