Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35382e302f32342d3234203d3e20323138383837.roa
File: 352e3139392e35382e302f32342d3234203d3e20323138383837.roa (raw, json)
Hash identifier: de4FazHkiYr0VexIKwQhrmeeNxjCxAvnMlezJ2lvpZU=
Subject key identifier: 7A:94:48:4D:CA:98:04:7A:6D:D3:4B:87:41:05:65:9C:79:51:A6:38
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 5EF265AC163C40FB892EE088208BCD0D8C31F941
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35382e302f32342d3234203d3e20323138383837.roa
Signing time: Mon 14 Sep 2026 05:44:36 +0000
ROA not before: Mon 14 Sep 2026 05:39:36 +0000
ROA not after: Mon 13 Sep 2027 05:44:36 +0000
asID: 218887
IP address blocks: 5.199.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f2:65:ac:16:3c:40:fb:89:2e:e0:88:20:8b:cd:0d:8c:31:f9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 14 05:39:36 2026 GMT
Not After : Sep 13 05:44:36 2027 GMT
Subject: CN=7A94484DCA98047A6DD34B874105659C7951A638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:06:8d:20:a0:1c:03:3d:f1:9f:90:ca:f7:
eb:66:38:24:75:e6:d4:13:ff:b2:dd:3d:6c:1b:61:
4b:29:63:1d:de:8c:51:79:aa:ce:d5:f9:01:39:15:
e6:89:53:09:1b:bd:e7:f1:2c:1c:96:3f:f3:17:e2:
3a:82:58:0a:77:0b:99:a1:a2:f9:02:73:f6:01:32:
1b:a8:fd:05:20:2e:67:d5:6e:45:da:fb:d4:0f:57:
52:2d:a3:b8:ce:53:42:f7:69:a8:17:76:d2:a2:4d:
8d:9d:3f:02:3c:93:2d:4e:a7:f0:fa:e3:1a:2a:08:
e2:96:57:f3:1d:3e:50:02:1b:ed:4e:3c:25:aa:41:
f9:b3:0b:91:aa:81:f4:62:54:66:55:2a:b7:12:9d:
29:94:91:e8:4b:92:da:78:7e:ec:29:3f:6f:16:53:
15:53:63:a2:1e:56:37:9c:e7:da:9c:dc:7a:66:75:
54:d9:e5:cc:03:0b:0f:a3:a0:c1:91:e4:e8:06:b8:
20:df:c3:b5:e9:01:94:e9:5b:8d:cb:e6:ab:7f:ae:
d9:10:2d:51:3a:d2:a7:34:34:6f:b1:c1:4b:ca:a0:
b2:4a:ce:19:9e:7e:df:01:d1:a0:44:dd:dc:58:10:
1a:b4:5d:78:f3:16:d4:14:20:2d:63:2e:21:8d:b4:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:94:48:4D:CA:98:04:7A:6D:D3:4B:87:41:05:65:9C:79:51:A6:38
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35382e302f32342d3234203d3e20323138383837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.58.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:09:c5:a3:dc:d4:c7:b2:d6:49:b0:40:36:7f:9b:70:9c:4f:
bf:59:db:5a:13:27:72:50:08:41:62:1b:8b:ab:98:9b:ce:d2:
cb:e5:2c:b3:d6:97:48:fe:83:7c:9b:14:2f:79:68:3d:a4:9c:
15:60:2c:ab:3d:60:b4:19:51:55:e1:2f:0d:f0:0f:87:2d:d7:
0c:41:ca:58:60:fb:87:23:a6:7f:24:79:3e:30:73:94:30:ec:
24:d8:25:c1:9b:c8:78:f7:8e:85:aa:99:b5:71:7b:60:ae:31:
e1:b3:8f:3b:52:68:ea:40:f0:89:d3:e3:80:22:33:ea:f5:fc:
39:5a:eb:29:0f:d7:3e:22:03:fe:1c:42:03:78:8d:8f:df:b0:
24:c6:1a:af:92:84:e6:42:ed:0a:21:b7:01:76:b7:f5:4e:a0:
70:31:3d:89:94:0a:89:45:12:25:75:ed:44:e5:7a:7e:f9:de:
84:ae:61:af:e3:dd:56:c4:94:f0:81:3b:44:23:af:d4:c3:be:
b1:12:03:3d:be:46:5b:06:2c:1c:25:74:53:6f:50:0f:de:b4:
24:26:8f:dd:b6:33:39:37:6e:e8:2b:df:a9:74:1a:f7:0a:d5:
eb:01:3d:71:4c:78:3f:49:3e:7b:89:85:2d:29:4a:7e:fb:e3:
f6:48:99:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 07:32:59 2026 by rpki-client