Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34392e302f32342d3234203d3e20323138393535.roa
File: 352e3139392e34392e302f32342d3234203d3e20323138393535.roa (raw, json)
Hash identifier: KwVLCwYN4IvhnAqQ9el0yfhD5xN3wWnwYqsR7jO8TFk=
Subject key identifier: A5:75:0C:52:94:DF:4C:1B:D2:E8:EF:12:8E:95:27:0B:A8:93:3C:61
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 0EEDFEC558E0D8D78A650B7CE27FA181D7732B82
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34392e302f32342d3234203d3e20323138393535.roa
Signing time: Wed 02 Sep 2026 12:03:34 +0000
ROA not before: Wed 02 Sep 2026 11:58:34 +0000
ROA not after: Wed 01 Sep 2027 12:03:34 +0000
asID: 218955
IP address blocks: 5.199.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ed:fe:c5:58:e0:d8:d7:8a:65:0b:7c:e2:7f:a1:81:d7:73:2b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 2 11:58:34 2026 GMT
Not After : Sep 1 12:03:34 2027 GMT
Subject: CN=A5750C5294DF4C1BD2E8EF128E95270BA8933C61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:6a:59:e9:24:92:d1:86:a9:fc:d5:d5:54:
35:7e:c9:ca:73:5b:d4:c7:f4:6b:c5:de:77:7b:cb:
62:a5:12:68:ef:5d:ba:d0:5a:5e:c9:62:f2:48:e9:
bf:f8:19:9a:5d:6b:4d:11:54:94:31:ee:3b:2a:9a:
d8:90:de:29:13:8c:a7:ea:4c:f5:ac:ab:cd:48:21:
2e:a8:3a:7d:03:ef:c9:a4:a6:86:34:7e:98:e5:a1:
74:51:dd:f5:d6:24:df:9c:e8:52:b8:da:b8:75:44:
0d:7e:b1:5a:37:b8:6f:25:4f:b4:ab:2c:48:8f:31:
e7:40:fc:81:5f:76:2b:f8:8d:be:d4:3d:f8:24:3f:
2f:ad:d9:63:d6:79:fb:db:fc:6e:26:5c:f8:80:a0:
f8:0e:f4:e8:32:a0:5b:27:15:4d:6d:84:b7:0b:6e:
8c:f8:63:37:40:33:f6:58:39:b7:7f:4b:f9:62:2b:
f3:d1:9b:22:5b:96:d9:36:db:51:01:c0:dc:0d:f5:
e9:21:34:3b:43:f6:bf:db:05:00:05:90:a5:17:11:
42:6b:cd:4c:11:22:a2:e5:d8:25:74:7a:76:f3:ea:
6e:b2:45:c0:16:2d:93:97:65:26:e7:17:36:1b:1e:
04:0a:ed:22:88:70:05:eb:c3:72:bd:21:c8:cc:87:
ea:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:75:0C:52:94:DF:4C:1B:D2:E8:EF:12:8E:95:27:0B:A8:93:3C:61
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34392e302f32342d3234203d3e20323138393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.49.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:75:bd:b1:62:0d:c1:2c:74:26:42:60:9a:3f:98:17:4f:db:
68:04:40:d3:36:41:ce:68:9f:46:39:9b:a5:00:e7:f4:50:24:
55:a3:d8:a8:02:56:fb:e7:71:d4:60:8e:f7:26:66:1b:98:71:
78:41:ca:46:31:62:0c:af:e6:cb:ce:37:8c:f5:90:78:6c:da:
1e:c4:b0:56:ca:71:d8:80:41:58:54:9a:57:5c:0a:53:07:d2:
f0:36:37:36:20:11:3d:51:b7:1b:13:26:1b:a2:9b:45:31:6f:
15:0c:94:a0:ea:71:cc:d5:e1:df:81:05:c9:41:6a:80:20:48:
94:50:b8:30:38:86:50:32:ca:17:64:82:ff:da:9a:33:ab:e0:
ed:ff:6a:a6:ac:b2:94:b3:4f:23:81:12:0f:a1:b2:7f:11:5f:
38:4b:34:45:ca:eb:d9:22:93:47:16:8b:0b:7a:0c:24:07:ec:
05:dc:36:45:0e:b2:4e:4d:56:cd:4c:2d:6d:4a:ab:91:de:c1:
6e:b6:5b:66:85:eb:e5:b3:62:9a:8a:70:bc:8c:76:d3:5d:29:
69:da:02:f6:f2:17:10:9f:6b:00:16:02:87:08:32:87:cb:ec:
02:c2:a9:74:e8:a7:ae:d6:68:fe:71:8e:68:3b:8d:f1:d0:f8:
d4:41:09:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:40:24 2026 by rpki-client