Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32362e302f32342d3234203d3e20343031373736.roa
File: 352e3139392e32362e302f32342d3234203d3e20343031373736.roa (raw, json)
Hash identifier: lGtcVlBveO7MwWT+dil/FzejVf36iV1+0mKRJmTvUvA=
Subject key identifier: E5:FA:C3:F8:61:32:36:35:22:83:81:A2:08:05:62:4D:DE:DF:EB:F2
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 291D751293E848166CA7ED9E272D3AF6B39506CB
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32362e302f32342d3234203d3e20343031373736.roa
Signing time: Tue 11 Aug 2026 15:03:32 +0000
ROA not before: Tue 11 Aug 2026 14:58:32 +0000
ROA not after: Tue 10 Aug 2027 15:03:32 +0000
asID: 401776
IP address blocks: 5.199.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:1d:75:12:93:e8:48:16:6c:a7:ed:9e:27:2d:3a:f6:b3:95:06:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 11 14:58:32 2026 GMT
Not After : Aug 10 15:03:32 2027 GMT
Subject: CN=E5FAC3F861323635228381A20805624DDEDFEBF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:82:9e:50:a6:06:90:5c:d8:1e:3d:c2:c7:
29:78:99:ac:02:aa:63:75:be:63:4f:64:73:97:93:
f4:9d:1f:a2:67:f0:9b:f6:7d:b8:76:b0:89:3b:78:
bb:ab:29:90:5e:f6:51:c5:ff:6b:63:4b:ad:74:dd:
62:3b:51:19:95:61:1e:51:10:69:26:77:41:16:be:
39:10:0c:dd:b3:83:ae:f1:65:94:cd:fc:b9:0b:df:
b6:4d:e5:71:e1:05:b6:0b:ed:a4:3d:21:63:df:66:
c7:44:d7:e3:45:b1:6b:3a:18:c8:b5:70:97:72:f6:
98:22:b1:9b:2d:95:c2:fd:ff:3d:37:1b:3a:75:ea:
fa:f7:07:81:85:03:41:c7:de:d8:41:11:e1:76:79:
53:92:d1:ff:84:d7:32:01:56:30:60:bc:68:72:21:
44:e4:62:3b:f7:af:91:ac:da:a0:ff:89:88:f8:0b:
a5:10:51:1d:ca:44:65:2e:93:b0:f0:37:b7:4c:dd:
52:dc:80:6a:75:39:f3:b2:71:c2:d1:5b:af:f7:28:
cf:71:41:6e:fd:51:81:52:ce:62:02:b5:51:2c:a5:
52:08:ed:9f:3f:c2:fa:f2:a3:0a:23:dc:1d:f1:c7:
ab:1b:aa:6e:3b:0e:97:02:16:bc:85:19:80:61:06:
e9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FA:C3:F8:61:32:36:35:22:83:81:A2:08:05:62:4D:DE:DF:EB:F2
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32362e302f32342d3234203d3e20343031373736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.26.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d3:0f:31:7e:6c:d5:23:fb:31:0b:35:a2:e6:b7:92:f3:bb:
95:ab:c1:87:9d:95:dd:a9:49:6b:8e:04:87:94:f1:01:55:ee:
d4:cf:48:9f:71:6a:9c:c4:42:ce:19:64:52:2e:b0:32:f9:17:
14:9c:51:5c:be:2d:b8:63:51:e1:c4:08:f1:68:3e:60:70:e9:
41:3c:e7:cc:54:60:9b:66:ef:80:0c:62:58:f9:b3:c6:ef:2c:
ac:ce:e3:e2:f9:99:c2:7a:1a:35:ed:06:ff:d2:ef:e0:71:98:
29:f4:35:3d:cf:4a:7e:34:6b:1e:bc:52:a7:d5:cc:56:c8:8a:
ee:69:ef:c0:e6:3a:e7:a9:22:92:ca:4b:19:7c:1a:db:fa:73:
6d:4a:c7:85:ea:29:b7:66:c5:2e:3d:a2:7a:29:0b:a9:93:f4:
24:15:90:a4:60:ae:30:cb:8a:2e:e9:17:a5:63:98:b8:df:c3:
e2:41:6e:c0:fb:8c:d2:8f:e5:96:b4:97:0c:9e:34:fc:36:7e:
cf:d2:9f:5c:5e:74:b7:e5:89:17:7d:29:20:c0:7e:28:a9:16:
a2:a7:7b:61:28:b8:47:92:22:b2:fe:58:24:97:1c:45:10:de:
cc:71:c3:b8:fe:c8:18:6a:28:4c:15:9a:4a:c6:cf:cf:e8:14:
db:67:b1:88
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUKR11EpPoSBZsp+2eJy069rOVBsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1
NGFmZGU3NjAeFw0yNjA4MTExNDU4MzJaFw0yNzA4MTAxNTAzMzJaMDMxMTAvBgNV
BAMTKEU1RkFDM0Y4NjEzMjM2MzUyMjgzODFBMjA4MDU2MjREREVERkVCRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06YKeUKYGkFzYHj3Cxyl4mawC
qmN1vmNPZHOXk/SdH6Jn8Jv2fbh2sIk7eLurKZBe9lHF/2tjS6103WI7URmVYR5R
EGkmd0EWvjkQDN2zg67xZZTN/LkL37ZN5XHhBbYL7aQ9IWPfZsdE1+NFsWs6GMi1
cJdy9pgisZstlcL9/z03Gzp16vr3B4GFA0HH3thBEeF2eVOS0f+E1zIBVjBgvGhy
IUTkYjv3r5Gs2qD/iYj4C6UQUR3KRGUuk7DwN7dM3VLcgGp1OfOyccLRW6/3KM9x
QW79UYFSzmICtVEspVII7Z8/wvryowoj3B3xx6sbqm47DpcCFryFGYBhBukrAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU5frD+GEyNjUig4GiCAViTd7f6/IwHwYDVR0j
BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh
NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT
djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct
ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzIzNjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMTM3MzczNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAXH
GjANBgkqhkiG9w0BAQsFAAOCAQEAMtMPMX5s1SP7MQs1oua3kvO7lavBh52V3alJ
a44Eh5TxAVXu1M9In3FqnMRCzhlkUi6wMvkXFJxRXL4tuGNR4cQI8Wg+YHDpQTzn
zFRgm2bvgAxiWPmzxu8srM7j4vmZwnoaNe0G/9Lv4HGYKfQ1Pc9KfjRrHrxSp9XM
VsiK7mnvwOY656kikspLGXwa2/pzbUrHheopt2bFLj2ieikLqZP0JBWQpGCuMMuK
LukXpWOYuN/D4kFuwPuM0o/llrSXDJ40/DZ+z9KfXF50t+WJF30pIMB+KKkWoqd7
YSi4R5Iisv5YJJccRRDezHHDuP7IGGooTBWaSsbPz+gU22exiA==
-----END CERTIFICATE-----
Generated at Fri Sep 4 16:29:10 2026 by rpki-client