Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139302e302f32342d3234203d3e20343032323635.roa
File: 352e3232362e3139302e302f32342d3234203d3e20343032323635.roa (raw, json)
Hash identifier: HgLcsaXc8NU0IQnjr5slaD2eRW6BWSzmDjuz7IxzdcA=
Subject key identifier: 67:5B:6F:E7:A5:F1:06:35:EC:09:AE:4B:60:B6:7B:84:3E:FB:0B:D4
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 4491DF6C9CA0EFA2C1AE2D8C4C552B36A1215C1E
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139302e302f32342d3234203d3e20343032323635.roa
Signing time: Thu 03 Sep 2026 15:07:19 +0000
ROA not before: Thu 03 Sep 2026 15:02:19 +0000
ROA not after: Thu 02 Sep 2027 15:07:19 +0000
asID: 402265
IP address blocks: 5.226.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:91:df:6c:9c:a0:ef:a2:c1:ae:2d:8c:4c:55:2b:36:a1:21:5c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Sep 3 15:02:19 2026 GMT
Not After : Sep 2 15:07:19 2027 GMT
Subject: CN=675B6FE7A5F10635EC09AE4B60B67B843EFB0BD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:dd:ae:44:0f:43:e8:56:0d:b6:97:a2:ec:
fa:4d:3e:df:44:6c:73:1a:06:63:3e:2c:02:65:01:
fd:68:ba:6d:51:43:e5:4c:c7:90:41:15:51:58:9b:
13:4b:21:f6:bd:a5:5c:5f:11:44:38:ba:da:1c:ef:
45:c1:64:6a:2e:b5:09:e3:6c:af:21:1e:c8:db:2b:
64:e0:d8:50:32:1e:6d:0a:de:62:c3:4c:ac:5b:6a:
75:1f:54:54:7a:3c:0b:ec:8b:70:8a:a8:ef:a4:4b:
8c:c8:80:4e:84:28:14:f1:09:b3:99:ba:dd:68:7b:
31:f5:c6:85:a0:84:30:4f:05:81:c1:5f:31:7d:61:
79:9c:e5:13:be:a3:7b:24:8d:7e:a7:6c:ee:76:42:
1a:3a:65:36:f0:f8:2a:bc:c1:2e:68:03:c0:ea:2b:
c9:71:6e:e6:51:e9:84:e8:9c:86:1c:7f:a8:fe:57:
54:9e:71:13:b0:65:85:7a:60:61:c7:63:43:0f:a6:
8b:d8:92:ad:ec:76:52:be:57:85:10:e6:07:0d:36:
75:67:8e:1b:fb:c2:f3:21:c6:1c:27:e2:91:cb:4a:
57:b1:33:88:ef:a5:95:6a:77:3a:9c:b2:55:b6:af:
4e:14:cc:a3:c1:4a:98:c3:4b:e0:27:9f:ee:de:27:
fc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5B:6F:E7:A5:F1:06:35:EC:09:AE:4B:60:B6:7B:84:3E:FB:0B:D4
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139302e302f32342d3234203d3e20343032323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.190.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:43:4a:93:6e:ec:22:90:3d:83:69:8f:c2:52:03:69:0e:0a:
34:de:9f:d6:dc:64:a7:d4:bf:11:60:ea:66:97:19:d0:19:b2:
a1:c8:d7:17:7d:46:40:a9:37:1e:f0:6b:08:48:c7:e7:a7:54:
b3:0a:f4:a2:43:d5:03:83:db:94:c7:12:79:37:a0:e2:72:ae:
cf:67:6f:f0:7d:ee:d6:f6:07:d3:9c:30:85:ae:ec:2f:10:88:
ae:25:5a:90:0b:b6:26:80:7f:9f:fc:fb:45:66:ac:1a:30:a5:
29:5f:f2:76:44:b8:64:7c:a6:1c:27:ad:94:61:e9:3c:7f:f9:
6d:92:9a:3d:f6:d8:41:ba:3e:af:40:cd:b3:2d:5f:b6:21:68:
6d:b1:18:96:a1:3e:c7:3c:70:21:79:5a:81:15:e2:f4:90:04:
f1:02:4e:4c:d6:c9:31:af:ac:9e:c5:f4:93:23:04:0d:0b:22:
2b:88:60:52:2e:3a:e4:e2:1d:2e:59:8e:53:fc:38:5d:eb:a8:
b1:42:c7:76:ab:e1:b5:72:34:2f:01:3a:2d:1b:95:42:3b:90:
17:e8:d1:23:30:19:0f:aa:77:e9:23:57:cf:ea:c4:2c:16:07:
33:76:fe:69:5c:47:e4:ca:00:c4:85:32:c4:bc:b2:07:f8:c2:
ef:40:26:d7
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIURJHfbJyg76LBri2MTFUrNqEhXB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNjA5MDMxNTAyMTlaFw0yNzA5MDIxNTA3MTlaMDMxMTAvBgNV
BAMTKDY3NUI2RkU3QTVGMTA2MzVFQzA5QUU0QjYwQjY3Qjg0M0VGQjBCRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOat2uRA9D6FYNtpei7PpNPt9E
bHMaBmM+LAJlAf1oum1RQ+VMx5BBFVFYmxNLIfa9pVxfEUQ4utoc70XBZGoutQnj
bK8hHsjbK2Tg2FAyHm0K3mLDTKxbanUfVFR6PAvsi3CKqO+kS4zIgE6EKBTxCbOZ
ut1oezH1xoWghDBPBYHBXzF9YXmc5RO+o3skjX6nbO52Qho6ZTbw+Cq8wS5oA8Dq
K8lxbuZR6YTonIYcf6j+V1SecROwZYV6YGHHY0MPpovYkq3sdlK+V4UQ5gcNNnVn
jhv7wvMhxhwn4pHLSlexM4jvpZVqdzqcslW2r04UzKPBSpjDS+Ann+7eJ/xRAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUZ1tv56XxBjXsCa5LYLZ7hD77C9QwHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct
OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzUyZTMyMzIzNjJlMzEzOTMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMyMzIzNjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
BeK+MA0GCSqGSIb3DQEBCwUAA4IBAQAuQ0qTbuwikD2DaY/CUgNpDgo03p/W3GSn
1L8RYOpmlxnQGbKhyNcXfUZAqTce8GsISMfnp1SzCvSiQ9UDg9uUxxJ5N6Dicq7P
Z2/wfe7W9gfTnDCFruwvEIiuJVqQC7YmgH+f/PtFZqwaMKUpX/J2RLhkfKYcJ62U
Yek8f/ltkpo99thBuj6vQM2zLV+2IWhtsRiWoT7HPHAheVqBFeL0kATxAk5M1skx
r6yexfSTIwQNCyIriGBSLjrk4h0uWY5T/Dhd66ixQsd2q+G1cjQvATotG5VCO5AX
6NEjMBkPqnfpI1fP6sQsFgczdv5pXEfkygDEhTLEvLIH+MLvQCbX
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:09 2026 by rpki-client