Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33322e302f32342d3234203d3e20323138393130.roa
File: 352e3139392e33322e302f32342d3234203d3e20323138393130.roa (raw, json)
Hash identifier: jhajmn3V1ASjtyPWUzrWkqb3MdEqQ7UyULS2TQe3sRM=
Subject key identifier: BC:F3:8C:A1:E6:F6:B3:0E:C8:F3:01:95:73:5C:C8:79:93:CA:AB:1D
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 55D9992AEBA252941A0D782D38EE05B4AA3D1862
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33322e302f32342d3234203d3e20323138393130.roa
Signing time: Thu 03 Sep 2026 15:58:47 +0000
ROA not before: Thu 03 Sep 2026 15:53:47 +0000
ROA not after: Thu 02 Sep 2027 15:58:47 +0000
asID: 218910
IP address blocks: 5.199.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 20:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d9:99:2a:eb:a2:52:94:1a:0d:78:2d:38:ee:05:b4:aa:3d:18:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 3 15:53:47 2026 GMT
Not After : Sep 2 15:58:47 2027 GMT
Subject: CN=BCF38CA1E6F6B30EC8F30195735CC87993CAAB1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:46:6b:a5:6e:7c:24:c8:af:2e:df:a4:a0:
25:a0:7d:f3:87:83:17:46:f3:ea:4b:8f:9a:ab:95:
f0:ee:84:55:74:77:50:f6:10:11:32:df:69:1a:b4:
03:0c:9e:df:bd:22:50:ef:b6:f2:f9:61:1b:98:74:
56:92:d3:75:13:64:b3:3a:f1:57:cb:c8:60:0b:32:
8b:80:cf:c2:ec:3b:37:36:cf:38:52:58:bf:a0:20:
c2:69:e0:61:b4:b2:ee:f0:f6:81:ce:bb:8f:77:e5:
85:fc:2b:28:b3:90:03:e3:21:8e:fa:ff:33:c3:1a:
30:01:0b:37:66:68:43:6f:9a:c2:22:d2:e5:fc:c5:
4d:47:36:c7:b5:ae:29:a1:86:23:c8:6b:40:cb:e5:
ca:96:7c:3b:51:06:f4:da:8f:8e:89:b1:4b:54:3f:
c8:a5:5d:fd:8c:b6:65:9e:28:fe:22:9d:85:7d:42:
5b:4f:59:72:a2:34:f8:5b:d3:72:5e:c1:41:1a:0b:
d8:5b:7a:bb:15:98:94:c4:ec:cb:61:94:6c:9f:cf:
7c:34:a9:c6:62:af:e8:b2:aa:b9:78:84:1c:a2:58:
02:63:6d:6f:c9:27:ea:42:89:da:5e:cd:f5:49:2e:
06:06:e0:11:64:d1:86:36:60:9e:23:4d:b7:ea:de:
20:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F3:8C:A1:E6:F6:B3:0E:C8:F3:01:95:73:5C:C8:79:93:CA:AB:1D
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33322e302f32342d3234203d3e20323138393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.32.0/24
Signature Algorithm: sha256WithRSAEncryption
da:b0:84:ad:85:95:be:c4:cf:16:11:d1:e5:87:b3:97:81:11:
b3:e6:94:62:e8:5e:e6:de:c7:ef:7a:af:47:0c:16:10:48:4f:
32:de:16:d6:36:14:b9:96:8e:e1:45:8e:a8:4a:bb:95:55:8a:
96:48:3b:ba:5a:0b:83:fa:31:2b:a3:d5:d4:58:fc:2b:a4:6b:
ea:4c:43:d8:da:b4:f0:6d:3d:05:9f:3a:49:6d:ac:c6:e1:1d:
93:df:bb:ba:66:9b:11:8f:f8:4e:c5:c5:9a:f9:ac:60:a7:ef:
bc:4f:27:b2:15:1b:51:88:fe:37:8e:5b:61:ac:27:15:08:06:
6a:fb:e6:7e:f0:75:4b:bc:09:36:95:4f:8d:d5:be:fe:c6:60:
be:ee:e1:5a:93:4c:46:eb:db:d0:2c:c5:e1:23:89:e7:65:56:
b9:a7:35:45:2d:f1:1d:e1:17:b1:c6:b4:56:c0:2b:66:d0:1a:
96:ba:4a:0f:d3:d5:23:b6:df:a4:bc:c8:f5:c1:5c:2c:fe:44:
9c:5b:cb:47:74:da:22:75:22:3a:52:6d:da:0f:93:2a:7a:64:
58:41:0c:c2:b4:94:b3:0a:7f:a9:05:5b:87:5a:54:b1:63:ca:
ab:3c:71:82:5d:8a:09:2e:30:1e:3a:72:2d:7e:e7:9c:e5:0a:
3b:28:f1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 10:43:46 2026 by rpki-client