Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31372e302f32342d3234203d3e20343032323134.roa
File: 352e3139392e31372e302f32342d3234203d3e20343032323134.roa (raw, json)
Hash identifier: bw6FRD5oSFz7ku92xfxJk+q4X2qXDgaKezq8BuuLRzQ=
Subject key identifier: 67:93:3C:1D:8F:50:05:06:28:FD:D2:C1:23:64:D4:3B:AC:48:7F:4E
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 4F379E80354A860127FE630E480C86C977D2AD52
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31372e302f32342d3234203d3e20343032323134.roa
Signing time: Mon 02 Mar 2026 11:34:01 +0000
ROA not before: Mon 02 Mar 2026 11:29:01 +0000
ROA not after: Mon 01 Mar 2027 11:34:01 +0000
asID: 402214
IP address blocks: 5.199.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 05:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:37:9e:80:35:4a:86:01:27:fe:63:0e:48:0c:86:c9:77:d2:ad:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Mar 2 11:29:01 2026 GMT
Not After : Mar 1 11:34:01 2027 GMT
Subject: CN=67933C1D8F50050628FDD2C12364D43BAC487F4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f2:4a:34:36:d7:33:36:af:24:31:a8:01:3a:
c6:31:66:74:7a:a7:ed:ea:e0:86:d4:4b:ec:b4:b1:
c7:85:c4:d1:7f:86:2c:e4:c4:bb:ba:4e:34:c3:a9:
0d:fc:99:40:6d:78:9d:63:98:f2:ff:4d:76:79:83:
51:7c:50:a5:8d:54:3c:fd:36:f9:f4:5b:99:2f:d8:
82:34:3f:5e:10:b7:d7:c9:57:3e:39:ed:5d:b5:00:
12:7c:4d:e0:37:d0:47:51:69:2c:2d:03:c3:f6:0c:
c0:eb:6b:10:14:a8:1e:0d:0b:c9:ef:02:db:34:b1:
7e:d9:2f:ad:a6:8d:33:2a:00:7e:f9:84:a4:d3:bf:
fd:14:1b:d7:9c:64:b4:11:a6:6a:eb:d3:f9:d1:04:
c8:97:ad:0e:88:07:6f:09:55:4c:b9:c4:36:af:78:
3d:28:41:a9:6f:9c:50:ce:29:49:f3:e1:26:fb:7e:
22:49:2f:af:88:a0:d9:eb:18:ee:f3:a7:9a:7d:31:
04:84:e5:2b:16:d9:5e:0a:35:0d:c8:01:cc:a9:47:
c5:7c:ab:e4:1c:2f:88:bf:36:8a:ab:83:b6:64:41:
ce:ce:e2:60:ef:9a:62:2b:ed:f9:6c:45:2a:d3:a0:
f6:eb:b5:ac:cb:b4:af:0c:2e:90:51:03:75:82:ad:
e0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:93:3C:1D:8F:50:05:06:28:FD:D2:C1:23:64:D4:3B:AC:48:7F:4E
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31372e302f32342d3234203d3e20343032323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:7a:52:b9:ac:80:7b:ed:e4:11:2b:fd:56:4f:6c:c0:87:b4:
c6:54:10:20:21:b4:79:05:ba:c9:42:be:1c:9e:49:65:53:46:
3d:05:bb:b0:24:b2:29:6f:48:cd:f3:31:f7:35:55:ac:0a:54:
99:30:9e:3c:ac:21:5d:13:dd:87:72:3e:94:64:06:65:47:79:
33:98:db:13:15:3d:0e:07:6d:34:83:0f:67:56:6a:89:95:16:
ee:c1:60:6e:e9:73:aa:5e:75:d3:cc:8c:a8:fe:21:36:e6:63:
c4:c5:31:c9:52:5e:35:1d:b8:07:2b:b5:d1:69:97:ee:8a:a0:
2c:5e:e8:a5:a7:e5:e5:59:8a:aa:37:0f:e9:c0:92:b4:e4:9f:
3c:9b:73:e9:2c:40:88:94:55:59:f6:b6:ad:69:25:de:7c:3a:
16:cb:a6:21:6d:a9:dc:7f:02:e1:54:fa:45:52:8f:a2:f7:8e:
35:aa:26:de:a4:2e:91:7c:9c:d0:1c:2c:0c:31:58:6f:82:5a:
08:d4:02:25:e6:ea:fc:cf:d7:ce:5d:60:37:11:a4:8c:6d:11:
55:2e:c9:f8:77:94:0a:de:6a:be:63:71:ac:2e:49:20:5b:35:
fd:4f:71:ac:46:58:e1:6b:86:33:ad:96:35:27:d8:da:08:90:
0a:bc:ea:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 17:24:56 2026 by rpki-client