Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33322e302f32342d3234203d3e20383334.roa
File: 352e3139392e33322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ohlcdluHjk+bRjuuMH9N8ARvO3r3ThKxI7XRl96PLgc=
Subject key identifier: 19:B7:F9:AB:A5:A3:62:4E:C8:2D:91:DD:08:15:15:DE:CF:C7:32:E4
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 43E90F3C6EAA537E308841070A3937DCE90E7E96
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33322e302f32342d3234203d3e20383334.roa
Signing time: Tue 11 Aug 2026 15:21:21 +0000
ROA not before: Tue 11 Aug 2026 15:16:21 +0000
ROA not after: Tue 10 Aug 2027 15:21:21 +0000
asID: 834
IP address blocks: 5.199.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 07:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e9:0f:3c:6e:aa:53:7e:30:88:41:07:0a:39:37:dc:e9:0e:7e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 11 15:16:21 2026 GMT
Not After : Aug 10 15:21:21 2027 GMT
Subject: CN=19B7F9ABA5A3624EC82D91DD081515DECFC732E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:5e:bd:80:ae:ec:ae:c1:b4:80:b5:59:81:
9b:d2:94:26:3a:d2:c2:6a:90:78:f5:d9:33:9e:9d:
ee:03:b5:09:5f:80:bb:14:89:f2:84:5e:eb:00:2a:
02:1e:ed:c6:43:fa:b9:46:0e:15:c0:a2:ec:34:88:
43:12:94:65:7e:b9:2a:21:35:62:bb:77:88:78:a5:
75:a2:e9:03:34:46:d2:9b:3a:8d:fd:5d:1e:0d:7e:
83:fc:68:71:34:10:16:5a:a6:cb:cb:b1:74:57:11:
96:13:d4:4f:5f:3d:63:85:cb:99:76:95:a6:71:af:
5d:e3:9f:29:10:45:46:66:6d:e3:a4:d2:b0:d8:46:
52:b6:18:e6:52:90:2c:e1:41:3c:2e:c7:67:68:32:
26:e5:cd:92:9d:99:35:7b:53:6d:dc:f3:d8:77:da:
5d:4e:c1:fa:0f:61:9e:cf:01:7c:f8:89:a4:d4:61:
6d:65:65:da:06:e2:4c:80:45:c9:5d:af:7d:07:8d:
a2:a8:56:2d:62:27:ca:4b:3f:a3:63:32:00:d8:5d:
d5:d1:66:4a:14:4a:9a:86:55:09:59:62:72:5c:81:
46:47:d7:6b:11:e7:79:c3:46:9d:a9:24:79:7b:ce:
d8:49:87:ec:49:f0:c1:33:a0:a2:9b:81:0d:58:73:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B7:F9:AB:A5:A3:62:4E:C8:2D:91:DD:08:15:15:DE:CF:C7:32:E4
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.32.0/24
Signature Algorithm: sha256WithRSAEncryption
13:39:aa:74:ed:ef:7c:f0:0b:3b:46:0e:0e:81:8d:96:01:18:
a7:21:72:cc:26:a5:29:66:a7:44:f6:90:8c:cc:96:d9:96:dc:
e8:a0:c6:66:0a:e0:ba:74:78:36:d9:b9:2e:88:de:80:5e:8d:
c4:e8:fd:c1:bd:1f:1a:0f:f6:1f:93:89:0a:9f:96:70:ec:78:
4c:ae:a4:59:10:8b:21:93:cf:e8:91:ba:cf:d1:eb:e0:88:33:
05:cb:fa:ea:b5:1c:31:33:33:c1:8a:ff:08:49:8f:d3:84:e8:
db:b1:91:d2:23:25:5d:0b:58:2f:85:ff:de:8b:1e:80:ed:33:
4b:3c:7e:73:9c:0d:f1:33:bf:25:97:58:62:e5:1b:cc:27:39:
2d:1d:f1:1a:07:98:e1:2a:aa:68:db:07:8d:86:1b:74:11:cc:
cd:20:2c:b7:25:69:fa:a3:ae:bb:a6:89:13:de:48:86:26:98:
cb:b6:0b:6d:b6:7c:2a:c2:b0:84:89:52:39:2f:cf:01:bf:48:
d5:e3:5c:ec:d9:5c:d3:a6:40:22:bb:69:4e:18:5c:ec:71:38:
87:2e:b1:81:0c:76:83:68:97:99:9e:fd:b5:82:fa:42:62:95:
cf:78:1c:83:be:6b:60:b0:2a:4e:3c:8a:4e:d1:0a:de:03:26:
d3:e5:eb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:06 2026 by rpki-client