Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: FpfFiEx3RVSG2hAmxngCRnhfqdSUdp86IiciMdSESv0=
Subject key identifier: ED:AE:93:C9:E2:61:23:BD:21:6C:F0:2A:EC:74:85:B4:43:36:12:4A
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 4E2EED23085183690557BFE4D75F079581157CB1
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS0.roa
Signing time: Fri 13 Nov 2026 12:04:55 +0000
ROA not before: Fri 13 Nov 2026 11:59:55 +0000
ROA not after: Fri 12 Nov 2027 12:04:55 +0000
asID: 0
IP address blocks: 2a0e:8f02:1100::/40 maxlen: 48
2a0e:8f02:21c0::/44 maxlen: 48
2a0e:8f02:2220::/44 maxlen: 48
2a0e:8f02:f001::/48 maxlen: 48
2a0e:8f02:f011::/48 maxlen: 48
2a0e:8f02:f014::/48 maxlen: 48
2a0e:8f02:f032::/48 maxlen: 48
2a0e:8f02:f03d::/48 maxlen: 48
2a0e:8f02:f047::/48 maxlen: 48
2a0e:8f02:f055::/48 maxlen: 48
2a0e:8f02:f057::/48 maxlen: 48
2a0e:8f02:f05e::/48 maxlen: 48
2a0e:8f02:f078::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 08:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:2e:ed:23:08:51:83:69:05:57:bf:e4:d7:5f:07:95:81:15:7c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 13 11:59:55 2026 GMT
Not After : Nov 12 12:04:55 2027 GMT
Subject: CN=EDAE93C9E26123BD216CF02AEC7485B44336124A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8d:41:ca:ef:2a:32:df:f6:c8:0c:74:3b:ee:
50:21:bd:10:3a:0d:80:17:13:39:bd:91:27:f9:43:
b4:4a:3c:31:2e:dd:ba:1d:aa:84:63:49:87:21:2a:
70:c1:6e:42:70:16:4e:c8:fd:5a:ff:96:e7:8a:2f:
fa:0a:79:ed:df:01:6c:4f:6d:4f:41:2e:48:4d:17:
2b:90:2e:f0:09:c1:7e:25:9e:3e:17:cf:c9:16:21:
56:d7:32:c4:b5:a6:f8:e3:7b:2a:d5:8e:55:f8:7c:
0f:42:ac:14:bf:a8:c1:3d:80:80:40:f9:e8:0c:30:
ab:54:9f:2b:11:c2:24:5e:41:b2:a9:47:f2:18:45:
55:09:fa:8d:af:c0:d4:8c:8a:01:3d:25:37:ee:a5:
a6:66:60:23:1a:53:05:6c:e3:ab:dc:41:16:6b:1e:
f8:0f:38:12:13:fb:0d:59:67:41:b8:9e:87:96:34:
39:70:91:eb:4e:1a:89:f8:33:a3:17:fe:5f:39:47:
4d:62:56:d7:b7:e0:ae:e8:2c:36:74:49:ce:7e:98:
af:0d:02:04:3a:ea:a0:9a:e4:28:8d:22:b8:ac:2a:
e0:36:2e:ca:be:b2:52:29:f2:88:7f:a9:6a:43:e2:
38:41:61:7d:21:be:8e:4c:5f:bd:31:57:b6:8a:be:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AE:93:C9:E2:61:23:BD:21:6C:F0:2A:EC:74:85:B4:43:36:12:4A
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:1100::/40
2a0e:8f02:21c0::/44
2a0e:8f02:2220::/44
2a0e:8f02:f001::/48
2a0e:8f02:f011::/48
2a0e:8f02:f014::/48
2a0e:8f02:f032::/48
2a0e:8f02:f03d::/48
2a0e:8f02:f047::/48
2a0e:8f02:f055::/48
2a0e:8f02:f057::/48
2a0e:8f02:f05e::/48
2a0e:8f02:f078::/48
Signature Algorithm: sha256WithRSAEncryption
68:00:87:dd:24:96:17:01:ea:a4:4e:2c:b6:54:0c:d2:e9:76:
cf:a0:a2:ef:8a:99:06:15:37:d1:d9:cc:84:eb:93:51:50:7e:
6e:51:34:c0:0a:70:7a:36:69:67:75:e3:97:13:a0:03:9d:b1:
e6:9c:8d:67:78:99:07:7c:b2:ac:7e:41:dc:e3:1a:9a:f8:44:
57:60:0a:0f:5c:f3:0a:19:03:51:37:ad:84:08:52:93:67:13:
64:8e:63:23:c0:5a:42:e0:79:75:b0:03:52:4c:ee:e8:eb:a3:
04:60:0d:2f:e7:f8:8c:69:28:d5:7e:3d:2d:cf:c4:7d:bb:9c:
98:af:74:b9:e1:ba:75:c8:a1:71:73:95:8c:38:b6:3b:cb:26:
da:08:a0:6b:a0:ea:83:e9:43:04:31:0e:6a:84:c8:33:cf:0a:
52:23:9f:24:09:74:44:d4:e7:38:e3:96:5c:ed:a1:20:13:f3:
1b:00:11:2f:e5:2e:ed:7e:61:64:6c:86:36:dd:81:b7:db:08:
e1:62:44:6f:e5:d6:17:00:d4:7c:58:19:d1:00:ad:63:fb:65:
4a:d1:e6:d6:3d:77:47:fd:fb:63:d6:b1:00:ca:45:50:06:ff:
75:dd:57:07:da:7a:4d:2a:8f:13:51:c4:99:99:31:cd:2a:db:
c2:14:c3:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:05:04 2026 by rpki-client