Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35352e302f32342d3234203d3e20343032383433.roa
File: 352e3139392e35352e302f32342d3234203d3e20343032383433.roa (raw, json)
Hash identifier: RAZi1UbVYLDpEY/ROYFZBVpE9PVt58W++aTMiDfGf0I=
Subject key identifier: 82:3C:7F:C6:E8:BE:E3:E0:D9:8D:4F:8B:7B:FA:43:90:37:4A:2F:C3
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 0DCC95A9CB681AC3EF87490CE4FF2412C5D3D8CD
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35352e302f32342d3234203d3e20343032383433.roa
Signing time: Sun 02 Aug 2026 15:36:38 +0000
ROA not before: Sun 02 Aug 2026 15:31:38 +0000
ROA not after: Sun 01 Aug 2027 15:36:38 +0000
asID: 402843
IP address blocks: 5.199.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:cc:95:a9:cb:68:1a:c3:ef:87:49:0c:e4:ff:24:12:c5:d3:d8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 2 15:31:38 2026 GMT
Not After : Aug 1 15:36:38 2027 GMT
Subject: CN=823C7FC6E8BEE3E0D98D4F8B7BFA4390374A2FC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:bc:5e:4c:20:d6:44:b3:67:f8:ff:4f:8e:
24:bf:84:16:55:51:7c:ae:f4:17:36:ee:62:2c:a6:
28:db:83:b5:d9:b9:73:91:e2:c5:52:a1:ba:56:2e:
db:84:8d:42:ea:dd:ad:cf:93:bf:6d:4b:ed:d9:62:
bd:f0:1a:69:10:f0:4a:41:63:16:4a:df:2a:d8:30:
ff:c8:8d:e4:7d:7d:c6:ee:e2:d5:8a:ac:52:cc:fc:
6a:3c:6f:89:94:e0:33:61:3b:7a:32:c7:bf:a4:d4:
e6:9a:f4:81:f0:df:9c:b4:81:3e:d1:c5:09:2c:0f:
6d:a8:d3:da:3f:0a:86:45:b7:8a:9d:b4:a5:b0:d5:
02:15:75:b5:99:27:1e:d4:22:fb:16:f2:ea:5d:39:
2a:0e:47:25:a3:b0:78:28:5f:20:43:d7:0f:77:e1:
61:c0:31:d8:b2:43:d2:01:60:ec:9d:80:70:22:28:
47:99:0b:37:a7:c2:ff:89:83:a6:7a:bc:e8:f0:9a:
ec:5f:a5:50:f6:eb:76:69:32:86:4e:00:58:f8:e2:
65:6b:5b:de:88:06:5b:77:2c:38:82:67:d0:df:0b:
18:53:a4:d9:95:2f:77:02:54:20:7e:da:6e:2d:c9:
16:a6:25:92:99:aa:32:d8:7e:37:4c:67:60:5b:a3:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3C:7F:C6:E8:BE:E3:E0:D9:8D:4F:8B:7B:FA:43:90:37:4A:2F:C3
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35352e302f32342d3234203d3e20343032383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.55.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a3:e9:fa:1f:ea:dd:d1:4d:59:08:0d:8f:cb:b7:eb:66:a7:
85:8b:3b:41:14:4d:fa:dc:9a:30:c9:8a:8d:99:65:79:38:73:
18:14:4e:99:cf:fc:e3:91:a7:1f:62:3f:a9:33:42:ae:d5:0b:
a4:57:d3:25:b9:fc:44:e7:54:a6:8e:81:71:c9:66:da:0c:8e:
f0:ad:8a:e1:5c:9b:d8:f9:e1:0e:50:c4:44:a8:63:2b:36:b7:
0a:24:4e:70:68:92:a3:9a:7f:8a:04:ac:b1:cb:29:e5:89:3a:
13:a5:e7:2a:56:ee:ad:b8:3f:cd:e6:2a:7f:60:be:dc:ff:2e:
bd:49:19:55:63:5a:4f:4e:7b:72:14:ee:38:8d:61:3f:37:9e:
c9:82:1d:a7:58:d0:ac:d1:07:06:53:bf:7e:6e:ce:41:1c:f5:
e8:12:c6:b4:2b:53:59:4f:13:f2:80:2d:27:06:b1:9d:c6:08:
ef:da:cf:b0:26:2e:f3:ed:76:05:52:e9:24:6e:9d:2e:da:91:
20:0a:31:ee:87:06:a4:43:bc:36:be:ed:24:22:43:2b:70:28:
1c:83:e5:67:34:d0:90:ab:6f:63:d5:53:a5:ca:35:94:c5:e0:
89:08:6d:fb:5a:69:ff:1a:fd:bd:f0:54:fa:8d:7f:9e:60:4f:
df:04:c5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:56:14 2026 by rpki-client