Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32342e302f32342d3234203d3e20323138383632.roa
File: 352e3139392e32342e302f32342d3234203d3e20323138383632.roa (raw, json)
Hash identifier: XgBMqQdpjRzemxqmtxohC6ro7vvSYkhqhDjzuhYrKBg=
Subject key identifier: 66:77:56:F3:04:D1:BD:05:9E:B2:21:70:62:92:FD:FE:E9:C8:CE:1C
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 66872E936C9335963852B362FB96C0D7A8551864
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32342e302f32342d3234203d3e20323138383632.roa
Signing time: Mon 07 Sep 2026 06:21:24 +0000
ROA not before: Mon 07 Sep 2026 06:16:24 +0000
ROA not after: Mon 06 Sep 2027 06:21:24 +0000
asID: 218862
IP address blocks: 5.199.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:87:2e:93:6c:93:35:96:38:52:b3:62:fb:96:c0:d7:a8:55:18:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 7 06:16:24 2026 GMT
Not After : Sep 6 06:21:24 2027 GMT
Subject: CN=667756F304D1BD059EB221706292FDFEE9C8CE1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:ac:54:3c:3e:f1:6a:b1:9f:29:34:80:20:
72:16:fe:96:d0:89:96:fa:84:f5:bd:77:08:f0:55:
ee:2a:6d:96:e4:61:66:0c:00:db:9c:8c:07:ce:77:
f5:37:8b:5d:0b:70:e8:de:17:58:35:59:2f:86:f0:
cc:d9:e1:ff:7d:d7:c3:2d:eb:cd:02:d1:d2:9c:ab:
b9:35:ba:fd:9a:7b:3c:81:ad:43:cf:d2:48:61:f5:
e2:4e:f2:ef:c4:fe:a8:cf:b6:c9:1a:15:38:8f:66:
70:e4:7b:e6:89:36:7a:77:f6:b6:91:25:dd:38:4b:
2c:9e:ff:ce:d1:cd:d4:fa:21:77:83:6d:7d:de:54:
94:1f:2f:51:1c:61:e6:00:1d:f0:d7:67:17:91:8e:
0a:bb:12:1d:64:09:87:62:cd:fb:a2:24:fd:6d:6b:
db:2b:82:6f:c5:d1:27:b5:d0:5b:a8:10:ca:18:74:
14:0d:84:e9:93:0f:f3:56:1c:a4:94:4b:88:d4:cf:
d7:92:00:00:ff:56:e4:7d:a9:5e:a8:35:99:fa:2c:
5c:9d:32:35:3e:5b:97:20:7e:49:0c:cd:23:14:49:
2c:43:e0:bb:58:0d:a0:07:5c:a6:b0:01:9d:4a:69:
cd:18:94:28:0e:e3:ce:95:41:06:49:77:84:15:53:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:77:56:F3:04:D1:BD:05:9E:B2:21:70:62:92:FD:FE:E9:C8:CE:1C
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32342e302f32342d3234203d3e20323138383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.24.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ec:09:2e:84:40:fb:9a:19:5c:23:9a:c9:ff:ec:47:8f:d1:
c7:1b:9a:e8:82:ad:c2:e2:b8:21:70:53:3b:93:69:24:1d:da:
66:33:11:10:56:69:61:9e:0f:e5:36:6f:d3:d2:11:aa:a7:f1:
56:dd:14:d8:a7:35:87:bd:30:8b:97:37:16:b3:2f:3e:cd:14:
ac:06:3f:bf:b2:61:b4:1c:38:17:81:a3:c7:2a:07:cd:52:7a:
a5:0a:9f:03:a3:19:d4:df:88:d3:95:48:1b:53:ef:4a:7e:93:
f1:f2:85:80:40:2b:b1:29:e4:45:25:f5:a9:19:cb:71:61:00:
d8:d2:5c:9e:2d:c0:3b:db:f9:78:37:ba:79:8b:bf:78:46:6d:
24:2b:b3:4d:89:23:49:de:da:28:2b:ae:56:fc:ed:fd:87:48:
d3:15:05:c0:b0:58:87:7b:88:5e:85:28:46:6a:99:c8:d0:d7:
8a:ed:36:cc:99:86:4a:5f:fa:0e:16:d2:82:63:dd:d1:67:eb:
97:c2:4c:f6:2e:48:5e:ca:ab:e9:5c:e9:85:78:93:cb:52:7f:
9d:16:08:99:32:5f:1d:ae:ad:d2:41:6f:39:32:51:37:e7:f3:
62:9c:ae:74:08:f9:d5:9d:c8:3a:a2:f8:f6:e8:69:48:ef:04:
77:59:43:57
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUZocuk2yTNZY4UrNi+5bA16hVGGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1
NGFmZGU3NjAeFw0yNjA5MDcwNjE2MjRaFw0yNzA5MDYwNjIxMjRaMDMxMTAvBgNV
BAMTKDY2Nzc1NkYzMDREMUJEMDU5RUIyMjE3MDYyOTJGREZFRTlDOENFMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL4qxUPD7xarGfKTSAIHIW/pbQ
iZb6hPW9dwjwVe4qbZbkYWYMANucjAfOd/U3i10LcOjeF1g1WS+G8MzZ4f9918Mt
680C0dKcq7k1uv2aezyBrUPP0khh9eJO8u/E/qjPtskaFTiPZnDke+aJNnp39raR
Jd04Syye/87RzdT6IXeDbX3eVJQfL1EcYeYAHfDXZxeRjgq7Eh1kCYdizfuiJP1t
a9srgm/F0Se10FuoEMoYdBQNhOmTD/NWHKSUS4jUz9eSAAD/VuR9qV6oNZn6LFyd
MjU+W5cgfkkMzSMUSSxD4LtYDaAHXKawAZ1Kac0YlCgO486VQQZJd4QVU/m3AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUZndW8wTRvQWesiFwYpL9/unIzhwwHwYDVR0j
BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh
NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT
djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct
ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzIzNDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzODM4MzYzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAXH
GDANBgkqhkiG9w0BAQsFAAOCAQEAnOwJLoRA+5oZXCOayf/sR4/Rxxua6IKtwuK4
IXBTO5NpJB3aZjMREFZpYZ4P5TZv09IRqqfxVt0U2Kc1h70wi5c3FrMvPs0UrAY/
v7JhtBw4F4GjxyoHzVJ6pQqfA6MZ1N+I05VIG1PvSn6T8fKFgEArsSnkRSX1qRnL
cWEA2NJcni3AO9v5eDe6eYu/eEZtJCuzTYkjSd7aKCuuVvzt/YdI0xUFwLBYh3uI
XoUoRmqZyNDXiu02zJmGSl/6DhbSgmPd0Wfrl8JM9i5IXsqr6VzphXiTy1J/nRYI
mTJfHa6t0kFvOTJRN+fzYpyudAj51Z3IOqL49uhpSO8Ed1lDVw==
-----END CERTIFICATE-----
Generated at Wed Sep 9 20:27:18 2026 by rpki-client