Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34372e302f32342d3234203d3e20323139333934.roa
File: 352e3139392e34372e302f32342d3234203d3e20323139333934.roa (raw, json)
Hash identifier: Y+J+t98DuCFUsfffmJViuVzgNiW513Y0J68OcXgP91g=
Subject key identifier: 21:07:1F:8A:68:50:98:22:9F:DA:70:13:1C:A6:2E:3E:42:34:D3:72
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 69D3A001ACA8B413C8B89ADDA4535F8EF1B7053B
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34372e302f32342d3234203d3e20323139333934.roa
Signing time: Mon 31 Aug 2026 15:50:31 +0000
ROA not before: Mon 31 Aug 2026 15:45:31 +0000
ROA not after: Mon 30 Aug 2027 15:50:31 +0000
asID: 219394
IP address blocks: 5.199.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d3:a0:01:ac:a8:b4:13:c8:b8:9a:dd:a4:53:5f:8e:f1:b7:05:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 31 15:45:31 2026 GMT
Not After : Aug 30 15:50:31 2027 GMT
Subject: CN=21071F8A685098229FDA70131CA62E3E4234D372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:27:9a:da:48:0c:e8:61:3e:da:a9:0c:84:
9c:81:f0:64:ed:71:28:5e:04:9e:c5:4a:17:c0:4e:
c1:fa:ed:97:7e:f8:82:e7:b9:2f:eb:cc:8f:a6:f6:
35:9c:67:dc:87:ff:d3:bb:a4:a7:8e:97:1d:6a:95:
64:68:88:12:99:54:00:de:97:21:3a:ac:55:42:59:
e9:21:84:66:35:0b:87:f4:91:c7:66:e7:1e:ec:28:
2a:fa:43:3c:b7:99:a6:0b:19:d2:3b:e0:ed:8e:23:
4b:58:c2:22:bd:cb:9c:01:de:e5:fb:87:d5:e8:0b:
b3:c7:48:ce:8e:81:8b:a8:0c:7d:87:44:f0:5f:3d:
af:19:81:f8:fa:51:4a:86:f7:f8:91:e1:62:b7:dd:
f5:90:85:6e:7a:5a:85:4e:98:46:be:25:68:38:1c:
5d:fa:7b:d6:f0:e5:f5:41:5e:6f:85:f0:b9:e8:6f:
b9:6d:c7:8f:46:0d:3e:83:ef:a0:be:20:2e:7e:f0:
ae:17:27:df:2d:aa:5f:6d:5e:9a:e8:16:e9:90:dc:
10:8c:6c:86:31:56:fd:4c:ad:fa:2c:23:68:af:de:
a0:92:2a:47:9d:f3:3c:62:de:e1:6f:3b:b8:05:e2:
81:b9:86:2c:34:5a:b8:3a:48:bd:4f:94:d4:80:6a:
01:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:07:1F:8A:68:50:98:22:9F:DA:70:13:1C:A6:2E:3E:42:34:D3:72
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34372e302f32342d3234203d3e20323139333934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.47.0/24
Signature Algorithm: sha256WithRSAEncryption
58:0d:f5:f9:1b:e5:28:98:0b:33:49:8b:c1:1c:54:cf:c6:9a:
33:51:5b:bd:19:4f:58:2d:13:6a:dc:21:5c:fc:7b:3b:df:3f:
d6:f9:36:eb:f5:bd:6d:eb:90:ae:43:83:83:b0:74:bd:56:b0:
88:d9:49:f7:2b:6b:49:ab:c7:2f:98:4f:c1:f1:ce:ac:f6:de:
9f:25:92:00:49:10:e4:41:6b:c4:85:4b:0c:88:20:28:db:e5:
46:a5:30:96:5a:46:92:a8:17:d9:f1:84:59:f3:c7:29:75:55:
60:c1:bd:8c:a0:8f:35:91:b5:50:e5:04:30:8c:89:07:dd:50:
b1:c9:78:53:e7:b5:8c:27:7a:cf:a7:64:08:2e:46:1e:03:5d:
66:7f:e7:5b:e7:09:f4:32:01:68:42:3f:3b:ba:e8:e1:5d:11:
e7:6c:ba:cb:08:33:86:79:d4:66:2d:7c:86:5a:d4:15:15:cd:
0f:b4:08:4f:90:33:f7:c1:de:bd:fa:8f:9e:f9:cf:44:de:4c:
7f:7e:d9:b5:a9:e6:b5:a7:13:3d:24:1d:f4:8c:ef:b2:91:a4:
fc:53:b9:90:05:4a:73:0a:05:c1:26:ec:40:50:2c:cf:07:47:
d7:1b:12:f2:5e:28:0a:92:dc:8e:34:a2:eb:83:67:27:3e:bc:
ef:da:a8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:47:36 2026 by rpki-client