Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34382e302f32322d3234203d3e20383334.roa
File: 352e3139392e34382e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: JL2ke8H7tiIYzswuQEY9UzpCcyC2a2ScP1CIhd5Q+Go=
Subject key identifier: 69:D8:C0:88:FD:24:FE:CC:57:7D:8E:FD:AC:3D:10:BB:66:99:69:7B
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 18E183C7BAEDCDE4B4AA9C87E38BD406B63E4C3D
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34382e302f32322d3234203d3e20383334.roa
Signing time: Fri 31 Jul 2026 17:35:45 +0000
ROA not before: Fri 31 Jul 2026 17:30:45 +0000
ROA not after: Fri 30 Jul 2027 17:35:45 +0000
asID: 834
IP address blocks: 5.199.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 07:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e1:83:c7:ba:ed:cd:e4:b4:aa:9c:87:e3:8b:d4:06:b6:3e:4c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Jul 31 17:30:45 2026 GMT
Not After : Jul 30 17:35:45 2027 GMT
Subject: CN=69D8C088FD24FECC577D8EFDAC3D10BB6699697B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:30:82:66:a5:a0:07:ec:a5:b8:fd:9e:db:
77:db:88:04:b5:e4:1e:34:2e:96:04:4c:e6:9b:7a:
ba:02:25:58:80:1f:bc:d8:a1:bb:5e:fb:55:2c:71:
47:eb:5a:c0:56:7a:cd:9b:37:32:cd:00:ea:1e:95:
27:bb:ee:e7:c8:04:96:52:a7:d2:c3:b2:da:72:73:
c9:82:10:1a:a4:53:35:c5:19:b9:fd:75:df:90:21:
c9:87:69:8c:ff:ba:db:10:a5:c5:60:f5:d6:ee:bf:
a7:6d:91:0c:5a:38:bb:b7:3a:c1:b6:45:f4:d9:9a:
94:4d:db:de:9b:3f:9d:8c:55:42:7d:f2:d9:6a:01:
e5:7a:68:92:a3:a1:6e:04:dc:62:33:7e:4a:90:d8:
6e:2c:5a:d2:63:ff:86:8a:62:e5:85:52:f1:04:a4:
d1:ec:a7:e4:22:73:3c:d6:b6:ff:90:90:3d:fa:48:
88:cd:bb:29:76:9e:d1:0a:bc:fd:0b:54:fa:c3:f3:
b5:b8:8c:ef:fd:c0:e7:4c:91:dc:8e:b1:45:40:24:
a2:52:d3:75:5e:31:38:74:88:87:90:ac:30:bd:06:
2b:e7:a2:81:a1:11:78:96:b7:28:f3:11:7f:db:ed:
c0:56:e0:41:d5:eb:86:50:8f:1b:6b:db:24:64:1e:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D8:C0:88:FD:24:FE:CC:57:7D:8E:FD:AC:3D:10:BB:66:99:69:7B
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34382e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.48.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:79:ef:9a:e6:43:1e:52:e4:55:9b:99:89:87:9e:85:d8:a0:
fd:b8:40:a2:7e:41:ce:e7:75:cb:27:63:73:bc:47:04:9a:08:
b1:e5:9a:e1:59:a6:87:1e:20:47:63:20:7a:ab:65:b1:70:74:
a7:b6:3d:d2:13:ad:ab:10:46:5b:d3:51:b7:06:de:fd:24:be:
9d:4c:a8:ca:8d:18:e4:10:73:df:e9:42:0b:09:dd:6a:80:3e:
aa:28:6d:0b:6f:2d:7d:f0:d9:6b:61:43:14:39:b9:c7:ca:49:
3e:85:d3:09:9e:f2:88:ef:cf:56:56:98:02:89:74:6a:26:8e:
77:89:5b:86:ec:62:2f:0b:36:b7:46:04:79:7f:aa:29:c0:31:
b2:23:d8:41:93:18:4f:62:70:71:0f:b0:f4:2d:3f:57:08:7d:
90:b9:5a:dd:b3:f4:ca:1a:d3:26:cd:6d:9b:8d:5e:3d:28:40:
8a:1d:5e:6d:98:2a:5f:8b:14:c9:e8:0b:78:e5:b1:b5:8c:ae:
2e:8a:a6:90:d6:ef:4c:a5:fd:80:78:69:f1:cb:55:c1:4c:81:
71:d0:8a:9f:49:da:e2:03:fb:83:4b:48:05:0e:96:c2:d0:f9:
38:bc:4b:11:a0:e5:60:86:59:bc:41:3f:73:f6:30:6f:19:f9:
1f:4c:65:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:06 2026 by rpki-client