Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32392e302f32342d3234203d3e20323139333933.roa
File: 352e3139392e32392e302f32342d3234203d3e20323139333933.roa (raw, json)
Hash identifier: o1Xso6cEPMK+CMnRzN3d6OM+ONl1jgmQO0JagIh9No4=
Subject key identifier: 7E:61:C4:6F:03:F9:3A:FA:25:17:D6:E3:AC:1C:37:57:6E:8D:1E:55
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 25C196ADCDE925A3B394FEBB84370E0286C739A3
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32392e302f32342d3234203d3e20323139333933.roa
Signing time: Fri 28 Aug 2026 02:32:07 +0000
ROA not before: Fri 28 Aug 2026 02:27:07 +0000
ROA not after: Fri 27 Aug 2027 02:32:07 +0000
asID: 219393
IP address blocks: 5.199.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c1:96:ad:cd:e9:25:a3:b3:94:fe:bb:84:37:0e:02:86:c7:39:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 28 02:27:07 2026 GMT
Not After : Aug 27 02:32:07 2027 GMT
Subject: CN=7E61C46F03F93AFA2517D6E3AC1C37576E8D1E55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5c:47:56:8e:5e:a0:cb:e3:9c:92:ca:2d:c2:
5f:14:6c:66:4e:c6:4b:ad:0d:84:ec:8f:55:3e:47:
ff:c4:bf:5d:8a:83:30:37:5b:0f:b3:c0:44:a7:c5:
6c:de:65:51:c5:88:84:79:b0:b7:fa:ac:d7:8a:4e:
c2:21:c5:4b:41:38:a7:28:fa:4c:46:81:8f:18:5a:
97:61:62:5c:3b:2a:47:49:fa:05:e8:9c:14:d6:39:
ac:28:31:61:c3:c9:58:33:20:bb:c8:02:4d:d4:cf:
61:e9:04:30:2f:ef:89:9c:ac:c4:00:3b:85:51:2c:
e6:f6:ab:1b:58:53:a8:e6:2d:a3:cb:1f:7f:e0:60:
61:33:90:dc:27:d6:9a:1d:71:11:0b:58:71:03:c1:
35:17:f6:b0:d6:ce:6e:f7:53:ff:d5:88:a8:54:4a:
d9:8a:1b:8a:54:71:f4:bd:36:76:6d:c5:1d:e5:bf:
7d:40:44:d2:f8:0a:18:cd:0e:db:25:33:0d:ab:2b:
d8:e5:ab:f6:f6:88:ac:1c:ab:f4:e1:40:c4:c2:10:
bd:f6:37:d2:04:7a:16:bd:3d:94:80:0d:39:23:45:
75:3a:b2:00:ad:4e:08:c4:3a:25:d7:d3:4c:6e:42:
36:7e:d8:e4:6f:81:f3:8d:b8:9f:98:43:b5:62:cb:
19:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:61:C4:6F:03:F9:3A:FA:25:17:D6:E3:AC:1C:37:57:6E:8D:1E:55
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32392e302f32342d3234203d3e20323139333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.29.0/24
Signature Algorithm: sha256WithRSAEncryption
02:14:42:f5:32:2e:90:85:82:6f:df:5d:7b:77:14:af:94:4e:
4f:ac:ed:0b:dd:0e:a8:45:12:6f:ff:58:26:d7:7c:5d:f2:33:
88:84:25:d6:27:79:a1:25:18:73:77:2d:d3:e4:e0:a0:43:d5:
79:77:c2:dc:58:05:c5:a8:14:58:87:0c:5f:7c:e0:08:19:f3:
da:4a:ad:d8:9b:2a:ab:de:74:07:6e:cc:43:b0:cb:2a:76:58:
c2:28:89:3c:8e:d4:f1:3a:a1:f4:d9:41:a5:d4:72:77:4b:31:
8e:24:7c:cb:7f:4f:b4:e4:5c:4a:aa:e2:97:e5:03:5a:a9:a2:
ba:01:4e:a4:97:fd:4d:eb:a0:1d:a6:96:19:f5:d9:37:17:90:
98:dd:bb:8a:e7:4f:b4:b8:34:d3:68:c8:b6:4b:a9:95:ee:b3:
12:d7:e9:c6:47:67:2e:a6:c9:38:0a:c4:e3:d1:58:b1:3a:c5:
6d:74:35:25:cf:26:ec:ca:3f:44:c8:c8:d2:2c:f9:fe:55:9e:
45:d5:e3:3d:1f:7a:04:f1:1f:33:58:80:14:4f:ad:4c:93:f8:
9a:69:62:d2:f8:38:af:7a:19:f8:ab:47:cc:0e:98:22:ff:ef:
ba:14:bc:75:2c:0c:a9:d9:64:5e:57:78:7d:46:1d:1a:df:76:
51:9b:0d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:47:45 2026 by rpki-client