Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34362e302f32342d3234203d3e20323138393130.roa
File: 352e3139392e34362e302f32342d3234203d3e20323138393130.roa (raw, json)
Hash identifier: YczWGeNWIJ4iGxpT1VdSpdj3LKxcLwEAx+zcxI/h38s=
Subject key identifier: 5D:7C:3E:60:AA:26:2E:B7:7F:0C:D1:BB:A7:0F:E5:29:F3:41:DC:32
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 5E4EF2F9B7EDFE32F38439E3A77A975CBD27BB4B
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34362e302f32342d3234203d3e20323138393130.roa
Signing time: Thu 03 Sep 2026 15:58:47 +0000
ROA not before: Thu 03 Sep 2026 15:53:47 +0000
ROA not after: Thu 02 Sep 2027 15:58:47 +0000
asID: 218910
IP address blocks: 5.199.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 20:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:4e:f2:f9:b7:ed:fe:32:f3:84:39:e3:a7:7a:97:5c:bd:27:bb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 3 15:53:47 2026 GMT
Not After : Sep 2 15:58:47 2027 GMT
Subject: CN=5D7C3E60AA262EB77F0CD1BBA70FE529F341DC32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:c7:da:2c:da:2b:d0:a5:24:60:4b:06:94:
87:4b:18:6f:e9:0c:25:6f:85:0a:e8:9b:ee:ed:97:
2b:9f:10:18:62:c3:84:4e:a0:d9:24:50:81:1d:cd:
df:22:a4:87:fc:e6:f4:cd:84:c4:f7:e3:e1:5a:58:
41:26:1c:22:de:ba:92:bc:03:e4:87:26:5e:f4:63:
46:38:18:56:2a:af:0d:b9:5c:d9:df:71:a5:da:bc:
93:d9:9c:33:0f:99:38:ef:74:2d:18:59:71:e7:9f:
db:e5:be:4f:4d:0a:c2:06:51:79:10:b3:bc:d6:a6:
7c:44:f6:de:44:e7:66:e6:50:c9:26:ee:cf:c5:dd:
28:ea:0b:40:e8:85:d5:53:82:2c:7d:a0:c3:90:08:
74:bb:d0:db:52:08:8b:7a:0a:2b:be:ca:94:7e:49:
6a:98:0a:bf:ce:15:2c:f5:8f:19:14:6a:49:92:fe:
c0:37:a0:b2:31:ca:f0:79:73:ee:48:7d:3c:6a:65:
1f:b1:ae:c9:c9:c1:fd:1f:bd:79:6a:f7:84:bf:02:
a5:bd:b9:77:f7:dd:cd:d8:31:89:88:51:5c:dc:67:
cf:52:e2:5e:18:14:ea:dd:21:82:09:38:15:60:ba:
0a:14:65:c8:bf:2f:ed:88:56:95:c4:86:7a:43:3f:
f1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7C:3E:60:AA:26:2E:B7:7F:0C:D1:BB:A7:0F:E5:29:F3:41:DC:32
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34362e302f32342d3234203d3e20323138393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.46.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:5a:7c:5a:87:48:e3:f6:e0:90:b8:6d:05:15:1e:63:69:e7:
f2:fe:3e:20:6d:3a:8b:7f:2a:2b:c3:22:46:e9:2c:12:aa:30:
c5:d3:f8:19:48:f7:e5:73:57:2b:05:51:70:8c:df:ee:46:e3:
bd:a6:d7:58:db:b7:dd:9b:2b:f7:22:7a:40:8f:37:34:29:23:
ac:88:3c:fc:46:23:93:f8:cf:77:c2:94:dc:a9:a3:9a:6c:d4:
94:0d:03:33:40:95:3e:01:2d:35:54:4a:2d:75:6d:bf:75:72:
e7:72:25:aa:db:dd:f7:38:d0:89:69:5a:bb:ad:ff:bf:c5:1c:
51:90:fa:6a:7e:d2:00:1c:54:9c:53:35:28:c7:a2:0c:04:7d:
bb:46:53:97:be:2b:94:11:fa:6f:da:d6:3a:97:67:02:5f:2d:
fc:d6:e3:7f:dc:12:b9:6b:70:71:f8:c7:dc:9d:f9:17:24:75:
1e:47:19:75:ad:87:b6:73:76:22:78:39:94:18:f9:aa:f3:d2:
ef:c1:9a:79:24:90:48:aa:64:5b:17:b3:a8:58:dc:f9:6b:e4:
4f:19:66:7c:f1:63:01:8c:e3:55:53:8e:ae:c9:96:fe:1d:46:
bf:16:c3:f1:f4:90:08:b4:30:7a:0d:74:a7:8f:6f:1b:95:6f:
d4:0d:1c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 10:43:46 2026 by rpki-client