Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32392e302f32342d3234203d3e20323139333934.roa
File: 352e3139392e32392e302f32342d3234203d3e20323139333934.roa (raw, json)
Hash identifier: B/clkF+gNlPL5S2nuRnINBtlOQRRMChBdGHFa0fSOII=
Subject key identifier: E4:0D:91:A5:90:5D:31:BA:0D:AB:3D:0C:90:C1:74:F2:D2:68:D8:6C
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 40E0098A7C72B436C7DBA6435C7050BF0A75F045
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32392e302f32342d3234203d3e20323139333934.roa
Signing time: Fri 28 Aug 2026 02:32:07 +0000
ROA not before: Fri 28 Aug 2026 02:27:07 +0000
ROA not after: Fri 27 Aug 2027 02:32:07 +0000
asID: 219394
IP address blocks: 5.199.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:e0:09:8a:7c:72:b4:36:c7:db:a6:43:5c:70:50:bf:0a:75:f0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 28 02:27:07 2026 GMT
Not After : Aug 27 02:32:07 2027 GMT
Subject: CN=E40D91A5905D31BA0DAB3D0C90C174F2D268D86C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:db:c7:85:c3:1a:b7:ce:7d:ec:28:de:34:
89:f1:f3:7f:5d:33:90:ca:46:27:fb:cc:b0:3d:bf:
c4:aa:cd:30:c9:eb:aa:28:99:62:1e:6b:97:c3:d2:
7b:a7:00:42:f0:73:1f:ec:06:ff:0c:fe:86:dd:ad:
bd:da:de:1b:ef:df:92:9a:4f:9a:78:2e:76:ac:71:
57:7b:74:70:3c:5b:9f:53:c0:e5:0b:fe:01:95:d2:
b5:df:7c:be:e9:b1:7c:11:7d:eb:08:31:53:b7:46:
5f:39:f5:7f:03:b0:27:8c:34:d8:b2:f7:72:50:53:
27:47:18:de:10:f8:28:a6:63:65:63:87:3d:da:82:
67:de:c4:1f:86:af:3a:8c:fc:fa:68:c6:01:8a:09:
f5:9c:85:0e:5a:51:48:c4:c2:42:eb:08:8c:33:6a:
69:28:d3:b6:c0:45:dc:e1:b1:d2:30:0c:6f:27:78:
5c:a1:a5:0c:2f:fd:31:b7:85:74:f1:66:1c:9c:87:
f2:82:8b:03:25:59:eb:7f:ec:44:30:e0:f1:7d:36:
5a:b1:3d:04:84:43:06:47:ed:46:dd:2c:01:ba:c1:
c7:61:f8:a1:22:f1:3c:4c:26:14:94:e2:e1:b3:ee:
cd:06:65:6f:d2:42:e5:af:30:59:46:d6:61:ef:26:
c1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0D:91:A5:90:5D:31:BA:0D:AB:3D:0C:90:C1:74:F2:D2:68:D8:6C
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32392e302f32342d3234203d3e20323139333934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.29.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e9:f5:31:de:c0:de:6c:13:84:1c:9f:93:60:39:40:47:b3:
87:45:d3:d7:db:02:95:04:c5:19:b5:9b:9a:52:62:66:f5:99:
0c:9c:86:70:90:53:0f:eb:b4:6e:85:17:f2:3e:60:9e:06:df:
ae:4c:3e:ad:19:fe:7d:7d:11:20:f4:99:01:ef:33:2b:09:53:
65:3f:33:25:92:4a:45:76:0e:c4:e8:b2:07:cd:18:4c:12:22:
96:53:14:e9:03:32:72:d1:84:94:b8:dc:9e:cc:f4:1e:67:e2:
b0:11:07:3d:06:73:b1:4f:e4:4a:53:a4:9a:f9:ca:96:0d:74:
3d:26:1e:8b:6f:80:28:1e:34:8a:fe:61:62:a2:f3:02:15:29:
7d:c3:a6:87:a3:f9:0f:59:49:4f:c9:c7:58:c4:12:c0:2f:87:
5d:47:e4:dc:82:9f:96:98:ff:a5:89:47:7e:04:65:85:f9:19:
2c:3a:20:e1:2a:0c:8a:c0:f2:ef:7f:c7:b5:c1:75:e7:cf:80:
c7:40:3b:60:26:57:b3:96:2f:e5:25:cc:64:e8:7d:b3:ed:53:
77:df:8d:6e:cf:5b:66:62:64:51:71:5e:09:9b:8e:5e:32:6d:
80:c2:7e:ce:3e:66:e9:6b:d9:91:9f:c9:46:7a:b9:f6:75:66:
06:22:7a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:47:55 2026 by rpki-client