Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32322e302f32342d3234203d3e20323138393635.roa
File: 352e3139392e32322e302f32342d3234203d3e20323138393635.roa (raw, json)
Hash identifier: eH86H3Y96De2fom7ZqsxEgn2vlhvjsyeLVDcd0EDQK8=
Subject key identifier: 57:A6:18:C1:23:30:A7:BD:D7:21:E3:8C:FC:3E:FA:27:0B:A2:0C:07
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 5A136D4133D35CF9353CEAB61157D9F149E1178E
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32322e302f32342d3234203d3e20323138393635.roa
Signing time: Thu 03 Sep 2026 12:11:52 +0000
ROA not before: Thu 03 Sep 2026 12:06:52 +0000
ROA not after: Thu 02 Sep 2027 12:11:52 +0000
asID: 218965
IP address blocks: 5.199.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:13:6d:41:33:d3:5c:f9:35:3c:ea:b6:11:57:d9:f1:49:e1:17:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 3 12:06:52 2026 GMT
Not After : Sep 2 12:11:52 2027 GMT
Subject: CN=57A618C12330A7BDD721E38CFC3EFA270BA20C07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d0:44:ba:aa:02:bf:a3:83:44:77:d9:55:32:
59:c1:5a:d5:21:cb:13:91:7b:86:de:ac:89:5f:f9:
e9:aa:06:74:ce:1f:85:4a:3b:3d:fc:5a:5d:f5:44:
2b:0e:58:93:45:4a:14:3d:55:81:41:0f:80:91:91:
6e:90:d2:22:62:bd:30:cd:19:5f:04:f6:c5:4a:8a:
19:a4:2b:8e:61:7c:26:40:cf:40:52:16:1a:2d:f5:
8b:63:c2:10:fb:64:2c:cd:67:08:68:62:36:ac:d5:
e6:f3:f4:90:d7:37:72:0b:ac:ca:5b:8d:c0:7f:e9:
34:8d:61:74:3d:94:6e:b1:33:fd:35:49:b5:f5:ca:
71:10:61:25:c6:81:4c:16:2d:48:a1:82:72:f2:57:
f8:a2:33:d9:27:1b:8d:c7:17:2f:21:d1:c8:39:1a:
ac:e5:49:80:36:8e:d6:5c:e6:0a:28:ea:59:64:ce:
0d:3b:92:90:fe:17:c9:5a:51:9d:1e:dd:7f:c4:d2:
f1:ba:e0:95:af:2b:7e:4d:f9:d7:19:0c:56:da:77:
4d:d2:62:ac:32:30:1c:4d:66:0f:2f:cc:d0:a8:d9:
70:bf:1e:94:6e:5c:e1:64:2c:b3:d3:c3:d3:d4:d3:
42:08:21:d2:91:f4:2a:fd:7f:71:e5:61:38:fb:9b:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A6:18:C1:23:30:A7:BD:D7:21:E3:8C:FC:3E:FA:27:0B:A2:0C:07
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32322e302f32342d3234203d3e20323138393635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.22.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:60:88:e7:87:4f:62:91:bd:19:ed:83:29:41:4f:8c:8a:44:
26:36:b0:5a:bc:80:bd:e3:0b:0b:a4:5e:f7:d1:be:88:02:6e:
db:a2:76:1c:fb:6d:b3:44:19:61:e3:b7:c2:43:87:a5:13:8c:
47:84:1c:d9:2f:25:ed:02:62:2d:9d:29:99:50:a6:2c:18:f0:
65:f7:63:93:54:d4:ef:e4:6d:5e:8a:fe:86:29:b4:37:b2:d4:
a4:e7:ff:35:80:bc:be:36:22:3b:b4:a1:03:fb:bf:1c:71:60:
cd:fb:5c:9e:4b:15:a4:ab:d7:04:0e:6f:15:89:73:78:96:0f:
b7:70:f4:2e:f6:53:84:e8:92:9d:e2:9f:78:8c:a6:c2:48:ba:
7e:d7:2a:4f:2b:f8:40:28:5b:ee:fc:b8:e8:e0:4f:5e:ff:b0:
94:fc:70:4c:a4:5a:22:7b:85:b4:26:5b:df:77:c6:7e:63:b1:
a6:d0:f1:41:a1:58:94:5d:f4:5e:12:74:c8:3c:1c:06:ea:72:
d6:c6:f9:6f:16:30:65:06:b5:f1:dc:9b:32:66:47:ba:e3:d5:
c9:24:d9:d2:71:cb:2d:72:f3:b9:4b:f6:24:41:82:fd:31:3f:
33:03:1a:82:2e:4e:d4:73:cd:78:ce:a1:48:2c:35:2b:60:c4:
12:78:8c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:29:07 2026 by rpki-client