Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138342e302f32342d3234203d3e20313532363938.roa
File: 352e3232362e3138342e302f32342d3234203d3e20313532363938.roa (raw, json)
Hash identifier: fPaNTQa7GjqqhcJlXnMtXI5xWeKR+RzUagq8SES2muM=
Subject key identifier: F7:2F:A6:7F:30:81:E0:7A:6C:65:21:CE:1B:94:B6:58:D7:1C:DB:F3
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 429B31C08143AD6BD466D297D6839D9B85AD3971
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138342e302f32342d3234203d3e20313532363938.roa
Signing time: Tue 11 Aug 2026 09:01:49 +0000
ROA not before: Tue 11 Aug 2026 08:56:49 +0000
ROA not after: Tue 10 Aug 2027 09:01:49 +0000
asID: 152698
IP address blocks: 5.226.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 05:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:9b:31:c0:81:43:ad:6b:d4:66:d2:97:d6:83:9d:9b:85:ad:39:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Aug 11 08:56:49 2026 GMT
Not After : Aug 10 09:01:49 2027 GMT
Subject: CN=F72FA67F3081E07A6C6521CE1B94B658D71CDBF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:e3:d4:e0:b6:e5:f3:7f:a0:e6:a4:e0:0f:
f0:a2:d7:fc:78:ef:45:11:68:cf:7c:1f:72:ec:f6:
b1:22:ac:e5:4b:56:c1:dc:16:e1:ec:83:46:e0:55:
68:ae:44:31:65:ae:e5:e6:22:a1:00:15:0e:08:3f:
dd:39:c9:20:e6:b6:e9:32:d1:65:25:da:53:f3:4f:
25:1f:60:45:d5:10:03:e1:8a:f5:05:80:77:5a:5a:
18:d1:04:95:ea:2f:6b:37:bb:b3:52:17:81:6c:00:
39:20:18:ca:d0:f4:8b:0a:b2:82:8d:60:ae:b2:a0:
d8:14:64:44:53:71:81:9e:23:ee:d2:aa:dc:22:1b:
70:ab:03:05:8a:6e:76:9c:fe:a9:e7:45:90:0b:71:
80:e2:ec:29:28:49:72:6f:a0:4a:7c:54:8c:86:9e:
5f:7b:84:97:60:af:6a:8c:07:c4:f0:e7:96:97:9e:
93:5d:95:91:08:51:53:2a:29:1b:1e:ac:5d:bd:14:
bc:4c:5e:dc:91:a7:d8:5c:77:5f:b8:9b:63:b1:d4:
72:11:9c:eb:ff:33:16:a1:f2:a8:92:46:fa:32:d7:
f4:7c:b2:07:6a:65:ec:32:61:2e:b9:b2:2b:3b:f1:
1b:6c:a5:77:8d:b5:cc:72:ba:38:1f:14:58:82:47:
91:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2F:A6:7F:30:81:E0:7A:6C:65:21:CE:1B:94:B6:58:D7:1C:DB:F3
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138342e302f32342d3234203d3e20313532363938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.184.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:d6:a8:8e:70:1e:da:20:01:a0:42:06:d9:58:98:5f:05:a2:
c2:7c:cc:4a:e5:06:e0:f5:03:08:c3:2b:b9:ed:f4:76:5f:67:
09:a1:b9:85:3a:2e:5c:d6:15:48:d5:81:fa:af:7a:06:8f:6a:
41:a9:7f:e7:77:0e:75:5a:93:9e:a8:34:e0:d3:aa:5f:4e:e9:
73:47:52:5f:82:0b:29:d8:66:16:6f:90:fa:1e:d1:fe:29:e3:
b6:7f:15:bc:a7:c6:7e:3b:f3:06:a7:a8:a4:e3:4e:ae:cc:c1:
82:39:5c:cf:ac:3c:9e:36:49:e0:9d:dd:a6:d5:ac:b0:71:b2:
b9:fc:04:7c:56:06:c0:c7:13:07:cb:1e:1a:18:9b:61:af:4f:
e9:d3:a5:1c:ee:76:9a:62:b7:0b:f2:e8:a5:29:62:01:ec:68:
85:64:c3:16:b4:e1:c6:2f:b3:dc:16:76:cd:1a:5d:d8:e9:07:
2a:1d:15:8e:1d:6e:f7:69:07:2c:70:cf:67:98:13:ee:1d:14:
09:3e:58:38:0b:4b:3b:38:c3:08:76:c1:e1:64:62:57:c2:cd:
37:69:2b:5e:0f:c5:9e:d0:08:fb:9f:1e:f4:70:31:76:c4:d4:
b4:e4:51:9c:f7:65:28:68:26:e4:c6:86:66:3b:a3:16:47:bf:
fa:a5:ab:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:28:02 2026 by rpki-client