Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34372e302f32342d3234203d3e20323139333933.roa
File: 352e3139392e34372e302f32342d3234203d3e20323139333933.roa (raw, json)
Hash identifier: MFVLVtyg+SWbE7P1GMrVEd63KvRDUQA3sLlzx2K5ltQ=
Subject key identifier: E7:45:63:9A:33:B2:AD:55:C5:30:5D:59:5C:2F:86:C6:54:D1:C5:D9
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 59B12296570BB5C4254D1EC4612F64BAD45E3602
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34372e302f32342d3234203d3e20323139333933.roa
Signing time: Mon 31 Aug 2026 15:50:31 +0000
ROA not before: Mon 31 Aug 2026 15:45:31 +0000
ROA not after: Mon 30 Aug 2027 15:50:31 +0000
asID: 219393
IP address blocks: 5.199.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:b1:22:96:57:0b:b5:c4:25:4d:1e:c4:61:2f:64:ba:d4:5e:36:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 31 15:45:31 2026 GMT
Not After : Aug 30 15:50:31 2027 GMT
Subject: CN=E745639A33B2AD55C5305D595C2F86C654D1C5D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:6b:a3:65:62:c4:0d:ba:13:00:0c:4a:49:
3e:d2:1e:f8:f5:0f:86:c5:cd:88:6f:a8:99:76:85:
6d:f6:93:8c:b7:81:b3:db:f2:82:6f:66:4a:40:56:
03:db:98:54:b4:8a:57:e8:d5:fa:d4:91:d4:1c:30:
35:f1:f1:cc:1c:28:7c:70:bf:6c:90:44:d5:9c:bf:
c9:b8:41:9d:eb:9d:79:a0:4b:ab:1e:26:22:de:23:
c1:aa:37:3c:41:43:14:59:69:6e:f3:32:2c:27:36:
24:68:fb:c2:f6:2c:1a:35:c9:a7:64:9a:60:b1:53:
d5:a9:24:2b:b4:77:a8:30:e5:46:c4:62:10:56:a2:
2f:76:0c:f4:58:42:32:1a:d2:54:0d:e0:d5:7c:5d:
4a:31:a4:10:50:44:0c:f2:f0:b4:97:1e:98:3f:5b:
4b:10:e0:76:87:46:7d:bc:23:56:d2:82:42:d7:a9:
87:f6:e7:a7:82:cc:20:35:34:8d:a5:b0:8d:4c:39:
4a:23:6f:e8:6e:74:03:b6:a4:f3:66:d0:c6:c1:74:
7b:76:00:6f:bf:56:6f:ea:cf:a5:89:7b:61:81:81:
01:68:09:c4:0d:17:4b:9b:08:70:47:d8:d1:a8:e7:
d2:ea:a4:13:3d:5b:b8:63:bb:a1:22:23:2d:01:b7:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:45:63:9A:33:B2:AD:55:C5:30:5D:59:5C:2F:86:C6:54:D1:C5:D9
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34372e302f32342d3234203d3e20323139333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.47.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:e6:a0:16:27:8d:73:7c:7b:08:30:63:37:99:ee:52:0b:80:
5d:4f:a1:81:e8:93:26:73:da:e6:97:d9:26:24:e6:9c:14:b7:
fb:00:aa:6e:4b:90:80:08:b4:e7:bd:c9:b4:28:4d:9f:43:b8:
a7:3f:52:8b:e6:e8:f2:a9:55:2b:e1:6d:6e:63:b1:e0:85:f4:
c9:f8:65:84:d6:de:d7:f2:a4:8d:13:3f:5d:30:39:e2:cb:3f:
62:2e:5a:01:1b:29:63:9b:fb:e0:a3:f6:8f:1d:4d:7d:de:6b:
48:97:e9:f2:07:81:09:0b:0b:c7:1f:89:39:b8:d8:72:03:59:
4b:62:39:51:8e:09:b7:b2:6a:b0:f8:31:e3:3f:fa:1b:1e:24:
5b:44:c9:df:69:80:15:48:9b:45:d8:55:2f:fc:75:83:b1:a5:
80:6d:66:6d:dd:cc:9f:a8:bb:30:a7:a2:eb:34:a2:11:b0:8c:
b3:f8:37:07:80:da:c4:97:74:8c:c3:e2:7a:70:1f:cf:c8:e1:
2b:19:b1:ba:1a:6d:66:41:d7:08:7a:d2:ba:2c:76:99:9a:b8:
f3:b1:93:c3:f2:95:69:85:bc:ea:a4:28:31:43:78:10:83:d2:
ac:25:6e:29:1e:ac:8d:4e:8b:c3:6f:32:25:ba:63:24:96:4a:
6b:dd:6f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:47:33 2026 by rpki-client