Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35302e302f32342d3234203d3e20383334.roa
File: 352e3139392e35302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 43YOdBdXz6rqZe809xFoPraQRW+G+doWwx8NIZIbILs=
Subject key identifier: 43:DF:47:81:5B:C6:34:D7:D6:79:09:0E:D0:24:65:C7:6D:F0:F6:BC
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 7F3A33276C228EC55FA9E9EE32BD9014A659A673
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35302e302f32342d3234203d3e20383334.roa
Signing time: Fri 28 Aug 2026 02:32:23 +0000
ROA not before: Fri 28 Aug 2026 02:27:23 +0000
ROA not after: Fri 27 Aug 2027 02:32:23 +0000
asID: 834
IP address blocks: 5.199.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:3a:33:27:6c:22:8e:c5:5f:a9:e9:ee:32:bd:90:14:a6:59:a6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 28 02:27:23 2026 GMT
Not After : Aug 27 02:32:23 2027 GMT
Subject: CN=43DF47815BC634D7D679090ED02465C76DF0F6BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5e:83:54:72:d0:2e:4e:9d:11:8c:5b:33:0d:
bc:55:31:af:4b:6d:51:1e:c1:61:0d:43:16:0f:99:
a0:d0:63:cd:74:d4:06:b0:fc:1b:75:10:1e:38:13:
28:b6:5d:bf:6c:f1:98:7d:b2:84:80:57:9a:ef:15:
77:a4:0b:21:5a:b8:0b:47:70:c3:52:70:00:b1:87:
8b:3b:18:1a:43:5e:6c:88:f9:eb:dd:32:58:2d:2b:
2d:99:84:7f:2d:02:d6:6e:4a:5e:7f:84:33:00:26:
d7:7f:7e:eb:c5:9f:1f:71:24:bf:cd:b6:88:8e:5e:
2e:c5:54:d4:15:ea:fa:f5:f8:81:d9:11:92:05:3a:
14:fb:16:71:82:43:01:a7:46:26:75:2d:a3:fa:07:
fa:eb:3d:2a:57:7f:fe:15:94:4e:29:1c:96:1e:ca:
40:02:58:36:fb:ea:1e:f1:7c:b5:48:c0:f5:53:73:
c7:67:23:15:4b:6c:22:7e:a0:37:75:ef:66:d3:45:
c5:73:25:9b:a4:58:6c:e3:0f:ec:33:29:60:86:5a:
8a:96:6b:67:1d:26:df:73:54:9d:67:c6:c2:b0:4c:
2b:c1:60:be:d2:ab:75:8b:d3:e1:73:06:8f:33:4b:
8c:ad:f3:ad:c5:c4:11:ba:81:51:68:44:d1:20:15:
c5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DF:47:81:5B:C6:34:D7:D6:79:09:0E:D0:24:65:C7:6D:F0:F6:BC
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.50.0/24
Signature Algorithm: sha256WithRSAEncryption
54:89:d9:7e:35:55:99:c5:5d:19:87:20:49:35:bf:28:41:47:
d6:cf:1a:8f:14:25:69:79:69:32:80:e8:5d:77:6f:f6:8c:3b:
f0:f4:de:36:68:aa:96:01:e2:20:9e:3c:c0:06:d8:56:af:e9:
c8:37:17:d1:be:be:aa:42:0f:f3:01:1e:3f:a8:b3:00:5e:ab:
2f:19:02:88:d5:53:7e:26:13:be:05:8c:bf:7a:09:1e:bc:bd:
f4:08:fc:ab:42:c2:e0:53:e2:48:bc:c4:9b:d8:71:fd:de:e5:
fc:dd:1c:59:2c:d3:6b:f0:cd:99:9c:2d:3d:b8:01:67:d5:95:
48:60:6d:ad:62:41:f1:4d:4e:e2:d3:22:c1:1f:a6:e9:fb:33:
35:33:b6:9f:72:ff:08:7c:8f:97:93:3f:0e:f1:17:c2:8b:7b:
aa:a7:e8:e0:f4:81:f8:45:41:b8:6a:e3:f1:42:0b:73:83:20:
03:e4:c4:53:7a:d6:be:e6:a8:51:e7:54:78:2e:e7:3c:cc:a7:
13:91:bd:97:12:2b:74:fb:b1:64:3c:df:97:f9:a5:9e:5b:5b:
f9:b1:b4:3c:6d:f5:f0:91:9c:1d:ba:81:bd:38:43:87:49:0e:
44:6f:ab:6f:ae:11:5e:ea:bf:c6:de:fa:07:ad:6d:9c:1c:01:
1c:c9:bd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:43:33 2026 by rpki-client