Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/323030313a3637633a323634383a3a2f34382d3438203d3e203133303330.roa
File: 323030313a3637633a323634383a3a2f34382d3438203d3e203133303330.roa (raw, json)
Hash identifier: 8XxKcj2nW9m04fSRlBrAyKoIjUW7q2tt3+pcn9vDheI=
Subject key identifier: 48:A7:6C:25:A4:1C:93:2D:95:45:15:73:9C:E5:C8:EB:29:C5:54:11
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 0E5EEA24CE4001AB20E316523ABC5E1CFE0358D4
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/323030313a3637633a323634383a3a2f34382d3438203d3e203133303330.roa
Signing time: Wed 06 May 2026 22:13:47 +0000
ROA not before: Wed 06 May 2026 22:08:47 +0000
ROA not after: Wed 05 May 2027 22:13:47 +0000
asID: 13030
IP address blocks: 2001:67c:2648::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:5e:ea:24:ce:40:01:ab:20:e3:16:52:3a:bc:5e:1c:fe:03:58:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: May 6 22:08:47 2026 GMT
Not After : May 5 22:13:47 2027 GMT
Subject: CN=48A76C25A41C932D954515739CE5C8EB29C55411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:ab:e9:8a:fe:5b:d4:4d:62:21:57:2b:af:
0f:cf:ca:b6:f6:dd:d6:a9:7f:fe:2a:d5:ed:9a:0b:
b6:b0:8a:78:7d:89:12:b8:bc:26:31:65:51:21:79:
59:14:09:95:0a:76:90:85:66:63:d9:59:f2:51:4d:
70:b4:de:85:e5:1a:9e:17:e9:9a:d7:3c:3f:86:17:
bc:5d:e8:92:dc:7d:60:be:77:27:71:a3:57:0b:bd:
23:38:6e:b3:be:d9:e2:1b:f4:da:35:2b:b8:12:c6:
11:c0:b2:99:f2:9d:68:c7:16:9a:56:2c:17:b7:ea:
c2:6f:27:74:b5:77:d0:4b:56:a2:8a:55:b6:e1:16:
0d:41:f4:b9:cf:a5:6d:b2:f9:c8:50:23:a5:c4:2f:
0d:47:26:2b:12:95:88:30:03:58:d5:20:ea:0f:35:
6a:fb:cc:bc:02:b8:31:45:ab:aa:98:d6:e3:c3:4b:
1b:78:c1:d4:e0:f9:43:66:4a:36:6a:a3:dd:cc:2f:
e0:5e:80:56:23:48:be:97:4f:cc:c9:95:9b:82:66:
50:a1:1b:ee:89:fd:b9:81:7c:76:67:66:37:0f:02:
b2:85:0a:c7:7e:7f:bf:74:eb:be:38:68:5f:91:d5:
e9:72:64:ce:a8:35:1a:10:79:e5:b2:ef:06:bc:54:
d1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A7:6C:25:A4:1C:93:2D:95:45:15:73:9C:E5:C8:EB:29:C5:54:11
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/323030313a3637633a323634383a3a2f34382d3438203d3e203133303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2648::/48
Signature Algorithm: sha256WithRSAEncryption
22:a8:c6:9e:1d:cd:3b:9d:c6:d8:ed:64:e3:db:1f:fd:84:af:
86:10:59:c4:40:76:17:9d:26:e6:b7:8a:c4:d3:39:6c:51:c8:
31:bd:65:08:20:2f:79:ff:b4:a0:a9:85:6c:89:ac:30:fd:6c:
13:6f:71:50:3f:ec:d4:2b:9b:78:c6:1b:8d:dd:0a:d2:16:09:
1b:4d:3d:e9:80:ba:4c:85:ef:ff:83:92:aa:c1:fa:92:a2:b5:
af:1f:b6:3e:e4:7a:92:e1:78:69:88:70:38:cc:33:8e:c3:5b:
77:e0:05:46:ee:f3:b8:1f:7d:75:16:c7:48:a3:55:44:17:1c:
92:28:db:ad:c7:e1:80:c8:9b:6b:ff:a7:4b:a3:23:c1:b5:8b:
01:f3:ee:82:c3:08:be:cd:97:ff:33:9c:e5:46:dc:77:d1:84:
99:86:51:ab:05:e8:4a:45:28:6d:0c:e8:24:be:08:3a:a2:91:
52:19:af:39:9d:b1:1f:cf:27:f6:94:62:2a:79:35:56:30:7e:
2e:d0:b1:69:7c:3c:97:32:32:a4:87:17:8d:be:37:6a:00:10:
a2:0e:e1:89:f1:73:dc:1c:4c:1e:ab:2c:fb:66:52:8c:4c:8a:
97:6b:0d:e8:1c:a6:26:2e:a7:d9:d7:c5:fb:3c:8c:47:d5:e3:
04:59:db:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:52:57 2026 by rpki-client