Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32302e302f32342d3234203d3e20343032323134.roa
File: 352e3139392e32302e302f32342d3234203d3e20343032323134.roa (raw, json)
Hash identifier: 4vOldu3OCQX8w8flrrqvSA4ohXXSjUBpLoSxR2PuigU=
Subject key identifier: 57:F2:62:E7:8E:8A:BC:3B:59:79:2A:AF:70:17:0A:A6:94:87:6A:2B
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 415B027788E7670CBE2F0334AC4BA3D5466A7F61
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32302e302f32342d3234203d3e20343032323134.roa
Signing time: Mon 02 Mar 2026 11:34:02 +0000
ROA not before: Mon 02 Mar 2026 11:29:02 +0000
ROA not after: Mon 01 Mar 2027 11:34:02 +0000
asID: 402214
IP address blocks: 5.199.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 05:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:5b:02:77:88:e7:67:0c:be:2f:03:34:ac:4b:a3:d5:46:6a:7f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Mar 2 11:29:02 2026 GMT
Not After : Mar 1 11:34:02 2027 GMT
Subject: CN=57F262E78E8ABC3B59792AAF70170AA694876A2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:33:25:9a:c3:9b:3a:c3:7f:b4:c5:58:19:
e2:81:85:c6:d6:75:34:ff:9e:59:62:5e:ba:1e:11:
29:20:23:cd:5f:be:37:e7:b0:85:88:78:b3:d3:74:
92:fc:b2:5c:2b:90:dd:ad:d8:1a:ee:80:0d:4e:08:
e9:76:03:69:14:e8:7b:ae:9f:83:d0:cd:34:92:6b:
88:05:5f:ad:3b:5e:3b:9f:07:f9:e2:b9:24:d1:36:
40:94:ba:9a:fa:7c:c0:d8:99:ed:55:f9:04:d9:7b:
47:ab:d4:e7:29:16:28:ae:52:2d:57:59:be:5a:3e:
6b:75:97:27:4e:de:9b:d2:b4:ec:db:5d:c3:4f:fc:
aa:04:47:d8:c1:a7:b5:96:10:31:10:1b:02:bd:a3:
50:a5:09:82:15:db:90:48:ec:23:cf:fa:89:6c:5a:
4b:08:ac:85:73:d0:ba:e0:fd:17:ea:38:bb:e9:91:
59:59:94:9d:ae:97:8e:9b:a3:92:3c:f7:6c:61:98:
39:59:84:1a:59:61:69:a4:9f:05:8b:f9:1c:6c:21:
c3:69:c8:a7:fe:3b:e9:08:a0:5e:51:b2:18:a4:50:
6d:5a:32:56:ad:bd:8c:54:5d:56:74:b2:6e:3f:f9:
76:11:73:9c:ae:30:af:bf:19:62:d1:90:fd:9b:fe:
2a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F2:62:E7:8E:8A:BC:3B:59:79:2A:AF:70:17:0A:A6:94:87:6A:2B
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32302e302f32342d3234203d3e20343032323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.20.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e5:f5:99:54:67:ec:9e:9c:e2:50:b7:1c:1a:d3:f5:b8:f2:
c8:4e:9b:4b:56:42:6c:a9:14:d3:26:c8:75:23:87:95:f1:1e:
a6:c2:44:44:ec:c2:07:03:23:7c:3e:12:ed:0e:2b:2f:d5:68:
8a:4c:80:73:18:54:ca:39:d2:b6:6c:bc:b4:07:2f:fd:4a:2c:
63:a3:3c:4d:84:86:99:36:e8:56:f8:bf:b9:7e:9b:b4:56:f4:
33:82:3b:9b:7d:44:7f:34:ca:15:7e:c3:60:d0:f7:92:87:21:
ee:3c:bc:12:be:e7:2b:5b:ec:05:3a:00:01:41:20:7d:49:a0:
f9:8d:d1:ca:68:6e:47:98:05:cf:e9:40:d8:1b:92:0c:1b:e6:
40:5c:3a:9a:3a:e9:24:f8:36:20:f3:d2:b0:8a:7d:ba:24:55:
c1:17:1f:5e:fe:82:84:c9:8e:78:f9:20:c4:a3:6a:7a:85:87:
c9:52:58:7d:eb:be:50:87:0e:1a:bd:28:99:8f:4a:9e:a0:02:
e8:28:01:91:37:b0:6a:06:d2:80:3a:a0:41:c4:60:72:51:27:
70:67:e7:b1:08:ff:d5:e1:b4:d1:8d:11:0f:2f:2e:6e:f7:54:
9f:f2:0f:6e:ac:c1:a0:11:73:52:6f:df:82:d0:04:05:9b:a8:
16:10:70:2e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUQVsCd4jnZwy+LwM0rEuj1UZqf2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1
NGFmZGU3NjAeFw0yNjAzMDIxMTI5MDJaFw0yNzAzMDExMTM0MDJaMDMxMTAvBgNV
BAMTKDU3RjI2MkU3OEU4QUJDM0I1OTc5MkFBRjcwMTcwQUE2OTQ4NzZBMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2yzMlmsObOsN/tMVYGeKBhcbW
dTT/nlliXroeESkgI81fvjfnsIWIeLPTdJL8slwrkN2t2BrugA1OCOl2A2kU6Huu
n4PQzTSSa4gFX607XjufB/niuSTRNkCUupr6fMDYme1V+QTZe0er1OcpFiiuUi1X
Wb5aPmt1lydO3pvStOzbXcNP/KoER9jBp7WWEDEQGwK9o1ClCYIV25BI7CPP+ols
WksIrIVz0Lrg/RfqOLvpkVlZlJ2ul46bo5I892xhmDlZhBpZYWmknwWL+RxsIcNp
yKf+O+kIoF5RshikUG1aMlatvYxUXVZ0sm4/+XYRc5yuMK+/GWLRkP2b/irNAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUV/Ji546KvDtZeSqvcBcKppSHaiswHwYDVR0j
BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh
NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT
djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct
ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzIzMDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMjMyMzEzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAXH
FDANBgkqhkiG9w0BAQsFAAOCAQEAo+X1mVRn7J6c4lC3HBrT9bjyyE6bS1ZCbKkU
0ybIdSOHlfEepsJEROzCBwMjfD4S7Q4rL9VoikyAcxhUyjnStmy8tAcv/UosY6M8
TYSGmTboVvi/uX6btFb0M4I7m31EfzTKFX7DYND3koch7jy8Er7nK1vsBToAAUEg
fUmg+Y3RymhuR5gFz+lA2BuSDBvmQFw6mjrpJPg2IPPSsIp9uiRVwRcfXv6ChMmO
ePkgxKNqeoWHyVJYfeu+UIcOGr0omY9KnqAC6CgBkTewagbSgDqgQcRgclEncGfn
sQj/1eG00Y0RDy8ubvdUn/IPbqzBoBFzUm/fgtAEBZuoFhBwLg==
-----END CERTIFICATE-----
Generated at Wed Mar 4 17:24:56 2026 by rpki-client