Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33362e302f32322d3234203d3e20383334.roa
File: 352e3139392e33362e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: 2mett5tAEdFDBkS9HZHxThnrT8ZT8yYzNuxBBwPpoTA=
Subject key identifier: 90:72:41:97:8D:54:1F:3A:23:20:05:40:37:FA:CA:E4:B5:C0:E0:0C
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 120B8BD7536606ED5F81004AEF260BB3BFC0C220
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33362e302f32322d3234203d3e20383334.roa
Signing time: Fri 31 Jul 2026 17:35:45 +0000
ROA not before: Fri 31 Jul 2026 17:30:45 +0000
ROA not after: Fri 30 Jul 2027 17:35:45 +0000
asID: 834
IP address blocks: 5.199.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 07:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:0b:8b:d7:53:66:06:ed:5f:81:00:4a:ef:26:0b:b3:bf:c0:c2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Jul 31 17:30:45 2026 GMT
Not After : Jul 30 17:35:45 2027 GMT
Subject: CN=907241978D541F3A2320054037FACAE4B5C0E00C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7e:21:08:bf:2c:7d:0f:88:eb:f5:0c:d0:0b:
f1:aa:57:60:04:c7:5d:07:5d:11:95:7d:3e:5f:02:
d7:0a:be:d5:1a:ee:06:40:10:c8:61:52:a1:6a:8c:
7e:33:68:4e:9f:7c:e4:ba:ed:ca:3d:f0:54:03:0d:
74:74:a7:5d:73:a2:09:2e:5f:66:51:2b:b6:d5:87:
9c:f8:19:25:5a:86:c7:59:96:e2:9b:63:e5:ac:b7:
7e:d4:d7:43:0d:47:fd:fe:c2:d3:f0:dd:db:28:55:
9c:dd:7e:5c:62:1a:33:d9:1a:2c:08:d5:f7:01:5c:
ba:da:24:e4:4d:24:8f:eb:35:d7:7e:7c:9b:7b:cd:
21:54:fc:88:54:2e:92:ce:c9:2e:4c:11:98:92:96:
bd:4f:4c:12:ea:01:72:80:73:1c:65:6f:4b:f8:dc:
10:bf:c4:36:46:73:d6:68:07:5d:61:7b:20:00:a0:
f7:5b:b9:fa:5b:19:8b:66:7c:e4:1d:a3:33:7a:f2:
3d:c0:b8:f6:4c:ba:0f:c2:31:2d:ac:eb:1e:de:f3:
38:22:51:0a:d5:3c:58:4d:38:53:73:8b:44:a7:ce:
b9:67:a7:3e:23:71:91:78:dc:8a:6b:ee:44:cd:9d:
bc:b9:e7:aa:04:f5:74:0a:b4:2c:c2:66:3a:dc:f0:
0c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:72:41:97:8D:54:1F:3A:23:20:05:40:37:FA:CA:E4:B5:C0:E0:0C
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33362e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.36.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:36:3b:58:5b:31:90:e2:29:62:cc:39:23:ce:fc:4f:6c:8d:
a1:bf:2b:32:49:93:14:06:e8:90:41:d7:4f:ef:c2:e7:d6:ec:
94:ce:46:d0:81:ac:84:4e:c1:c8:93:e0:7d:19:63:88:46:6a:
94:16:45:bc:88:43:f3:83:0d:56:2b:61:7d:4f:fc:62:ae:17:
b6:e2:01:c1:89:0f:70:69:10:e1:51:c6:9c:3a:4b:7c:88:1a:
c6:6c:5d:e3:d2:e9:bc:f6:61:ba:08:ab:44:7c:8c:2b:2a:91:
31:0f:4e:55:7a:5c:58:78:09:51:0f:57:52:91:e7:29:ba:13:
8a:cb:e0:fd:fc:0a:fd:66:9e:02:ca:2c:27:9b:8e:88:06:39:
30:43:63:24:fc:0f:32:d3:92:47:01:28:df:ed:43:2c:44:5a:
7a:34:c2:1e:df:2f:3d:69:63:82:97:e8:fe:ee:4c:bf:f9:5f:
f2:18:ab:d9:ef:fe:f3:5a:e8:4f:4d:8a:6a:e7:c3:ff:03:55:
b8:f7:bc:82:4c:18:9b:cb:5b:e5:f9:5c:56:04:b7:48:10:a7:
f1:5a:27:bd:c9:87:da:c4:47:36:08:2c:cb:20:5b:f1:8f:84:
6a:32:6c:1c:2c:85:ea:60:c7:e4:4f:c4:e3:28:c1:83:93:5c:
bd:e3:72:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:53 2026 by rpki-client