Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34362e302f32342d3234203d3e20323138393535.roa
File: 352e3139392e34362e302f32342d3234203d3e20323138393535.roa (raw, json)
Hash identifier: 7qkjxo29kKutpWr0dC1IVH+uQzobw47wEJ3OLv5cOVA=
Subject key identifier: E1:1C:F5:8B:90:8E:3C:62:4B:9B:09:33:B4:38:87:4A:DD:02:06:FC
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 6A159D685343376860D25DA722577EB2AB0348A8
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34362e302f32342d3234203d3e20323138393535.roa
Signing time: Wed 02 Sep 2026 13:37:03 +0000
ROA not before: Wed 02 Sep 2026 13:32:03 +0000
ROA not after: Wed 01 Sep 2027 13:37:03 +0000
asID: 218955
IP address blocks: 5.199.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:15:9d:68:53:43:37:68:60:d2:5d:a7:22:57:7e:b2:ab:03:48:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 2 13:32:03 2026 GMT
Not After : Sep 1 13:37:03 2027 GMT
Subject: CN=E11CF58B908E3C624B9B0933B438874ADD0206FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:af:26:bc:13:46:92:a1:07:b5:cb:5c:ca:
5f:7a:18:a6:28:1f:8d:d6:24:85:39:e1:09:dc:53:
06:d8:80:5b:02:09:33:74:30:83:80:6f:4b:a9:6a:
d2:0e:0d:5a:d8:ba:f3:87:69:51:d8:0f:07:67:55:
c5:79:ae:b4:68:d2:38:bc:af:e6:70:f6:26:32:ba:
20:a0:a9:34:78:e3:6a:80:04:29:d1:65:a4:04:71:
bb:e4:5a:25:d7:d9:56:19:a7:7b:33:63:87:32:61:
5b:aa:b3:e8:53:75:7c:c2:70:df:ab:7b:82:1e:81:
21:b2:51:dc:7f:5d:e5:c5:06:7c:52:af:b2:3c:c0:
6d:71:a6:58:a0:7a:87:b9:42:00:ca:84:6c:09:02:
cf:8f:5a:0f:1e:ac:fb:67:79:e4:d7:8c:ec:00:02:
72:3f:f8:b1:18:66:a2:e7:8d:36:9f:bb:58:bd:df:
6a:d0:de:2a:0d:5d:e7:7f:38:71:81:25:4e:d5:82:
13:a2:e1:3f:44:63:e5:ca:25:3a:64:4a:c0:84:c2:
e2:a9:57:b7:8a:68:be:59:a5:c8:ed:cd:b2:51:c8:
83:77:27:b3:cf:0b:64:c2:8a:f7:90:76:40:0f:28:
c3:06:14:1b:1d:86:dd:f4:38:56:a8:41:85:28:98:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1C:F5:8B:90:8E:3C:62:4B:9B:09:33:B4:38:87:4A:DD:02:06:FC
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34362e302f32342d3234203d3e20323138393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.46.0/24
Signature Algorithm: sha256WithRSAEncryption
af:17:e7:64:04:78:b6:72:29:a9:95:bf:5c:62:51:77:9b:63:
c5:27:d9:e7:71:17:d4:58:43:fc:9c:ea:1c:44:a6:3d:5f:8d:
f4:6e:32:6c:b0:53:b6:a7:06:28:f4:0d:ec:9e:fb:76:dc:e1:
3c:d0:ba:6c:cb:20:fb:c3:94:4f:ff:32:69:3c:0a:ca:69:2a:
7d:eb:18:0e:8a:d0:25:37:37:7e:4d:07:6e:de:a8:e3:67:ae:
0a:59:7c:6c:b5:bc:bc:0e:f8:23:6a:c6:b8:eb:af:8e:44:72:
93:0f:00:11:a8:e5:b6:3d:28:d3:90:9d:63:9b:44:58:90:87:
cb:bd:2a:12:86:e0:db:ad:8f:44:16:73:c3:56:d6:b7:c4:fa:
5f:4a:e0:51:36:96:d8:21:1a:ca:cd:4c:7b:d6:ba:a6:47:fe:
df:24:54:f7:f1:ea:34:ff:ef:bb:29:47:fa:c5:bd:b5:e3:33:
8e:f9:b2:3d:0b:10:80:bd:2d:13:f2:42:52:6e:be:6d:5e:ca:
f3:13:15:81:65:44:c4:20:d8:42:60:fc:1b:37:3f:03:36:c3:
30:8e:75:f5:8e:5c:e8:a0:9f:09:3c:16:9e:95:a4:ef:1c:12:
f7:d5:77:c5:a4:53:ac:6d:a7:1f:e2:63:0b:01:22:9c:46:46:
3d:a5:0b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:40:15 2026 by rpki-client