Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e302e302f32342d3234203d3e20323139303735.roa
File: 352e3139392e302e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: XjnpVJlTd3qQ+lbWBUwQb+sVyAZicStYCHPNpoz3ScE=
Subject key identifier: 9E:DF:B0:C2:D4:83:1D:9E:C3:65:A5:47:93:F7:C9:D4:73:25:79:3A
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 7518EE9823347BC6487436FB5A4E352EF30DDF65
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e302e302f32342d3234203d3e20323139303735.roa
Signing time: Thu 27 Aug 2026 11:08:42 +0000
ROA not before: Thu 27 Aug 2026 11:03:42 +0000
ROA not after: Thu 26 Aug 2027 11:08:42 +0000
asID: 219075
IP address blocks: 5.199.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 05:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:18:ee:98:23:34:7b:c6:48:74:36:fb:5a:4e:35:2e:f3:0d:df:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 27 11:03:42 2026 GMT
Not After : Aug 26 11:08:42 2027 GMT
Subject: CN=9EDFB0C2D4831D9EC365A54793F7C9D47325793A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5e:59:7e:84:bb:d2:65:b9:6d:b9:36:52:3a:
96:51:24:29:f3:26:97:0e:d1:4b:7f:f0:16:74:89:
78:9c:61:eb:3f:94:74:dc:7c:93:4c:1d:df:28:8a:
3d:78:3c:d2:37:a3:d8:01:2e:31:10:dd:ab:fa:5a:
94:1e:e7:53:1d:11:10:cd:bd:f0:21:a5:8a:25:01:
0a:d4:22:38:d6:ab:22:a6:f6:56:18:df:80:2c:95:
4d:93:ff:48:14:ca:c8:8a:ab:ef:69:b6:82:3f:59:
20:75:fb:7e:86:97:d6:07:31:86:92:7b:43:cb:2a:
4a:3e:05:f5:78:b8:08:b0:3c:85:a5:98:11:b6:b7:
4b:f6:37:9b:bd:a2:88:a1:71:76:f0:f4:7b:17:41:
fc:fe:c7:96:9a:d1:a3:73:01:0a:95:91:1d:cb:0b:
ac:3b:c9:06:c0:52:af:07:18:a5:47:da:80:11:c3:
33:0d:76:eb:11:b1:e9:fd:66:95:2a:f6:96:1d:3e:
c1:02:14:90:21:36:26:77:01:e8:59:40:f6:cb:66:
87:e3:43:3e:50:06:fd:13:4c:70:09:89:e0:37:e6:
e4:41:98:55:f7:31:54:01:98:d9:9a:6e:48:2b:39:
c0:4c:68:cc:49:12:6e:bf:4d:b0:3d:a6:1a:44:6f:
ed:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DF:B0:C2:D4:83:1D:9E:C3:65:A5:47:93:F7:C9:D4:73:25:79:3A
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e302e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:27:18:15:05:34:9b:0a:f3:00:d3:79:47:07:e3:d0:9c:08:
a7:93:fe:e9:2a:83:b5:33:8c:23:27:03:68:c5:59:dd:7a:9d:
8b:3d:53:04:34:0c:fe:b7:14:14:4f:a9:2a:94:05:a1:08:36:
f3:1f:8c:7f:8a:c9:ff:c8:d7:fe:a0:7b:e2:8d:31:87:c6:1d:
bf:40:3a:84:c8:0a:b0:37:2f:27:78:7a:8e:75:6d:36:2d:1e:
74:b6:17:86:87:60:0c:f2:cf:21:1c:30:1c:f2:cb:68:66:8d:
b5:ee:4f:a4:57:b4:e4:d7:c1:b5:1e:d2:14:5b:9a:9c:6f:1a:
11:b6:b6:9a:12:02:3c:ff:cf:a0:bb:33:4f:31:4f:43:9b:19:
a5:c9:a3:51:18:d2:11:1e:68:86:13:22:a7:19:06:16:ec:ba:
06:9a:fa:3b:ab:e4:62:b6:f2:cd:f2:f8:13:dd:dc:8c:a4:86:
a5:53:d8:50:0e:f8:fb:8f:05:36:f5:66:53:c4:01:91:cd:ae:
3f:66:0b:98:04:77:9c:21:db:c8:50:65:a1:94:58:0d:15:2b:
2e:cb:85:1a:b3:a0:6f:37:74:31:3e:08:f4:1d:02:10:ed:4a:
cb:c6:27:41:ea:29:40:fa:30:80:fc:bb:b2:f4:5d:27:b9:20:
06:eb:8c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 21:53:35 2026 by rpki-client