Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138362e302f32342d3234203d3e203633303233.roa
File: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier: fPwJ5Sy/oz+WsKDVoSFpEWtFBdtjKpm8boIM97/qBQc=
Subject key identifier: 2D:D3:3C:64:94:BC:E0:F2:A2:46:2C:99:5E:68:F7:D1:0E:8D:D1:B7
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 3813BA8921984BAAF07864A79FE7A4715B1AFDFF
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138362e302f32342d3234203d3e203633303233.roa
Signing time: Sun 31 May 2026 13:47:19 +0000
ROA not before: Sun 31 May 2026 13:42:19 +0000
ROA not after: Sun 30 May 2027 13:47:19 +0000
asID: 63023
IP address blocks: 5.226.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:13:ba:89:21:98:4b:aa:f0:78:64:a7:9f:e7:a4:71:5b:1a:fd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: May 31 13:42:19 2026 GMT
Not After : May 30 13:47:19 2027 GMT
Subject: CN=2DD33C6494BCE0F2A2462C995E68F7D10E8DD1B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c5:65:90:6b:80:8f:8a:a3:59:51:be:56:23:
bb:fb:53:70:c5:21:0e:fc:e5:c8:5a:4b:46:e6:ad:
2a:a6:29:57:04:89:f0:15:19:64:fc:74:32:f6:bd:
45:e8:66:26:f5:e1:02:df:ac:fb:26:50:0b:58:ba:
06:4c:b3:48:2b:26:2f:74:4f:56:f8:97:61:9c:6a:
d0:8e:40:99:bf:42:d0:11:f3:84:f2:5f:a8:72:33:
93:3b:43:c9:97:a8:f1:e3:f2:eb:34:e7:51:54:01:
50:e9:d0:c2:68:57:c8:bf:7b:c8:dc:d6:a3:6d:03:
a9:e3:67:ec:cd:d9:e3:e0:90:47:1b:3b:c9:8c:2f:
fb:bb:fd:c7:3a:59:fa:35:bc:e1:0a:37:18:83:6d:
f6:91:22:68:46:78:c4:29:64:ce:7a:67:a9:aa:f6:
79:a5:bb:ce:34:cd:29:32:6d:d5:d0:cb:e6:a7:92:
cd:57:b0:61:19:93:fd:4d:de:2c:0a:13:a3:a4:09:
13:71:e2:3d:36:c4:b3:c7:29:80:13:fd:b3:e6:00:
81:df:ed:da:93:8e:8d:21:d6:70:84:ce:fe:07:f6:
31:d0:91:af:b5:88:04:81:a1:61:df:15:76:68:47:
df:9a:f3:86:48:56:6d:0f:2e:ec:e0:c8:bd:80:8a:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D3:3C:64:94:BC:E0:F2:A2:46:2C:99:5E:68:F7:D1:0E:8D:D1:B7
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138362e302f32342d3234203d3e203633303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.186.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:5f:1b:8d:03:8e:57:19:74:90:1c:f7:e0:bc:a0:5c:97:65:
8d:38:59:cf:d2:9d:62:ba:68:8b:75:8a:12:1f:6b:1a:52:23:
3a:bb:53:3d:a5:6c:1b:ef:d2:1e:1d:d4:14:b0:e6:a6:64:b9:
e0:99:22:4e:30:99:e6:4e:79:7d:16:b8:f5:69:81:cc:21:08:
25:d0:5f:f3:cc:dd:77:84:a8:ff:83:37:31:9a:b1:1a:25:99:
9d:12:22:53:7e:86:dc:31:5e:dc:2d:41:a6:35:e5:b1:d2:94:
fd:d8:59:6a:e6:4c:52:44:62:c8:64:7b:99:68:2d:20:dd:23:
5b:01:02:73:6e:a5:b7:4e:0d:ea:26:1d:c5:39:5a:48:d3:4d:
95:16:7c:6e:21:8b:83:63:b4:fb:b7:36:5f:87:57:cf:72:59:
32:2d:f9:f3:34:d4:fb:69:59:14:0c:1a:46:0e:48:2d:51:bb:
f7:49:dd:36:d0:52:80:de:c3:51:10:b3:e3:2e:bb:d7:32:dd:
18:d7:da:12:e6:8d:f9:82:95:24:da:a7:88:08:9c:33:a0:5d:
58:3f:bc:4a:a2:26:0b:36:91:73:c8:31:72:b0:8c:23:f0:45:
3a:cc:24:ce:b5:40:57:35:ae:e1:44:e4:38:2e:7e:a5:55:a2:
56:d8:70:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:16:49 2026 by rpki-client