Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e342e302f32332d3234203d3e20383334.roa
File: 352e3139392e342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: cJsrrilw9pfXzDJA1LyzhYFAvgT0KxXrRZOFjGQkLtY=
Subject key identifier: A8:61:9A:3A:AC:A3:6A:DF:C3:40:2B:A7:1E:07:5E:DB:93:56:46:E4
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 0BA4335F4D9B93B953053A371809D51BAFF557D9
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e342e302f32332d3234203d3e20383334.roa
Signing time: Mon 03 Aug 2026 03:57:09 +0000
ROA not before: Mon 03 Aug 2026 03:52:09 +0000
ROA not after: Mon 02 Aug 2027 03:57:09 +0000
asID: 834
IP address blocks: 5.199.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 07:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a4:33:5f:4d:9b:93:b9:53:05:3a:37:18:09:d5:1b:af:f5:57:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 3 03:52:09 2026 GMT
Not After : Aug 2 03:57:09 2027 GMT
Subject: CN=A8619A3AACA36ADFC3402BA71E075EDB935646E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:c6:d5:78:74:bc:16:aa:b6:21:95:14:b0:
86:dd:e6:45:6b:65:36:80:11:cf:2b:ef:ca:10:f2:
31:14:7b:30:f5:3b:2c:7f:6f:df:db:de:ec:b7:24:
23:fa:54:26:7a:c9:24:c7:74:d3:3f:53:3d:f5:77:
d8:34:d9:2b:50:8f:59:da:37:8b:21:66:75:0b:e9:
97:5e:f0:bc:18:fe:e4:65:14:c4:7d:be:a2:d6:d6:
e7:c1:fa:25:bb:20:e0:19:e7:29:f8:b9:6f:be:81:
ad:98:ac:65:8e:64:c4:09:71:0a:8f:2a:fd:05:d4:
ed:17:82:2b:cd:3f:14:68:d1:fb:ee:f0:73:4d:e6:
f1:58:ab:7a:0c:4e:49:8a:6a:2b:74:3c:4e:ba:06:
fd:35:82:d3:c8:43:21:93:e3:d4:c4:2c:b2:2f:c0:
2b:0f:18:5f:18:53:b4:95:22:37:c7:02:a0:c6:cd:
5b:72:18:46:a7:e2:f9:2a:fd:af:8f:da:11:e5:76:
de:02:03:54:7b:48:a5:70:d9:c3:1c:3b:44:55:7d:
ed:b0:89:79:d0:39:df:99:e5:30:f5:63:46:08:e0:
a3:9e:18:e3:8e:75:cb:36:8a:01:8d:fa:fa:a5:53:
f3:08:4c:9b:77:17:6c:86:d0:7d:64:6f:8a:c5:df:
ee:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:61:9A:3A:AC:A3:6A:DF:C3:40:2B:A7:1E:07:5E:DB:93:56:46:E4
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.4.0/23
Signature Algorithm: sha256WithRSAEncryption
86:35:6d:4d:f2:89:d4:61:0c:c5:7b:14:b6:d3:4d:bb:5d:21:
dc:5d:6d:17:d5:f6:0a:50:5a:74:96:35:c0:1b:1e:19:a3:bb:
d9:ec:73:60:bc:a5:ca:4b:c6:56:ab:30:be:c0:09:0d:77:01:
ed:41:4c:56:bb:a3:b4:4f:2a:bb:bb:30:8e:6a:ef:aa:5f:15:
90:7d:b0:d2:78:7a:1c:a8:34:4d:d7:6e:56:1b:13:e7:77:ce:
47:05:8b:38:2e:b3:c5:e6:4b:df:fa:96:80:7d:91:85:88:78:
48:8c:34:73:cc:ee:14:a6:9e:9e:a1:bd:a8:4e:88:9c:9d:6c:
e8:13:cd:e6:f5:cf:b4:4c:db:45:80:de:a1:cf:ed:2b:08:12:
96:20:c9:c4:74:0e:d5:7d:65:0c:bd:29:c0:6d:cd:5a:51:ef:
c4:d1:18:b3:ae:67:a3:e3:15:c7:74:b7:8b:4c:75:f8:d0:1c:
1e:7f:1e:3d:3b:21:47:89:8c:cd:3b:e4:db:34:87:4f:f9:b9:
65:c1:d4:d4:6e:cd:12:c0:b6:a8:0e:72:90:52:35:ec:8e:7a:
71:0f:b7:27:05:99:00:36:b8:a4:82:75:80:8f:22:c9:e9:3f:
a3:b7:9d:dc:86:35:0c:57:82:e8:7b:8e:ff:1c:b3:57:d1:fd:
b5:d6:a5:3f
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUC6QzX02bk7lTBTo3GAnVG6/1V9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1
NGFmZGU3NjAeFw0yNjA4MDMwMzUyMDlaFw0yNzA4MDIwMzU3MDlaMDMxMTAvBgNV
BAMTKEE4NjE5QTNBQUNBMzZBREZDMzQwMkJBNzFFMDc1RURCOTM1NjQ2RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiksbVeHS8Fqq2IZUUsIbd5kVr
ZTaAEc8r78oQ8jEUezD1Oyx/b9/b3uy3JCP6VCZ6ySTHdNM/Uz31d9g02StQj1na
N4shZnUL6Zde8LwY/uRlFMR9vqLW1ufB+iW7IOAZ5yn4uW++ga2YrGWOZMQJcQqP
Kv0F1O0XgivNPxRo0fvu8HNN5vFYq3oMTkmKait0PE66Bv01gtPIQyGT49TELLIv
wCsPGF8YU7SVIjfHAqDGzVtyGEan4vkq/a+P2hHldt4CA1R7SKVw2cMcO0RVfe2w
iXnQOd+Z5TD1Y0YI4KOeGOOOdcs2igGN+vqlU/MITJt3F2yG0H1kb4rF3+4zAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUqGGaOqyjat/DQCunHgde25NWRuQwHwYDVR0j
BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh
NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT
djNuWS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct
ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzQyZTMw
MmYzMjMzMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEFxwQwDQYJKoZI
hvcNAQELBQADggEBAIY1bU3yidRhDMV7FLbTTbtdIdxdbRfV9gpQWnSWNcAbHhmj
u9nsc2C8pcpLxlarML7ACQ13Ae1BTFa7o7RPKru7MI5q76pfFZB9sNJ4ehyoNE3X
blYbE+d3zkcFizgus8XmS9/6loB9kYWIeEiMNHPM7hSmnp6hvahOiJydbOgTzeb1
z7RM20WA3qHP7SsIEpYgycR0DtV9ZQy9KcBtzVpR78TRGLOuZ6PjFcd0t4tMdfjQ
HB5/Hj07IUeJjM075Ns0h0/5uWXB1NRuzRLAtqgOcpBSNeyOenEPtycFmQA2uKSC
dYCPIsnpP6O3ndyGNQxXguh7jv8cs1fR/bXWpT8=
-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:55 2026 by rpki-client