Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31382e302f32342d3234203d3e20323139333934.roa
File: 352e3139392e31382e302f32342d3234203d3e20323139333934.roa (raw, json)
Hash identifier: mfAeMVwvBNvX9Tqp67BddeFLJgWSd2IcDf95BBw0ju4=
Subject key identifier: 41:6B:F7:F1:FC:63:80:3D:D3:5F:55:3D:E3:E8:D1:BA:C6:B2:CD:A7
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 3E603C192102329DF33D4521C2FBA1A6C0FCB733
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31382e302f32342d3234203d3e20323139333934.roa
Signing time: Fri 28 Aug 2026 02:32:06 +0000
ROA not before: Fri 28 Aug 2026 02:27:06 +0000
ROA not after: Fri 27 Aug 2027 02:32:06 +0000
asID: 219394
IP address blocks: 5.199.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:60:3c:19:21:02:32:9d:f3:3d:45:21:c2:fb:a1:a6:c0:fc:b7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 28 02:27:06 2026 GMT
Not After : Aug 27 02:32:06 2027 GMT
Subject: CN=416BF7F1FC63803DD35F553DE3E8D1BAC6B2CDA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:f1:b5:3b:3b:a1:3a:a7:9d:30:f9:4b:ff:
27:c0:91:61:20:fb:d9:4a:bd:6b:21:b9:d7:45:f2:
11:b2:35:4f:ff:87:a4:ed:5d:75:8d:a7:9e:5c:6a:
dd:e6:15:2a:77:15:f2:d7:78:b2:95:8d:e9:a8:8e:
93:e1:93:16:cb:c8:9e:85:cf:d0:26:ae:18:55:31:
4f:d3:39:f8:c6:6c:37:fd:3b:18:9c:b9:7f:14:09:
4e:cb:8b:58:d9:07:1c:15:6f:fc:76:0f:ff:cb:55:
3d:99:00:98:ef:22:5f:c2:29:58:12:52:48:ab:fd:
e8:7e:2f:8d:fe:c2:7a:b0:f0:6e:7c:97:a5:66:5e:
2b:58:7e:cb:49:06:99:13:4c:2d:21:c2:54:e4:8b:
49:c0:87:b8:aa:ef:99:41:e7:94:99:37:41:a2:95:
1d:6a:dc:7d:4c:27:62:57:ba:f6:20:d1:e2:89:89:
8e:38:6a:ec:8f:92:5d:fc:64:8c:14:44:c7:16:13:
58:94:55:63:44:11:3f:db:b8:aa:bf:3e:4c:99:be:
64:d5:b3:f7:0a:5b:53:9d:c8:39:cb:01:50:0a:89:
c8:e3:8e:03:32:9e:ed:04:3b:ea:d1:41:0c:95:75:
48:ed:7f:69:e6:2b:fe:e9:23:8d:1f:44:03:18:4d:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6B:F7:F1:FC:63:80:3D:D3:5F:55:3D:E3:E8:D1:BA:C6:B2:CD:A7
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31382e302f32342d3234203d3e20323139333934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.18.0/24
Signature Algorithm: sha256WithRSAEncryption
18:18:ff:65:09:e5:2c:27:ca:5d:2f:86:94:e7:2a:b6:29:bc:
0a:a9:77:23:b6:44:56:23:16:a8:5f:43:a8:bd:4a:ca:60:ac:
84:47:2d:2e:24:75:9e:e5:16:85:e1:dc:d3:62:a1:df:48:ed:
44:16:98:04:95:72:67:b7:f0:e0:52:1b:d9:63:be:7f:66:84:
35:8e:31:dc:f6:ea:e1:f4:03:f3:cd:76:9c:72:17:2d:25:28:
9c:3b:83:28:53:9a:93:e5:84:47:1b:10:1c:2e:8f:3f:bf:21:
2c:0b:72:04:a4:de:98:04:ed:e9:a3:d7:04:32:01:2c:ce:7e:
12:1c:cc:94:3c:2a:d2:91:94:40:ce:46:16:58:4d:9d:20:19:
3f:e1:91:90:0d:21:14:f7:0c:e0:4a:b9:2b:bc:1f:7f:12:18:
57:84:4d:9d:b9:36:ae:40:c2:53:31:c6:6d:76:33:16:9d:a4:
fe:9b:68:46:0a:e9:96:3b:c7:02:84:4a:d3:72:ef:d2:9b:e5:
19:61:01:24:07:39:5a:e2:04:30:89:12:67:c6:9a:66:28:f1:
ed:5d:59:99:93:c5:1d:05:e4:8e:98:b9:37:c5:ba:26:45:ca:
7d:ab:e2:f1:21:df:30:c2:d8:c2:82:c9:69:33:c3:a6:74:2a:
03:34:d3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:47:52 2026 by rpki-client