Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34332e302f32342d3234203d3e20323138383837.roa
File: 352e3139392e34332e302f32342d3234203d3e20323138383837.roa (raw, json)
Hash identifier: V+QIYunj7viOr+QocrhGFWu9SuRYl68ZqQhSMHDUDaY=
Subject key identifier: 3C:27:9D:23:41:B3:59:3D:A2:22:81:7A:F7:19:FB:37:77:22:41:BD
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 6967715D83B3EBFDE20CD81F46133B85F8E59C84
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34332e302f32342d3234203d3e20323138383837.roa
Signing time: Mon 07 Sep 2026 09:32:48 +0000
ROA not before: Mon 07 Sep 2026 09:27:48 +0000
ROA not after: Mon 06 Sep 2027 09:32:48 +0000
asID: 218887
IP address blocks: 5.199.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:67:71:5d:83:b3:eb:fd:e2:0c:d8:1f:46:13:3b:85:f8:e5:9c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 7 09:27:48 2026 GMT
Not After : Sep 6 09:32:48 2027 GMT
Subject: CN=3C279D2341B3593DA222817AF719FB37772241BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:f7:bf:ba:eb:40:06:8f:89:a0:14:ba:e5:
dd:36:4f:86:74:fc:c0:84:a1:3f:3d:98:4e:cd:9e:
8a:90:d5:b2:31:d9:63:96:23:c2:8d:09:39:27:f8:
0a:24:d9:1f:64:83:8c:08:64:af:5a:90:c6:46:f2:
5c:f1:3d:c6:3b:9d:18:54:06:12:46:6c:b1:c5:39:
f4:0d:d3:f9:2b:c1:da:6a:0b:e3:15:f0:aa:d2:9c:
e9:60:ea:30:4c:1c:cf:02:ae:30:02:33:9a:6a:9c:
3c:58:90:81:e9:22:3b:d8:14:67:50:b2:bf:a4:82:
df:6f:d1:47:c8:d6:05:f1:c6:eb:79:38:9c:c8:e3:
bb:c6:ba:45:38:d6:c9:69:d6:f5:48:25:07:ee:bb:
87:e8:63:00:c4:f4:e1:90:d6:3d:b9:23:e2:be:d2:
22:c1:99:b3:5d:ec:f6:80:4f:46:f5:fa:53:e0:57:
01:47:a9:b6:64:c0:2e:14:6f:d8:a1:74:16:25:eb:
d6:8f:dc:15:1c:ff:41:62:cb:cd:4a:74:ae:8e:85:
b7:f0:46:de:c8:26:75:7f:53:86:b0:49:5d:e2:2e:
9d:03:21:bd:8c:21:85:4d:1f:7c:33:a3:23:de:15:
32:8a:ac:91:a7:85:e2:4e:4d:61:aa:e6:dc:5f:45:
41:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:27:9D:23:41:B3:59:3D:A2:22:81:7A:F7:19:FB:37:77:22:41:BD
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34332e302f32342d3234203d3e20323138383837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.43.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:43:40:b4:73:cc:49:ca:55:35:0e:f8:20:9e:65:b1:c2:e4:
93:9f:f5:ba:f3:41:c9:fa:50:bb:e8:5c:be:b3:67:57:47:c5:
2e:05:56:21:82:ad:6a:04:05:07:7b:41:0d:b3:9f:ba:15:d9:
7d:bd:ac:1c:e4:48:8e:2d:b5:ad:1c:8c:64:89:37:21:1b:d8:
3c:70:16:92:08:45:6c:8a:ae:f4:8e:c6:40:ae:c7:dc:e8:d9:
2c:02:ef:f9:04:d1:3b:72:c7:79:5b:dc:48:e6:07:92:f1:09:
97:10:63:a5:f5:2d:ae:22:b2:be:65:a8:74:75:b5:3e:aa:71:
d3:be:d8:46:5a:0e:c2:6f:5e:ab:3e:fd:3f:bf:36:84:98:c0:
7f:e7:93:d6:2d:b1:26:5a:0e:4f:7a:95:47:00:85:e9:a2:19:
a9:9f:e3:de:d9:ea:f3:37:19:b7:49:65:4e:a7:52:d5:e2:70:
61:4c:d2:e7:f8:1a:0e:60:f9:ae:b8:c3:4a:55:c8:27:3b:be:
39:dc:57:91:6a:23:2a:39:c3:fb:3d:e6:19:30:b5:88:1d:59:
7e:70:d7:d6:c8:81:21:2f:01:4b:50:4c:13:79:69:82:09:84:
42:cf:b6:a1:bc:d2:0f:dd:01:4b:42:5c:17:fe:be:31:d2:aa:
5c:7c:b5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 07:33:02 2026 by rpki-client