Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138372e302f32342d3234203d3e203331383938.roa
File: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (raw, json)
Hash identifier: MBztO8w9bm5wzqzKDfI65gL2GObfIUagWkGy+v8p1Mw=
Subject key identifier: 82:27:CD:86:D9:1B:9A:83:73:8A:AF:2F:2B:80:23:B5:98:57:75:58
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 6583726675D58306A44EE46CCCCE6259E2360001
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138372e302f32342d3234203d3e203331383938.roa
Signing time: Thu 06 Aug 2026 08:49:19 +0000
ROA not before: Thu 06 Aug 2026 08:44:19 +0000
ROA not after: Thu 05 Aug 2027 08:49:19 +0000
asID: 31898
IP address blocks: 5.226.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 15:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:83:72:66:75:d5:83:06:a4:4e:e4:6c:cc:ce:62:59:e2:36:00:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Aug 6 08:44:19 2026 GMT
Not After : Aug 5 08:49:19 2027 GMT
Subject: CN=8227CD86D91B9A83738AAF2F2B8023B598577558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:7d:18:1a:93:c7:5a:15:90:24:24:92:6b:
61:60:c7:1d:c4:53:1d:26:70:27:c5:a2:c5:6f:aa:
c5:e3:0e:eb:5d:fd:14:f2:a4:b9:fe:5d:bd:89:6a:
75:44:38:13:c4:29:7b:7b:60:e9:75:62:1d:03:b4:
4b:b6:98:42:a3:8f:80:15:37:4e:e3:ef:62:a5:53:
44:cd:70:aa:a3:1c:94:5e:d5:eb:b4:ae:2b:54:b5:
91:11:0e:a4:12:4b:e3:db:d9:ef:d5:70:ef:76:72:
f6:da:81:5d:eb:11:ce:f2:9e:4c:1c:5b:0b:ce:18:
5d:c0:ea:8f:41:65:e5:09:69:e2:b5:cb:2f:66:a1:
80:6e:f7:25:8e:50:b8:3d:18:83:bd:e6:2a:d9:4c:
d2:46:4f:1c:8f:dd:32:c2:35:28:43:b7:af:bb:4e:
80:7c:3b:53:e8:1c:75:60:ec:6e:9c:7e:1e:99:d2:
02:58:57:7c:71:6e:5c:5c:a9:75:49:09:a3:7d:22:
c1:6c:61:87:b0:0a:64:d8:2d:e0:09:9e:07:74:20:
aa:1e:af:8a:38:ed:38:02:bc:af:fc:c4:43:ff:8e:
61:a9:b3:32:8e:60:a2:f4:b9:f6:09:7c:11:01:25:
86:07:53:d8:92:79:22:6c:21:a3:92:eb:cb:83:12:
ca:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:27:CD:86:D9:1B:9A:83:73:8A:AF:2F:2B:80:23:B5:98:57:75:58
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138372e302f32342d3234203d3e203331383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.187.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:64:37:93:c0:04:7f:3b:37:91:e5:35:f1:1f:dd:8c:fb:bf:
84:11:cc:2c:47:23:a6:2c:86:dd:cc:b5:2f:71:d9:3e:eb:81:
c2:d9:15:8b:bb:34:8c:ac:9c:85:1b:09:ac:50:3a:49:bd:7a:
34:8b:5b:64:a1:98:48:61:fd:18:24:f9:93:11:8d:8d:88:70:
a9:f1:95:93:aa:99:70:81:98:dc:62:52:19:ea:63:0d:33:83:
34:ab:84:32:19:53:27:17:30:f4:7d:1a:41:7e:40:73:98:91:
bc:99:56:5f:2f:91:29:1d:6f:a9:01:d5:e4:6e:7b:78:4a:ac:
02:a5:f6:5f:f0:46:48:fd:b6:07:ec:e8:88:17:04:1b:4f:bd:
3b:82:a1:c4:f0:b3:bc:2e:7b:7a:a8:cd:f7:c6:5b:54:e3:dd:
27:2f:1a:70:60:90:22:d1:01:45:56:94:13:dd:12:9f:e2:bc:
25:32:3d:01:a4:61:fc:2e:05:99:fe:94:df:6d:e9:fd:55:07:
03:76:2c:5d:78:e7:b1:1a:a6:c1:fa:66:8c:79:82:d4:88:84:
c3:8b:15:59:ee:c1:20:1e:8a:95:91:dc:6e:1c:27:67:66:1f:
2b:d4:f3:b5:79:72:6c:38:dc:3f:24:25:28:32:4e:f1:bf:87:
93:5c:61:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:27:16 2026 by rpki-client