Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e36332e302f32342d3234203d3e20323138393535.roa
File: 352e3139392e36332e302f32342d3234203d3e20323138393535.roa (raw, json)
Hash identifier: +CR8IJL29BNpjYIxK9xe2SWHstXiW54hoXEPf1dRO4g=
Subject key identifier: C9:DD:16:46:2B:67:12:16:48:F6:B4:4B:EE:B5:1A:86:9B:49:0A:3C
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 20677E407FF043488447B20FE28010B76BBE7694
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e36332e302f32342d3234203d3e20323138393535.roa
Signing time: Wed 02 Sep 2026 12:03:21 +0000
ROA not before: Wed 02 Sep 2026 11:58:21 +0000
ROA not after: Wed 01 Sep 2027 12:03:21 +0000
asID: 218955
IP address blocks: 5.199.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:67:7e:40:7f:f0:43:48:84:47:b2:0f:e2:80:10:b7:6b:be:76:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 2 11:58:21 2026 GMT
Not After : Sep 1 12:03:21 2027 GMT
Subject: CN=C9DD16462B67121648F6B44BEEB51A869B490A3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:53:72:af:6a:a0:d9:9d:83:63:83:7a:f7:
ca:b8:19:64:87:f7:84:42:ee:20:68:cd:3a:93:96:
5a:90:c0:6f:cb:51:73:db:65:87:a6:90:68:56:cd:
7b:28:d9:9b:3f:3b:bd:bf:ac:aa:96:67:75:82:74:
4c:7c:1e:72:49:8d:4f:e9:e2:9b:ca:f5:5b:d0:e2:
2d:70:20:18:f8:0d:eb:25:c9:89:19:3f:e0:06:b1:
8d:9f:4f:3f:be:fd:ee:62:91:b5:cf:6f:70:12:1f:
0e:3b:c4:7d:58:b5:f3:25:63:5d:1b:e7:6e:8d:a0:
39:39:16:24:f2:d5:f5:fe:7d:ea:ce:f2:ef:12:5f:
ac:dd:3e:48:7a:07:07:65:2c:1a:c5:8c:fd:57:91:
ec:47:8e:ec:9f:52:6a:b9:fa:7d:92:61:f5:77:15:
b7:67:2c:b4:cb:dc:2b:61:82:13:07:d1:c6:fe:55:
e6:40:98:1c:1a:cf:42:71:90:17:3b:4d:e7:cc:eb:
2f:44:7b:c1:54:7d:64:a0:9c:2b:af:5a:9e:2a:8f:
01:d3:a7:c6:1f:6a:5f:29:b4:fe:42:8e:fd:07:c0:
9b:33:7b:73:4e:e1:36:d1:6c:a6:c0:86:a1:0d:a5:
cd:13:17:ea:ef:f3:fe:de:8a:e3:b5:be:6c:f2:da:
52:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DD:16:46:2B:67:12:16:48:F6:B4:4B:EE:B5:1A:86:9B:49:0A:3C
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e36332e302f32342d3234203d3e20323138393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:bd:f2:6a:ad:73:62:ae:6f:70:04:e6:90:7e:61:de:91:45:
72:4b:2c:0f:00:15:7a:1b:75:09:5c:e3:31:91:8e:1c:2a:08:
02:4f:3d:60:c3:ca:60:0b:de:b8:75:6b:47:f5:dd:83:d8:57:
f2:e7:f4:30:cf:c7:26:90:e2:b2:5e:1a:72:43:f8:e5:80:60:
e0:f6:79:b9:03:4a:90:7c:d3:be:b6:48:f3:c1:12:d8:be:bd:
d8:35:1e:50:e2:e1:9c:34:61:b6:ef:c7:2a:a5:99:49:09:43:
17:9e:1d:3f:f1:aa:16:7b:c6:0e:ef:dd:9a:10:c2:57:81:7a:
1f:20:ba:43:3c:2c:e9:a2:b3:6a:e0:a8:33:96:cd:1a:8b:b0:
e1:05:18:2e:d6:e5:09:29:53:f4:45:62:f2:14:3e:2e:05:9c:
f4:07:16:c9:e1:48:f9:d6:ed:de:97:60:88:fa:c7:03:06:03:
51:f8:b5:e5:3d:3a:98:99:f6:e5:5b:34:c7:23:58:4c:2c:73:
20:c4:d9:2f:10:c1:16:47:df:3c:1a:90:c2:fb:31:47:15:bc:
86:0f:6c:a1:2c:63:2d:fa:b2:ec:31:45:4e:ec:a5:55:f4:98:
96:02:5e:e3:62:d2:68:56:3a:7b:ac:ca:16:75:a6:36:9e:f8:
d6:09:9c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:08:10 2026 by rpki-client