Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326131323a616638303a3a2f33322d3332203d3e203536383833.roa
File: 326131323a616638303a3a2f33322d3332203d3e203536383833.roa (raw, json)
Hash identifier: HAve/ji1orSnimKsUPxbpcYhByN7HjvHH+zFOwwqBQk=
Subject key identifier: AA:7D:D3:F6:CD:4B:B0:A5:7B:95:F2:BB:C6:4B:7F:99:91:C6:CB:7B
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 4E682A1BE7B11B186CBA08B6C510CE3AB5257F0B
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326131323a616638303a3a2f33322d3332203d3e203536383833.roa
Signing time: Wed 06 May 2026 22:13:45 +0000
ROA not before: Wed 06 May 2026 22:08:45 +0000
ROA not after: Wed 05 May 2027 22:13:45 +0000
asID: 56883
IP address blocks: 2a12:af80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:68:2a:1b:e7:b1:1b:18:6c:ba:08:b6:c5:10:ce:3a:b5:25:7f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: May 6 22:08:45 2026 GMT
Not After : May 5 22:13:45 2027 GMT
Subject: CN=AA7DD3F6CD4BB0A57B95F2BBC64B7F9991C6CB7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6b:65:c2:b5:b9:e7:fa:15:a8:05:3f:3a:dd:
1e:20:22:17:10:05:9c:d0:9a:65:ac:9a:9b:03:b6:
91:5a:d2:93:c3:b9:6f:e2:7e:bf:a4:c3:56:fd:bb:
25:d9:55:52:ee:d0:99:59:bc:25:97:b3:84:bb:18:
cd:c6:d8:6f:c1:d9:9a:5e:69:9a:c5:28:c5:6c:b0:
02:83:6e:d1:d9:a7:0c:68:ed:a8:19:f3:2d:01:71:
9b:85:85:b0:1e:ba:42:81:72:ae:3c:11:d9:c9:bc:
d7:8d:ea:12:a1:04:59:d8:09:c8:c7:85:12:da:b8:
57:9b:94:aa:4d:88:74:d4:8e:44:8f:b6:50:aa:12:
7e:df:ec:bc:6a:98:bf:4b:d0:ea:59:18:46:1e:1c:
ac:f6:65:1c:f4:91:d3:c0:d4:fc:8e:9e:7d:f8:9e:
73:0e:eb:d1:bd:92:d7:9b:24:86:6c:f5:20:fc:29:
b5:9c:c4:ca:15:e2:3e:a4:0e:0b:ff:28:3d:d9:8f:
01:90:70:d3:73:1b:a5:00:5c:bd:df:9b:c0:bc:aa:
9c:1a:da:73:d9:5a:7c:70:fd:73:3c:f8:07:8f:5e:
d7:06:72:c8:aa:9c:c8:35:97:f6:e1:e2:f5:82:ba:
df:cf:70:d5:9e:4c:6b:ff:1a:74:e6:11:a8:fd:03:
ff:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7D:D3:F6:CD:4B:B0:A5:7B:95:F2:BB:C6:4B:7F:99:91:C6:CB:7B
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326131323a616638303a3a2f33322d3332203d3e203536383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:af80::/32
Signature Algorithm: sha256WithRSAEncryption
05:d7:5b:c1:e2:b4:4c:e9:ca:c0:9d:d9:d8:2b:19:f3:cf:5f:
bf:4e:69:8b:10:15:26:a8:bc:cc:db:a0:fd:8e:44:e4:52:9c:
bd:4f:cf:c8:39:22:d6:56:53:df:20:27:8d:f9:6c:cb:53:2b:
3c:eb:8d:f7:2a:bb:59:62:f3:fc:e7:b3:8d:e2:8b:fb:49:c3:
27:f3:8f:91:0a:fd:67:01:9a:79:0e:33:5c:b5:ce:6f:b3:d2:
24:2f:63:ac:a5:ee:9f:a3:40:e5:eb:f8:6d:3c:fb:c0:f4:c8:
29:52:95:58:a8:f3:ac:ee:92:62:55:7a:39:ca:7e:c1:af:60:
a9:a5:4d:5f:e7:4b:1c:d8:70:8a:72:43:30:58:12:e5:40:df:
d0:82:c2:c2:c2:10:c1:87:2b:5e:f8:7c:1c:7c:60:18:40:0c:
73:26:17:87:47:64:11:40:7c:ed:f3:48:eb:46:67:a4:13:39:
53:85:57:50:6b:26:da:96:bc:31:d7:76:9d:f3:3a:1a:a2:ad:
e3:ae:c6:cf:69:a0:63:16:45:24:2f:12:ca:7e:9a:68:d8:06:
fb:b5:b8:8c:1c:f7:f1:e6:ae:f8:10:af:9a:6a:bd:e9:6b:34:
7f:54:ba:96:a6:2d:88:05:a5:71:a9:5b:e1:be:e8:3f:a6:e1:
80:8f:1a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:04:51 2026 by rpki-client