Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/326130333a323738303a3a2f33322d3332203d3e203537323338.roa
File: 326130333a323738303a3a2f33322d3332203d3e203537323338.roa (raw, json)
Hash identifier: Z/f6e8Rau3EGgtTxd7qltXWmXln+q6Zo5F9lst2q60c=
Subject key identifier: FB:CA:8D:37:51:4C:63:45:BE:88:13:70:4F:02:49:CF:FD:69:0A:35
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 13ED56F4D48196ED9997A91DBD722BDEE0286182
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/326130333a323738303a3a2f33322d3332203d3e203537323338.roa
Signing time: Thu 05 Feb 2026 11:55:36 +0000
ROA not before: Thu 05 Feb 2026 11:50:36 +0000
ROA not after: Thu 04 Feb 2027 11:55:36 +0000
asID: 57238
IP address blocks: 2a03:2780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:ed:56:f4:d4:81:96:ed:99:97:a9:1d:bd:72:2b:de:e0:28:61:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Feb 5 11:50:36 2026 GMT
Not After : Feb 4 11:55:36 2027 GMT
Subject: CN=FBCA8D37514C6345BE8813704F0249CFFD690A35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:5a:35:d6:2b:9a:d7:a0:2f:0a:e6:e7:c5:
ab:d1:5a:5d:ae:59:0a:f4:1f:cc:1e:a1:72:cc:79:
2b:92:aa:23:33:5b:56:df:09:06:6a:04:6c:88:dc:
8b:bd:1d:aa:1b:90:92:f5:f5:c5:d2:ac:3b:aa:ca:
44:83:92:ca:73:e9:b8:a6:a7:dc:f4:4f:93:53:17:
24:d0:68:2b:e9:c4:d8:18:49:18:44:3b:86:ab:01:
39:23:de:2d:f3:cf:bb:6e:f8:01:44:a9:a5:ce:2a:
1c:21:53:5a:ea:95:8e:eb:d9:56:f4:90:81:a4:27:
58:ce:eb:14:86:61:69:3b:ca:18:b6:08:a4:47:e2:
1c:ab:73:4e:17:6b:a9:3e:ac:9f:f7:7b:d9:83:a6:
3a:00:0a:aa:2a:b1:6d:57:c5:10:da:25:b5:b9:f4:
3d:77:01:df:49:2b:cd:63:14:cb:f2:97:33:b9:7a:
ac:6b:ee:ce:66:28:25:4d:fb:50:c8:52:fb:5e:9e:
b9:e3:2c:a4:ea:00:59:dc:f2:a8:97:e8:da:e8:1e:
40:c1:b6:07:3c:2a:24:31:37:dc:8a:9a:e3:b5:d0:
a6:69:14:14:8d:ec:33:58:94:d8:ca:51:4a:01:d4:
7a:58:f1:53:d0:60:f3:88:71:42:01:b4:01:ca:cb:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CA:8D:37:51:4C:63:45:BE:88:13:70:4F:02:49:CF:FD:69:0A:35
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/326130333a323738303a3a2f33322d3332203d3e203537323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2780::/32
Signature Algorithm: sha256WithRSAEncryption
08:33:bd:89:fa:16:93:1c:85:71:f5:7e:cb:8e:b8:b4:2c:83:
fc:f7:96:17:09:3d:12:bc:ba:3b:92:cf:93:b4:f6:f8:1e:aa:
f4:ce:a3:d3:0f:c9:bb:9d:8a:cf:09:be:6d:17:95:1d:b1:63:
3e:3f:0a:31:92:b9:07:25:7d:5d:13:8c:02:10:43:c1:74:f1:
60:47:7a:3c:67:84:77:60:54:29:4b:0d:b0:a2:af:73:d2:46:
25:e4:17:d0:68:6f:f6:99:23:9d:7c:23:9b:8c:16:8a:5f:17:
91:cb:81:13:24:31:ec:33:fe:17:9d:45:5d:57:79:1b:91:29:
98:0d:80:fb:b0:d5:3d:07:ca:13:0e:67:08:e1:ce:f0:3b:42:
da:d1:d2:39:07:34:d7:b1:5c:07:40:fc:fa:97:7f:90:d9:77:
ca:f3:fe:b4:a2:98:9c:c3:8a:fd:7d:1e:4b:6b:d9:8d:0a:cf:
3f:ae:cc:b4:0e:bd:ef:9e:9d:e3:28:51:6d:f8:c8:e9:eb:36:
ef:64:00:79:52:21:e9:f7:ee:85:08:3c:7f:86:72:d3:30:16:
59:6a:f7:37:11:40:81:75:ed:31:a2:86:64:e1:e0:c5:a6:73:
a5:98:3a:4e:81:42:83:27:39:4b:75:be:2a:39:42:83:0a:82:
ad:27:d2:f4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUE+1W9NSBlu2Zl6kdvXIr3uAoYYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yNjAyMDUxMTUwMzZaFw0yNzAyMDQxMTU1MzZaMDMxMTAvBgNV
BAMTKEZCQ0E4RDM3NTE0QzYzNDVCRTg4MTM3MDRGMDI0OUNGRkQ2OTBBMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCryFo11iua16AvCubnxavRWl2u
WQr0H8weoXLMeSuSqiMzW1bfCQZqBGyI3Iu9HaobkJL19cXSrDuqykSDkspz6bim
p9z0T5NTFyTQaCvpxNgYSRhEO4arATkj3i3zz7tu+AFEqaXOKhwhU1rqlY7r2Vb0
kIGkJ1jO6xSGYWk7yhi2CKRH4hyrc04Xa6k+rJ/3e9mDpjoACqoqsW1XxRDaJbW5
9D13Ad9JK81jFMvylzO5eqxr7s5mKCVN+1DIUvtenrnjLKTqAFnc8qiX6NroHkDB
tgc8KiQxN9yKmuO10KZpFBSN7DNYlNjKUUoB1HpY8VPQYPOIcUIBtAHKy+j9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+8qNN1FMY0W+iBNwTwJJz/1pCjUwHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzI2MTMwMzMzYTMyMzczODMw
M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzNzMyMzMzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoD
J4AwDQYJKoZIhvcNAQELBQADggEBAAgzvYn6FpMchXH1fsuOuLQsg/z3lhcJPRK8
ujuSz5O09vgeqvTOo9MPybudis8Jvm0XlR2xYz4/CjGSuQclfV0TjAIQQ8F08WBH
ejxnhHdgVClLDbCir3PSRiXkF9Bob/aZI518I5uMFopfF5HLgRMkMewz/hedRV1X
eRuRKZgNgPuw1T0HyhMOZwjhzvA7QtrR0jkHNNexXAdA/PqXf5DZd8rz/rSimJzD
iv19Hktr2Y0Kzz+uzLQOve+eneMoUW34yOnrNu9kAHlSIen37oUIPH+GctMwFllq
9zcRQIF17TGihmTh4MWmc6WYOk6BQoMnOUt1vio5QoMKgq0n0vQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:06 2026 by rpki-client