Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31382e302f32342d3234203d3e20323139333933.roa
File: 352e3139392e31382e302f32342d3234203d3e20323139333933.roa (raw, json)
Hash identifier: BQMnX64PnSNkqWQAUlTf2nEYCEw+4+eRG2N5iu8Mq9A=
Subject key identifier: 4C:4C:5E:27:E1:54:13:48:6F:C7:30:76:CB:BA:4F:7D:28:22:4A:D4
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 15231D98087CF243CF73D2D218379B433E822A64
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31382e302f32342d3234203d3e20323139333933.roa
Signing time: Fri 28 Aug 2026 02:32:06 +0000
ROA not before: Fri 28 Aug 2026 02:27:06 +0000
ROA not after: Fri 27 Aug 2027 02:32:06 +0000
asID: 219393
IP address blocks: 5.199.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:23:1d:98:08:7c:f2:43:cf:73:d2:d2:18:37:9b:43:3e:82:2a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 28 02:27:06 2026 GMT
Not After : Aug 27 02:32:06 2027 GMT
Subject: CN=4C4C5E27E15413486FC73076CBBA4F7D28224AD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:59:49:a2:c2:bb:4c:8b:06:6f:20:08:8e:
28:f5:6c:2e:37:43:7d:6f:f0:f8:c8:d4:5a:0d:c5:
12:83:92:24:e1:2f:2c:00:5b:41:e8:f8:1b:4b:ed:
d6:85:3a:ff:1a:01:da:20:ee:6d:75:41:92:df:4e:
79:74:70:59:f5:01:15:d6:99:13:14:14:03:5c:4c:
a3:85:56:85:35:60:74:bc:f4:d6:33:38:09:9c:18:
44:28:3f:87:3c:d9:36:5a:dd:e2:5e:90:a2:01:80:
aa:70:05:c8:b0:2d:b9:a2:b8:dd:02:f3:9e:8e:d8:
a8:ac:d2:83:d2:17:dd:49:94:b6:8d:70:3d:94:27:
98:83:8d:fb:d8:53:9f:37:1d:6a:b5:c2:39:20:37:
d3:59:24:9e:c4:e4:96:19:88:41:d6:a2:9c:c4:68:
d8:02:b8:7f:82:90:f8:3a:c8:3e:f3:57:41:73:cd:
ac:9f:85:ca:dd:b6:07:c0:72:8d:da:f4:c0:58:a3:
c6:c1:73:33:ae:bf:86:be:a5:89:67:f1:a1:9e:78:
89:bc:98:87:dc:75:67:dd:17:9b:ca:c1:e5:f2:d2:
77:b7:74:99:12:b8:27:79:4e:dc:56:d8:8b:53:74:
d9:af:c1:26:44:4b:cb:aa:6f:eb:aa:b9:70:f3:6d:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4C:5E:27:E1:54:13:48:6F:C7:30:76:CB:BA:4F:7D:28:22:4A:D4
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31382e302f32342d3234203d3e20323139333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.18.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:c2:0c:b8:6a:52:d2:0f:27:28:50:9a:41:35:98:b9:ed:d9:
f0:9e:0f:c2:a8:b9:dc:97:79:ee:d5:72:6b:25:61:ea:64:88:
89:54:f1:18:05:69:df:d0:8d:37:91:95:6f:73:86:45:10:bd:
8c:9b:c6:a3:29:fb:9d:e5:2d:73:40:22:07:7d:05:ee:c4:14:
f1:4f:5d:7b:68:35:e6:e4:15:cb:eb:85:1f:2c:f4:8d:dd:7e:
d2:ae:58:f7:aa:15:a0:99:77:d6:67:d9:00:ea:bd:8d:a8:8a:
10:24:66:f8:cf:04:f5:67:cc:95:51:b2:a7:83:3f:36:4e:19:
01:0b:34:a6:2f:09:c5:ef:ff:19:df:9f:49:5d:80:c1:6d:12:
19:1a:d3:50:68:7a:96:b7:c4:28:7c:19:cc:f4:90:87:45:4c:
2f:59:41:21:f8:ba:b3:de:8f:54:78:bc:25:74:89:77:81:da:
73:f0:11:88:21:32:3e:67:f6:c0:44:4a:22:01:69:fe:85:b2:
1b:53:09:6a:d2:52:3b:ff:54:e0:43:69:c7:a7:f2:a0:a0:5f:
72:9e:df:e3:a3:3c:ee:f8:c1:8c:68:59:47:df:82:3f:37:d5:
cd:f0:3c:c6:f8:4f:b9:c7:fe:86:65:1d:22:bf:ac:7f:11:ea:
ca:fb:91:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:47:39 2026 by rpki-client