Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138342e302f32342d3234203d3e20313938353636.roa
File: 352e3232362e3138342e302f32342d3234203d3e20313938353636.roa (raw, json)
Hash identifier: wcXEk356NPr5IlsVSUm/Cx3FeZe1mxJ7aYT2EVP7ZBs=
Subject key identifier: D7:35:D4:0E:C6:D8:A3:2A:71:7E:53:7F:EB:AC:C3:5A:15:6B:97:F6
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 31814D497B599EF0A1BFC535DF33ADE8A1C3AB90
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138342e302f32342d3234203d3e20313938353636.roa
Signing time: Mon 28 Sep 2026 09:32:08 +0000
ROA not before: Mon 28 Sep 2026 09:27:08 +0000
ROA not after: Mon 27 Sep 2027 09:32:08 +0000
asID: 198566
IP address blocks: 5.226.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:81:4d:49:7b:59:9e:f0:a1:bf:c5:35:df:33:ad:e8:a1:c3:ab:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Sep 28 09:27:08 2026 GMT
Not After : Sep 27 09:32:08 2027 GMT
Subject: CN=D735D40EC6D8A32A717E537FEBACC35A156B97F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6f:7d:31:a6:7c:8d:6b:b7:1b:e3:43:77:5a:
5d:ce:2e:eb:77:31:f9:de:5d:4f:c5:2c:ee:eb:c0:
d9:3f:fc:68:0f:22:cb:a2:a1:2f:f4:22:ec:3d:3f:
41:d6:6d:8e:92:16:d1:b7:f7:b8:b7:b5:21:e8:df:
28:55:fe:37:0c:a4:f7:24:97:84:e7:b4:33:0f:d8:
b8:a4:b5:54:6b:e9:f5:d3:66:f5:03:8e:f0:73:fa:
dc:bf:cb:0c:c3:6b:c5:f1:0b:f8:b6:1d:df:13:36:
3a:64:0f:40:9d:28:7e:ab:c1:8e:66:1f:fe:38:ae:
86:6e:7d:2a:61:b3:7b:a8:42:30:ec:f4:87:c0:fd:
b6:ee:a2:e1:bb:f0:fc:b1:30:95:df:bb:e0:8a:fc:
67:31:88:96:85:41:1f:20:43:13:60:b2:17:d3:1f:
13:ad:64:ee:c1:52:ea:17:82:8b:15:4d:30:b6:68:
10:38:9d:93:56:c8:61:0c:49:e1:19:0c:ad:36:96:
e0:f4:75:46:ce:34:b0:f1:e4:ac:2d:18:95:c4:e9:
c4:58:73:69:75:49:08:37:c0:d3:8c:e1:af:af:b7:
55:54:d9:dd:d0:af:b7:d4:e5:3a:10:26:d5:97:cd:
f4:ec:4f:f4:5b:98:65:36:77:56:d3:f9:e5:33:e6:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:35:D4:0E:C6:D8:A3:2A:71:7E:53:7F:EB:AC:C3:5A:15:6B:97:F6
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138342e302f32342d3234203d3e20313938353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.184.0/24
Signature Algorithm: sha256WithRSAEncryption
07:26:06:6c:37:d7:24:40:8c:b5:75:29:00:58:5f:dc:0f:83:
89:b9:1f:e6:ae:11:b9:d0:1a:52:26:d6:cc:ff:a2:f0:f0:78:
7c:00:d9:02:4c:90:20:a5:76:74:e4:e2:5c:fd:67:f3:41:0b:
0c:b9:94:a5:e9:31:c3:0d:ee:40:27:8d:dc:56:8e:52:21:e7:
10:bb:ec:d9:5a:3c:64:36:05:0e:0d:9c:e0:2d:b6:71:fe:88:
1a:90:a5:cb:46:b2:87:84:03:a9:89:45:41:09:69:07:99:52:
fd:e6:75:36:b5:5c:12:51:ec:37:92:87:94:c7:db:20:bb:0a:
ae:fa:fb:67:a6:0b:26:52:ea:a5:8d:76:e5:3a:cd:ea:c0:40:
6d:3e:f0:bd:a9:74:b7:62:3b:ce:8f:a9:56:17:07:2f:35:5f:
05:60:63:c4:7f:cc:c3:02:01:da:15:b4:6d:fb:32:1c:e4:56:
1b:ce:4c:2d:41:20:cd:8a:f9:42:c0:ed:cb:8e:99:cb:7b:d3:
0f:75:0e:93:a1:e4:92:9b:e0:07:19:d3:bb:71:fb:9c:e9:17:
d2:63:ab:61:36:8b:89:ce:e7:07:8a:cd:d0:d0:40:64:c5:b9:
93:7e:1c:85:fc:ed:c9:bb:2e:6e:3a:62:d4:a9:fe:fb:e4:6b:
b6:b0:cb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:31 2026 by rpki-client