Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130303a363334303a3a2f33322d3332203d3e203538323939.roa
File: 326130303a363334303a3a2f33322d3332203d3e203538323939.roa (raw, json)
Hash identifier: afH/ttpSHcG1PRc2wpS3ZcWTUwWgfsrc7Z86+uvOzog=
Subject key identifier: A7:55:C3:2A:4A:32:4F:13:CA:C8:E8:C7:11:00:33:DF:92:82:A6:D4
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 53D743AB02357569B53B947D1FD2E534208B1E3D
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130303a363334303a3a2f33322d3332203d3e203538323939.roa
Signing time: Wed 06 May 2026 22:13:46 +0000
ROA not before: Wed 06 May 2026 22:08:46 +0000
ROA not after: Wed 05 May 2027 22:13:46 +0000
asID: 58299
IP address blocks: 2a00:6340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:25:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d7:43:ab:02:35:75:69:b5:3b:94:7d:1f:d2:e5:34:20:8b:1e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: May 6 22:08:46 2026 GMT
Not After : May 5 22:13:46 2027 GMT
Subject: CN=A755C32A4A324F13CAC8E8C7110033DF9282A6D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:c1:80:09:e1:4c:51:c0:3b:53:e8:8a:09:
f4:f3:a1:99:07:de:b8:b0:0b:58:f4:98:94:e2:40:
58:5a:93:6f:c8:89:bf:36:16:4b:b3:1d:8c:1f:4c:
f4:20:85:e6:85:88:ee:37:bc:02:fc:80:b9:cd:4c:
db:b8:f8:cf:b6:41:a1:51:39:89:13:af:ad:93:c7:
31:30:6f:b9:4c:2b:47:9e:85:50:7f:a3:ec:20:5e:
0d:18:de:99:ea:7b:fa:32:05:b1:1f:f7:77:6c:88:
41:63:f2:bb:08:9c:5b:6a:93:e2:70:9b:74:c3:83:
f4:49:fe:1c:76:54:31:84:b8:4d:56:ec:23:03:cb:
b3:37:6d:ef:05:4a:30:b2:e1:aa:21:a6:0d:89:16:
87:8b:f3:b1:99:57:e4:de:4e:83:e0:05:06:13:dd:
5a:7b:4e:ca:c3:e4:70:fa:c6:be:4b:a4:9e:df:2d:
a4:e8:1b:cd:28:32:3b:67:39:96:a8:b9:1c:2f:d9:
66:6b:85:15:23:06:a6:e4:83:27:a9:ab:f4:f2:7b:
6e:7b:83:30:d9:e9:d9:38:98:e7:72:1c:f2:56:36:
8f:31:06:9d:28:60:aa:3e:51:ef:de:5d:ea:b8:25:
7a:23:ca:02:10:d4:25:31:2f:a2:68:c2:64:88:02:
b6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:55:C3:2A:4A:32:4F:13:CA:C8:E8:C7:11:00:33:DF:92:82:A6:D4
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130303a363334303a3a2f33322d3332203d3e203538323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:6340::/32
Signature Algorithm: sha256WithRSAEncryption
8f:f2:0d:d8:ff:75:62:a3:52:a0:fd:da:48:ac:fa:60:41:ac:
82:4d:5d:58:b5:e2:17:68:58:c9:21:81:c3:68:1d:d6:7d:7c:
b4:9b:67:e0:86:4c:25:75:ba:4b:de:fe:96:4c:60:ca:0d:3b:
12:09:31:a1:d8:89:36:d2:94:a5:3b:5c:83:05:14:0f:f5:b8:
80:08:2f:94:7d:d0:f0:2a:93:a7:eb:8b:f9:ed:20:12:e4:e5:
1d:ff:29:0c:49:1f:8e:d9:80:e1:18:33:f8:ae:d4:7d:7b:46:
6b:05:49:fd:7f:a0:92:7b:69:8b:48:a5:5f:f3:db:ec:c9:68:
6b:9e:56:94:48:3b:de:4f:7b:cd:bd:59:e8:a8:8c:32:45:a1:
3f:0e:44:4e:48:cc:ad:da:ad:8f:8a:79:d6:a1:aa:ee:6b:c0:
19:37:b4:03:34:97:fd:4f:b2:9f:2a:fb:e3:ee:d1:05:bc:60:
c6:be:7e:93:ac:c5:99:d7:a7:50:6c:14:aa:1f:02:28:d7:db:
e0:81:da:59:8d:09:26:7c:2e:f9:cf:d2:34:c1:54:2b:00:79:
39:31:9b:e4:ea:c8:db:0d:00:22:3f:ea:6b:7d:a8:ae:16:95:
d1:ac:89:80:6b:2f:de:f0:02:fc:5b:8c:be:8e:46:2f:39:20:
dd:65:87:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:34:42 2026 by rpki-client