Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33332e302f32342d3234203d3e20383334.roa
File: 352e3139392e33332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: gA6AqggrV+eXuNShzV+Lf2XNvX3DbzGCEzLIR235wu0=
Subject key identifier: 12:FE:0E:3C:D2:6F:59:C3:34:F3:A1:A0:45:6A:AD:30:BC:D2:1D:89
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 15E7D91FB5FD5E6E9AD4488E7A7642B9E748805F
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33332e302f32342d3234203d3e20383334.roa
Signing time: Wed 02 Sep 2026 13:40:17 +0000
ROA not before: Wed 02 Sep 2026 13:35:17 +0000
ROA not after: Wed 01 Sep 2027 13:40:17 +0000
asID: 834
IP address blocks: 5.199.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e7:d9:1f:b5:fd:5e:6e:9a:d4:48:8e:7a:76:42:b9:e7:48:80:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 2 13:35:17 2026 GMT
Not After : Sep 1 13:40:17 2027 GMT
Subject: CN=12FE0E3CD26F59C334F3A1A0456AAD30BCD21D89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:d6:2f:3a:80:56:37:e5:36:27:6f:ba:c5:
2d:6d:a3:0f:6c:76:6b:bc:36:0e:4b:7e:b8:7d:f5:
9a:b4:f3:10:33:2a:af:6a:46:7d:35:69:1c:3b:ee:
bb:0c:eb:12:9b:c3:32:d4:03:30:c3:af:97:7f:7c:
99:37:aa:28:b5:74:73:3f:a6:da:15:0c:4e:a8:13:
a7:24:bb:5f:3d:b2:b9:2a:c0:ca:7b:35:8a:d6:5e:
d7:50:18:94:f1:2a:a0:ba:6d:66:e9:d0:9f:3b:07:
05:7f:24:c9:e1:ce:59:2e:e4:37:f1:fd:16:76:cb:
63:d2:55:df:97:f5:bf:d1:6a:ee:a5:6a:6a:16:70:
24:64:75:ff:c6:92:80:b2:40:f8:aa:5c:99:8c:1e:
fa:c8:dc:ab:c6:af:54:74:88:d4:a0:0e:fc:61:06:
03:26:62:60:56:d6:1d:6f:52:dc:0e:f6:d5:82:a6:
b5:b9:db:9f:ff:73:d1:61:47:a4:8a:bc:e5:a1:9d:
d8:fb:a8:b2:bd:a2:1f:7a:53:30:d8:df:ae:b7:0f:
b3:b4:08:f1:2c:c4:fc:a0:5d:12:34:74:5a:a6:fc:
71:74:61:d9:91:b2:32:20:5f:e0:5d:94:30:91:ca:
0f:57:65:60:8a:6e:6f:11:2c:8e:de:b6:4a:d7:31:
72:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FE:0E:3C:D2:6F:59:C3:34:F3:A1:A0:45:6A:AD:30:BC:D2:1D:89
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.33.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:1c:f6:1e:f7:b7:f8:74:2a:05:40:22:64:14:cc:16:15:2a:
5f:40:4b:93:12:b4:e7:8e:7b:fc:be:24:d2:a6:a3:8e:ae:4e:
3b:9f:60:3b:ad:77:65:77:a0:32:d5:de:c2:dd:5e:7a:b2:51:
a8:c9:c3:9d:4a:66:62:6f:75:dc:25:5d:43:d4:8b:85:35:9d:
ae:21:f8:dc:40:35:e8:e9:79:92:b5:0b:2f:68:18:4f:7e:1c:
2d:e7:52:7f:a7:54:0e:68:04:c5:e0:cf:d8:42:1d:ed:61:04:
c4:ce:f9:a2:bf:21:6a:13:8c:66:43:ca:57:76:ee:18:29:b0:
08:56:95:3d:a5:ec:75:38:58:9e:95:72:6e:63:23:87:77:70:
60:94:9d:6e:b1:ee:69:61:f8:a9:0d:b1:b5:1a:55:7e:bb:91:
80:94:e7:22:e2:e8:f7:51:03:bd:c3:b7:ae:cc:27:65:ec:af:
36:d1:df:dc:79:2a:73:57:dc:13:27:92:8e:05:67:59:3a:f4:
39:e1:59:f6:ee:39:c1:60:a7:5c:e1:52:d0:3c:ef:a9:1d:35:
ef:23:19:a1:0e:a8:e7:98:03:f0:2b:ea:19:68:df:02:41:b8:
e3:b1:49:5c:8d:72:21:29:ca:5f:23:39:1d:1a:8e:02:c1:6a:
74:ec:00:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 14:25:03 2026 by rpki-client