Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32372e302f32342d3234203d3e20383334.roa
File: 352e3139392e32372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: E5BMR27aJ+6FXDLHPdcy/GX+4zdyLd7Dj9eVz3DzH+I=
Subject key identifier: 9B:08:A7:2E:15:5F:21:DD:E7:64:03:B8:9C:CB:B6:68:69:B6:04:CD
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 3B22EC7EEC0A70AA87D33E6042A928B2DDC9183E
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32372e302f32342d3234203d3e20383334.roa
Signing time: Sun 30 Aug 2026 12:18:29 +0000
ROA not before: Sun 30 Aug 2026 12:13:29 +0000
ROA not after: Sun 29 Aug 2027 12:18:29 +0000
asID: 834
IP address blocks: 5.199.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:22:ec:7e:ec:0a:70:aa:87:d3:3e:60:42:a9:28:b2:dd:c9:18:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 30 12:13:29 2026 GMT
Not After : Aug 29 12:18:29 2027 GMT
Subject: CN=9B08A72E155F21DDE76403B89CCBB66869B604CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:ed:8f:d4:f6:a0:74:58:c5:ae:20:3e:d3:
92:c3:7c:5d:dd:37:19:8a:25:e3:d7:b3:7f:28:54:
5d:de:c5:bb:d9:2b:f6:55:5a:ff:dc:6b:d8:8f:e8:
ed:4e:86:dd:7a:f2:b2:79:e8:94:15:1b:a2:fc:8d:
ca:a4:49:f3:27:64:30:f2:39:a9:8f:e2:ca:f8:c8:
d4:de:29:20:f0:1a:12:8d:82:19:41:e2:a5:46:02:
f6:e2:0b:53:01:32:fa:a4:dd:e3:39:0e:49:80:cd:
66:d3:bc:24:ae:96:ab:4e:8d:f4:ac:66:8b:72:11:
56:3c:36:e8:b9:92:28:76:a2:69:94:b7:53:38:a8:
22:e9:9c:a5:18:6e:d6:4e:6f:31:15:ca:ba:70:90:
97:d9:70:9d:7f:33:8d:cf:fb:df:00:06:9d:d5:fc:
ab:b8:52:99:a1:fa:64:f5:2f:15:17:fc:6b:9e:01:
33:cb:f9:36:d6:c3:5a:7b:0d:b2:9b:7a:b0:a1:e9:
94:df:56:92:d8:c1:59:df:5b:80:ec:eb:31:72:3f:
bf:5b:01:39:99:a1:e8:d8:bd:ff:4e:29:73:00:df:
c3:4e:0e:40:a0:70:2d:c2:89:6f:06:a4:80:0d:82:
04:03:18:56:1e:a6:dc:f4:b7:3e:4d:82:27:18:11:
18:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:08:A7:2E:15:5F:21:DD:E7:64:03:B8:9C:CB:B6:68:69:B6:04:CD
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.27.0/24
Signature Algorithm: sha256WithRSAEncryption
28:4e:26:9e:78:63:af:82:b8:5d:1f:f3:8b:44:ae:a4:84:8b:
22:b4:e6:2f:61:b7:c1:5a:ac:0a:98:3e:7d:a9:35:45:fb:2f:
5b:c8:59:15:0a:cd:3d:de:49:53:a3:43:88:73:03:0b:6b:45:
c5:10:87:93:03:c9:14:1c:dc:6a:fc:51:4c:15:b2:8f:56:3d:
67:84:fc:c7:79:1a:74:b8:f0:51:cc:46:2a:c7:08:38:90:24:
d3:2b:19:b4:e1:8e:93:f0:46:da:7d:73:ae:19:62:fd:2d:94:
10:ce:84:e5:34:a9:04:90:c5:80:9b:35:3c:a0:4f:9a:cb:4e:
b0:07:0a:46:d0:80:44:dc:3f:ca:3a:4b:9c:ec:15:34:ac:4f:
35:13:5f:aa:11:ed:28:ee:5d:a3:24:8c:4d:f0:a1:57:de:75:
cd:f2:1e:e1:f3:55:65:28:e4:a2:2a:84:05:c1:11:d2:cc:1d:
35:14:0c:83:e8:5f:76:57:f6:a6:5b:99:34:65:a3:e5:78:25:
bc:07:63:b7:e4:98:ee:fd:5e:a7:75:46:86:43:81:0d:ca:e2:
38:20:5a:ae:96:05:66:60:b3:ba:32:97:61:6e:49:8f:a5:66:
64:cf:f6:36:0c:e2:f7:27:30:7d:b6:73:c1:86:b9:50:a1:c6:
94:11:1c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 14:33:15 2026 by rpki-client