Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35312e302f32342d3234203d3e20323139333933.roa
File: 352e3139392e35312e302f32342d3234203d3e20323139333933.roa (raw, json)
Hash identifier: K+MERjwMyFrbzMcHq/yDPs1hX7Gtj0IXQARp1YhcflA=
Subject key identifier: F9:41:06:D9:C3:36:0D:41:AC:B0:32:B5:6E:AF:1C:B8:23:32:8B:ED
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 032FDC3287C0A40354EE3F26F9596BA3E2057D5A
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35312e302f32342d3234203d3e20323139333933.roa
Signing time: Fri 28 Aug 2026 02:32:07 +0000
ROA not before: Fri 28 Aug 2026 02:27:07 +0000
ROA not after: Fri 27 Aug 2027 02:32:07 +0000
asID: 219393
IP address blocks: 5.199.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:2f:dc:32:87:c0:a4:03:54:ee:3f:26:f9:59:6b:a3:e2:05:7d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 28 02:27:07 2026 GMT
Not After : Aug 27 02:32:07 2027 GMT
Subject: CN=F94106D9C3360D41ACB032B56EAF1CB823328BED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cd:7f:61:ad:3f:aa:a5:d0:52:97:63:46:8f:
40:29:97:c5:83:b7:d0:dc:45:a1:26:03:26:be:25:
1d:e6:a5:61:e9:de:4c:80:60:75:05:ec:bf:33:44:
7d:4f:76:30:57:77:c8:f9:4c:2b:d5:8a:44:12:bd:
11:06:47:39:d8:16:53:95:a2:d8:e4:a1:11:79:74:
ed:21:0d:05:1d:f6:22:e6:b7:13:6f:da:fa:f5:b9:
09:83:11:6c:28:39:7b:a2:53:03:80:26:cc:71:2c:
0c:27:a2:22:b4:f9:17:3d:a5:7e:b6:29:9b:a9:cd:
19:98:07:5a:b8:58:db:eb:b8:ae:c4:a7:16:a4:ac:
08:4d:b4:a3:ff:5a:70:eb:31:bd:03:57:2e:57:df:
d5:bb:a1:75:cb:ec:64:bd:38:2d:23:25:cc:f7:69:
b4:1c:2e:4e:19:c7:e9:58:72:90:cf:80:74:7e:f9:
76:c3:ca:0c:de:f5:b4:d1:e4:c9:91:11:50:28:37:
9b:7b:8f:13:82:66:3f:0b:cd:a6:50:d7:8b:fd:ce:
cf:78:7e:02:83:df:e5:10:1f:07:e6:09:72:a0:34:
f0:ca:ed:6b:f7:c5:0a:06:38:12:60:65:a8:c8:c1:
02:55:c1:e7:95:b2:56:aa:44:5c:66:61:e5:19:49:
9b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:41:06:D9:C3:36:0D:41:AC:B0:32:B5:6E:AF:1C:B8:23:32:8B:ED
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35312e302f32342d3234203d3e20323139333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.51.0/24
Signature Algorithm: sha256WithRSAEncryption
75:92:58:80:b0:7f:85:bd:be:1b:d9:96:1f:81:d2:0d:88:20:
07:4b:cf:e2:32:50:27:1e:48:b3:7b:a4:47:42:19:ca:39:2e:
3b:99:60:8b:00:c1:63:f4:bb:70:9a:a2:c8:c9:d7:21:52:ad:
fd:2c:4d:3b:6c:f4:a8:b3:66:2f:93:c7:6b:71:5a:95:b9:7c:
34:21:55:66:79:f3:a5:19:37:9c:0f:fb:a6:f5:b3:26:70:d0:
6f:5b:95:4a:c7:68:25:aa:60:93:de:6b:18:10:10:76:fb:8f:
fe:0a:19:8b:24:24:04:1f:a8:56:7a:dc:84:d9:18:d3:ab:4a:
f4:d1:ab:ad:12:7e:31:36:a6:c3:5c:db:bb:07:2f:69:28:81:
96:15:1f:02:10:92:c8:5f:9f:3a:61:23:b0:a3:60:c8:f5:19:
ca:36:7a:19:6d:5d:6b:7a:16:9e:0d:ee:b2:d3:99:a2:9b:b6:
20:b9:7d:b4:4e:3a:6b:ea:3e:e0:01:4d:c3:ac:b5:15:57:0e:
a7:bf:66:88:87:c6:1e:b7:ee:86:5b:f4:fe:43:31:2e:13:48:
12:88:04:98:a3:f4:0e:be:b8:69:75:6b:21:f2:5d:d9:c1:d3:
4f:61:9e:4f:9e:cd:7a:f1:ea:86:dd:fe:a4:b9:c6:a0:94:19:
18:f9:e5:31
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUAy/cMofApANU7j8m+Vlro+IFfVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1
NGFmZGU3NjAeFw0yNjA4MjgwMjI3MDdaFw0yNzA4MjcwMjMyMDdaMDMxMTAvBgNV
BAMTKEY5NDEwNkQ5QzMzNjBENDFBQ0IwMzJCNTZFQUYxQ0I4MjMzMjhCRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOzX9hrT+qpdBSl2NGj0Apl8WD
t9DcRaEmAya+JR3mpWHp3kyAYHUF7L8zRH1PdjBXd8j5TCvVikQSvREGRznYFlOV
otjkoRF5dO0hDQUd9iLmtxNv2vr1uQmDEWwoOXuiUwOAJsxxLAwnoiK0+Rc9pX62
KZupzRmYB1q4WNvruK7EpxakrAhNtKP/WnDrMb0DVy5X39W7oXXL7GS9OC0jJcz3
abQcLk4Zx+lYcpDPgHR++XbDygze9bTR5MmREVAoN5t7jxOCZj8LzaZQ14v9zs94
fgKD3+UQHwfmCXKgNPDK7Wv3xQoGOBJgZajIwQJVweeVslaqRFxmYeUZSZshAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU+UEG2cM2DUGssDK1bq8cuCMyi+0wHwYDVR0j
BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh
NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT
djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct
ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzUzMTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzOTMzMzkzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAXH
MzANBgkqhkiG9w0BAQsFAAOCAQEAdZJYgLB/hb2+G9mWH4HSDYggB0vP4jJQJx5I
s3ukR0IZyjkuO5lgiwDBY/S7cJqiyMnXIVKt/SxNO2z0qLNmL5PHa3Falbl8NCFV
ZnnzpRk3nA/7pvWzJnDQb1uVSsdoJapgk95rGBAQdvuP/goZiyQkBB+oVnrchNkY
06tK9NGrrRJ+MTamw1zbuwcvaSiBlhUfAhCSyF+fOmEjsKNgyPUZyjZ6GW1da3oW
ng3ustOZopu2ILl9tE46a+o+4AFNw6y1FVcOp79miIfGHrfuhlv0/kMxLhNIEogE
mKP0Dr64aXVrIfJd2cHTT2GeT57NevHqht3+pLnGoJQZGPnlMQ==
-----END CERTIFICATE-----
Generated at Fri Sep 4 15:47:49 2026 by rpki-client