Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e36322e302f32342d3234203d3e20383334.roa
File: 352e3139392e36322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: WfAIqT6KeD2Bm/ePCLqOuv95eQYWPXqlArjb93RtLPk=
Subject key identifier: 1C:E2:00:28:46:F5:4F:A9:79:94:B7:4A:48:E4:80:8E:F6:BB:E9:01
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 2FD2B4291BD88A6C74F7B285EED41120F0606FC9
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e36322e302f32342d3234203d3e20383334.roa
Signing time: Fri 31 Jul 2026 11:34:00 +0000
ROA not before: Fri 31 Jul 2026 11:29:00 +0000
ROA not after: Fri 30 Jul 2027 11:34:00 +0000
asID: 834
IP address blocks: 5.199.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 07:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d2:b4:29:1b:d8:8a:6c:74:f7:b2:85:ee:d4:11:20:f0:60:6f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Jul 31 11:29:00 2026 GMT
Not After : Jul 30 11:34:00 2027 GMT
Subject: CN=1CE2002846F54FA97994B74A48E4808EF6BBE901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:09:28:c5:29:e3:6f:a5:9d:fc:95:44:71:f1:
a4:ef:31:e3:1d:1b:43:05:ea:2b:b4:58:d0:b6:e1:
e7:a2:50:77:9e:65:19:eb:e2:39:da:d5:f4:18:e1:
33:30:80:fa:ad:69:d6:43:0c:09:18:b9:e3:67:66:
91:10:b2:25:8d:f0:63:3c:27:61:0e:9e:5c:c3:60:
7f:5f:72:14:84:69:74:20:ba:28:6c:4e:72:8d:0d:
61:0c:84:17:85:64:4f:27:78:33:14:ac:05:17:d7:
ad:89:27:b1:3b:46:a9:8e:f2:64:89:d7:23:d2:f1:
e7:ce:61:4f:74:69:90:24:07:d7:93:30:4b:74:bd:
87:a7:11:92:57:c1:22:c6:51:23:46:5e:e6:fc:99:
7e:1e:bf:64:17:e8:c0:1d:c4:7e:f8:a9:b9:d9:a8:
85:9b:13:38:f5:34:9c:de:64:5d:51:7c:02:5e:de:
d1:9d:55:64:fc:d9:ba:a0:6f:ac:ff:5a:01:1c:a1:
7a:46:9a:80:1a:5e:8e:d6:46:16:47:0f:80:0f:e7:
6c:81:84:2c:7c:3e:7c:aa:8c:05:4c:a9:21:13:00:
46:d2:dc:24:74:2a:db:c2:67:43:9e:b4:43:cd:99:
73:fd:c4:f9:b0:96:ce:de:59:f3:4d:55:0c:1f:31:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E2:00:28:46:F5:4F:A9:79:94:B7:4A:48:E4:80:8E:F6:BB:E9:01
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e36322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.62.0/24
Signature Algorithm: sha256WithRSAEncryption
53:a8:ca:b0:7d:33:69:64:44:1c:1f:70:2a:4e:1e:b4:6d:cd:
e3:48:c2:ba:96:77:38:fa:48:8f:8a:67:75:d0:7e:f1:43:43:
18:bd:c8:7a:8f:8a:c9:fe:9d:75:7b:91:0d:25:d8:e7:8d:cb:
08:bf:c2:88:13:08:c9:33:f6:f3:9e:d1:d8:a1:c4:65:44:6f:
17:ac:83:97:c1:c6:69:f8:39:a2:15:f3:0b:10:db:1d:9e:1b:
1d:95:ef:37:04:fe:d9:8f:53:93:7d:ee:8b:9b:24:a8:77:64:
c6:25:c7:9e:15:ea:af:3d:da:77:42:d3:fe:4a:f3:37:b5:af:
a4:e5:ea:4c:16:e1:28:9c:77:19:2b:fb:56:f3:75:4d:d2:b2:
72:ce:a8:d9:83:e4:3a:a6:05:84:85:4c:26:a1:c2:c8:42:75:
35:90:74:84:94:fd:9f:b9:51:5c:ab:0d:57:af:04:00:5d:83:
20:bd:6f:a5:e9:7c:a4:2a:9a:2b:40:2e:cd:20:6c:cd:2a:50:
89:d1:b7:86:c3:bd:3e:20:f2:47:5c:b0:21:5c:22:df:38:eb:
55:08:01:6c:79:91:8a:a1:db:f1:54:92:de:39:ae:58:69:4c:
be:7c:d5:ff:a5:89:7d:b1:a7:c8:e6:85:af:4d:7d:fb:87:0c:
67:24:e5:60
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUL9K0KRvYimx097KF7tQRIPBgb8kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1
NGFmZGU3NjAeFw0yNjA3MzExMTI5MDBaFw0yNzA3MzAxMTM0MDBaMDMxMTAvBgNV
BAMTKDFDRTIwMDI4NDZGNTRGQTk3OTk0Qjc0QTQ4RTQ4MDhFRjZCQkU5MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrCSjFKeNvpZ38lURx8aTvMeMd
G0MF6iu0WNC24eeiUHeeZRnr4jna1fQY4TMwgPqtadZDDAkYueNnZpEQsiWN8GM8
J2EOnlzDYH9fchSEaXQguihsTnKNDWEMhBeFZE8neDMUrAUX162JJ7E7RqmO8mSJ
1yPS8efOYU90aZAkB9eTMEt0vYenEZJXwSLGUSNGXub8mX4ev2QX6MAdxH74qbnZ
qIWbEzj1NJzeZF1RfAJe3tGdVWT82bqgb6z/WgEcoXpGmoAaXo7WRhZHD4AP52yB
hCx8PnyqjAVMqSETAEbS3CR0KtvCZ0OetEPNmXP9xPmwls7eWfNNVQwfMbBDAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUHOIAKEb1T6l5lLdKSOSAjva76QEwHwYDVR0j
BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh
NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT
djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct
ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzYzMjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAXHPjANBgkq
hkiG9w0BAQsFAAOCAQEAU6jKsH0zaWREHB9wKk4etG3N40jCupZ3OPpIj4pnddB+
8UNDGL3Ieo+Kyf6ddXuRDSXY543LCL/CiBMIyTP2857R2KHEZURvF6yDl8HGafg5
ohXzCxDbHZ4bHZXvNwT+2Y9Tk33ui5skqHdkxiXHnhXqrz3ad0LT/krzN7WvpOXq
TBbhKJx3GSv7VvN1TdKycs6o2YPkOqYFhIVMJqHCyEJ1NZB0hJT9n7lRXKsNV68E
AF2DIL1vpel8pCqaK0AuzSBszSpQidG3hsO9PiDyR1ywIVwi3zjrVQgBbHmRiqHb
8VSS3jmuWGlMvnzV/6WJfbGnyOaFr019+4cMZyTlYA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:53 2026 by rpki-client