Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35342e302f32342d3234203d3e20343032383433.roa
File: 352e3139392e35342e302f32342d3234203d3e20343032383433.roa (raw, json)
Hash identifier: xv1QWkpsSDzIjbXV34SkEXDnMHx+yMTq/wRYaxyNGQ4=
Subject key identifier: 19:BE:23:CB:DA:6D:2D:B9:9E:68:8C:1E:20:18:1C:7A:B0:90:97:55
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 50E183465C91F5962E041AF15E5B607C152D88AB
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35342e302f32342d3234203d3e20343032383433.roa
Signing time: Sun 02 Aug 2026 15:36:40 +0000
ROA not before: Sun 02 Aug 2026 15:31:40 +0000
ROA not after: Sun 01 Aug 2027 15:36:40 +0000
asID: 402843
IP address blocks: 5.199.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:e1:83:46:5c:91:f5:96:2e:04:1a:f1:5e:5b:60:7c:15:2d:88:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 2 15:31:40 2026 GMT
Not After : Aug 1 15:36:40 2027 GMT
Subject: CN=19BE23CBDA6D2DB99E688C1E20181C7AB0909755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:ff:63:7c:33:63:e3:b3:ca:13:cc:7c:4f:
1b:74:cd:89:12:ac:f7:0a:f4:da:88:8d:19:3c:ba:
e5:7e:ee:35:10:aa:7a:1c:fb:29:4e:f3:c8:cc:b9:
f9:5b:70:fe:5d:81:57:f9:cd:1e:76:7d:a3:c7:54:
be:37:02:b1:eb:b3:14:87:b2:75:b2:14:cb:40:6f:
0f:5c:fb:0f:83:6a:f1:f2:88:d8:0b:fb:7f:5e:ef:
7c:59:b1:a3:56:ff:19:8a:42:ac:16:ca:8b:c2:61:
50:72:01:d2:a9:8a:e6:bb:91:42:0c:bf:b5:04:89:
f3:e5:67:f6:a7:97:fc:a0:58:bd:fa:b0:6b:12:8b:
33:b7:67:b9:77:3e:d5:0c:31:15:b8:c7:52:f3:ff:
7a:a1:0d:c8:8f:e4:bc:af:fc:ef:af:b6:64:e1:aa:
02:20:4c:e6:d2:62:b8:76:40:54:74:6c:97:08:3a:
7c:b9:a5:e7:6c:86:03:9f:dc:9b:ba:c1:d2:49:c8:
89:16:48:39:72:c4:45:18:f9:f5:da:4a:60:00:a2:
35:ea:97:99:e0:28:cc:a1:38:c2:95:1a:fb:78:f6:
6b:49:c7:2c:89:fc:66:26:51:cd:3a:b5:26:75:28:
69:af:cd:8d:9c:0a:1b:b7:96:79:3d:55:ab:3f:ba:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BE:23:CB:DA:6D:2D:B9:9E:68:8C:1E:20:18:1C:7A:B0:90:97:55
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35342e302f32342d3234203d3e20343032383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:8a:51:02:5e:78:4b:7a:30:fe:52:df:fc:2e:5a:93:f8:53:
b8:67:da:de:96:de:8a:af:ff:69:06:c7:31:e4:27:b9:2f:f4:
70:d9:cd:dc:da:6b:1d:aa:e6:62:9a:6c:46:30:0e:ad:04:79:
89:9d:46:ac:5c:e2:c3:7b:31:22:3e:97:9b:98:56:a6:b7:d1:
b4:8b:fe:23:49:ac:06:52:35:d5:47:26:ef:ad:4f:59:bd:33:
c7:c7:d3:12:19:43:31:c6:f3:55:98:6e:2b:e3:5b:3b:b6:e5:
95:6c:a9:ed:6c:7e:f9:a2:29:74:a0:01:22:58:b3:92:96:69:
a7:5d:ff:26:eb:98:42:7f:c5:ae:ba:d8:49:df:a8:39:ce:f5:
a3:64:f0:a0:e8:e2:24:ee:22:94:66:7a:bc:9b:98:88:0c:78:
f0:ca:7a:2c:0e:fa:08:93:2b:04:38:03:cf:18:28:a1:b5:fe:
ac:e9:1d:5d:0b:65:c5:bc:d8:29:2f:0e:6e:30:1b:e7:33:14:
37:83:f1:0b:ba:f8:dc:b2:01:28:10:bc:3e:09:67:56:5a:d5:
da:79:bc:c0:81:56:e6:33:e6:1e:2d:1a:7e:4d:7f:e6:b6:82:
27:5d:09:63:67:a3:b2:a0:a0:08:29:df:e9:0f:f4:22:a9:20:
49:74:13:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:56:11 2026 by rpki-client