Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35322e302f32322d3234203d3e20383334.roa
File: 352e3139392e35322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: bKfvs4JRfRoY1C+T6bI/SXZjRH0TP2iTsE+2Zhhn2mE=
Subject key identifier: BD:BB:16:64:B1:59:CD:2C:F4:CC:DA:FD:8A:D4:E4:0F:52:0F:19:B2
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 6DF216781058313A0ADCFA2EEF69CEE940CD2905
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35322e302f32322d3234203d3e20383334.roa
Signing time: Wed 02 Sep 2026 15:36:07 +0000
ROA not before: Wed 02 Sep 2026 15:31:07 +0000
ROA not after: Wed 01 Sep 2027 15:36:07 +0000
asID: 834
IP address blocks: 5.199.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f2:16:78:10:58:31:3a:0a:dc:fa:2e:ef:69:ce:e9:40:cd:29:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 2 15:31:07 2026 GMT
Not After : Sep 1 15:36:07 2027 GMT
Subject: CN=BDBB1664B159CD2CF4CCDAFD8AD4E40F520F19B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:2d:be:21:98:e2:9f:a6:f5:28:ed:78:93:
a1:e6:dc:73:81:ef:69:cf:e6:79:ae:b2:aa:81:3d:
82:d4:f6:05:9e:4f:4d:5b:c7:52:c8:1a:0f:e9:32:
2f:08:50:64:35:a8:bf:06:a2:15:bf:65:4c:d1:a1:
11:8a:dc:5d:1b:8e:bd:ec:43:7a:c9:7c:5c:49:70:
ac:d2:c1:2a:16:47:29:29:a5:16:c5:24:64:e4:b8:
53:a0:41:57:bb:1d:a1:95:5c:df:8b:ad:bf:03:eb:
46:fb:6b:cd:6c:99:bd:2e:24:27:66:50:c9:95:83:
dc:83:7c:9a:43:4c:a2:3f:a4:0c:10:dd:5e:a5:ca:
ad:17:ee:9f:a8:14:f3:c1:42:99:61:2d:dc:66:a3:
71:13:3e:d6:e0:67:1d:ea:ab:0e:a9:12:f7:88:7f:
26:a3:26:f7:35:9b:2e:0e:29:27:db:21:fb:0c:89:
a2:a7:57:da:2d:2a:97:52:af:68:55:ab:5d:24:10:
eb:15:e5:91:35:04:85:44:d7:4c:86:18:89:04:51:
24:7d:fa:93:4b:60:4e:d6:b9:39:7c:46:c8:83:3a:
cb:57:92:cb:02:e8:e5:7e:18:5e:0d:58:af:0b:76:
89:14:76:25:d4:e4:d7:16:b0:2c:6d:d9:db:0d:49:
b8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BB:16:64:B1:59:CD:2C:F4:CC:DA:FD:8A:D4:E4:0F:52:0F:19:B2
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35322e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.52.0/22
Signature Algorithm: sha256WithRSAEncryption
73:09:28:78:29:3e:6d:1f:69:37:f9:5f:cc:3f:20:88:89:cd:
7d:08:ef:43:72:54:e5:9f:0e:c8:48:23:5c:50:58:ed:9b:00:
3b:dc:ed:af:9d:69:98:04:bf:a2:2a:a7:01:67:bd:f4:9e:5c:
d0:ac:bc:38:39:4f:13:68:49:dc:3b:ff:d0:71:6b:62:1a:a5:
40:59:bc:c1:76:0a:53:25:36:57:c1:b1:a1:e7:97:39:f1:bb:
f4:f9:38:67:9b:4d:93:ab:6e:0e:50:67:34:49:8c:6f:c4:d1:
44:12:34:5e:cc:f0:27:0d:bd:15:2c:34:70:5d:21:15:c9:25:
b4:bb:aa:4e:5e:d9:ed:7c:2d:9e:45:86:0f:95:80:9e:23:76:
e3:03:df:d3:e2:6d:f3:e0:58:79:79:f5:00:d7:42:01:97:c6:
60:0c:11:c0:6c:88:b5:1d:c1:07:5d:dd:ee:41:01:73:6f:cf:
b0:26:22:80:b5:56:c8:21:4f:3d:f5:be:76:54:3a:b2:bd:14:
fe:ae:7a:44:49:e4:ce:39:b9:88:11:b2:8e:b9:da:83:2a:20:
77:b7:3b:3b:ef:23:47:31:b0:80:ab:2f:b4:65:9b:1e:6b:5f:
da:fe:c0:c7:28:39:01:f2:4b:68:a3:7c:fe:08:f6:5d:e2:74:
48:73:de:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:43:49 2026 by rpki-client