Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32332e302f32342d3234203d3e20383334.roa
File: 352e3139392e32332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 7bu3MtxL7sIWjVAKCWEcsy1cMAiFzdPEHZgv3P5mkCY=
Subject key identifier: 8B:3D:1E:27:F8:18:E9:F0:12:35:DC:B4:84:D3:08:09:D6:60:E1:5C
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 6F72B8FFECF03EA3AF60C08E501B880AC7F99EE2
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32332e302f32342d3234203d3e20383334.roa
Signing time: Thu 03 Sep 2026 12:13:06 +0000
ROA not before: Thu 03 Sep 2026 12:08:06 +0000
ROA not after: Thu 02 Sep 2027 12:13:06 +0000
asID: 834
IP address blocks: 5.199.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:72:b8:ff:ec:f0:3e:a3:af:60:c0:8e:50:1b:88:0a:c7:f9:9e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 3 12:08:06 2026 GMT
Not After : Sep 2 12:13:06 2027 GMT
Subject: CN=8B3D1E27F818E9F01235DCB484D30809D660E15C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ad:6e:ca:54:78:bb:54:97:0e:9f:4c:56:44:
34:99:8e:16:c7:25:76:2b:db:d1:24:ae:8a:31:36:
a7:44:52:d4:99:88:db:d9:e2:48:b3:a1:db:f9:9a:
dc:15:2e:f5:60:40:fb:77:89:67:08:65:85:92:40:
a7:7f:d9:d1:da:73:89:33:4c:9c:b3:19:dc:5d:91:
df:41:2a:b7:c1:12:72:9b:81:0e:26:44:dc:ca:a5:
e2:54:d7:6d:04:d0:7f:41:ed:fe:a4:18:5d:34:94:
f0:fb:9f:01:3a:96:02:4c:a3:20:d8:a2:dd:ae:e7:
d2:d5:12:47:b2:09:1e:2e:0c:d4:8e:17:fd:c1:a5:
03:88:82:91:7a:cb:bb:a9:6a:d1:32:05:cd:5d:bf:
62:02:ca:d5:24:11:0e:8a:69:bb:f6:c9:3a:8e:ab:
06:6a:52:60:6a:47:08:4c:25:94:f7:1a:59:33:03:
ef:51:76:79:a1:4d:33:0f:9c:a7:8e:9a:88:f3:ae:
81:c3:99:99:e2:97:3c:1f:1a:97:92:32:87:39:3b:
b8:d4:f8:94:fe:40:c0:68:80:35:27:a8:1c:be:63:
77:77:a9:4b:c5:ad:0c:c2:af:5d:b1:9c:7e:ea:6f:
61:6e:7d:8b:b4:37:76:b2:e4:01:80:61:20:b5:1c:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3D:1E:27:F8:18:E9:F0:12:35:DC:B4:84:D3:08:09:D6:60:E1:5C
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.23.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:a3:99:22:8c:fc:db:70:58:ba:67:be:21:5f:c0:cf:b3:c8:
1d:05:8e:6e:26:ca:97:af:56:eb:79:b5:a4:7e:30:a6:51:0d:
1b:7b:1c:80:20:b8:70:19:02:4b:0f:30:04:ca:cf:f8:a4:38:
df:be:04:96:65:cc:5e:ad:d7:4f:ad:79:4b:4b:79:12:15:36:
44:79:20:63:1c:37:23:8b:04:6d:ec:69:d3:d5:ce:a5:cd:66:
3c:ae:ac:95:62:33:20:7f:a8:fb:31:2b:ab:ac:4a:f2:d7:91:
aa:02:e5:61:0e:db:57:9f:34:6c:ae:7b:5e:45:47:5f:9f:31:
e0:0c:41:22:66:0f:63:14:2e:19:2d:aa:5a:62:0c:fb:58:b0:
2c:86:9d:fd:82:56:b0:f5:b7:d1:38:8a:de:81:74:40:5b:e3:
2a:6e:07:a5:81:af:64:a0:e9:d5:b1:d7:be:c5:a6:ef:e0:32:
aa:bc:86:5e:c4:a3:5b:59:d1:84:2a:ac:5b:56:8d:05:dc:27:
15:28:95:6c:1a:22:f6:38:09:f1:1d:42:1e:ec:4a:3a:15:9f:
0a:ac:a0:b8:e4:0a:8e:d8:d8:c8:cd:b1:bf:37:da:a3:a1:0a:
a5:32:54:81:ce:35:a4:8a:f0:4e:2e:d9:e4:20:93:f5:ea:45:
a5:ab:e4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 14:32:49 2026 by rpki-client