Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e36332e302f32342d3234203d3e20323139313832.roa
File: 352e3139392e36332e302f32342d3234203d3e20323139313832.roa (raw, json)
Hash identifier: fLfXbf1Qp+zzb2WO8WpvhIcGRNXccJBqFYdHX0a+Nmw=
Subject key identifier: A6:7C:D1:E4:10:02:50:6B:18:D8:6E:50:55:5D:10:14:AB:51:26:DB
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 22C2197AE0EC3608B8A9CE8251903C7D3B4ADBAA
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e36332e302f32342d3234203d3e20323139313832.roa
Signing time: Tue 01 Sep 2026 04:04:31 +0000
ROA not before: Tue 01 Sep 2026 03:59:31 +0000
ROA not after: Tue 31 Aug 2027 04:04:31 +0000
asID: 219182
IP address blocks: 5.199.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 00:55:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:c2:19:7a:e0:ec:36:08:b8:a9:ce:82:51:90:3c:7d:3b:4a:db:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 1 03:59:31 2026 GMT
Not After : Aug 31 04:04:31 2027 GMT
Subject: CN=A67CD1E41002506B18D86E50555D1014AB5126DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7f:0d:5c:d0:47:0a:8b:2e:d7:49:da:43:88:
29:95:d6:40:b8:b8:f2:5f:d7:7b:4f:b0:31:ef:d6:
b9:c4:ee:24:54:57:99:b7:93:ed:97:cd:bb:6a:1f:
ce:9b:8a:72:32:ef:9f:58:38:ed:9a:65:e7:9d:3e:
82:bf:44:f5:8e:fb:e6:17:10:6a:a3:93:60:f0:13:
1d:95:48:40:7c:b9:dc:c4:1d:9e:7f:aa:88:5c:19:
64:b6:97:97:63:6f:4d:dc:4c:3b:fa:38:1f:e8:07:
eb:45:6c:8e:67:e6:94:fb:72:b9:d6:11:f4:2d:ab:
18:17:0a:4c:3f:d8:11:d3:7d:ce:bc:2d:6b:c8:fd:
6c:f0:aa:c0:06:98:38:10:9e:d9:24:c3:ec:41:24:
e2:ff:09:03:c7:22:65:48:5b:bd:40:bc:33:b9:45:
0d:0d:a2:6a:79:f2:65:a5:29:7b:3e:7e:66:44:bd:
a5:3a:d1:82:04:e5:94:1e:29:4f:ac:8e:ed:a0:43:
66:d1:75:dd:49:fd:2d:37:50:88:a4:1c:e2:72:61:
65:8f:e1:8b:80:e2:3c:fe:46:51:ef:4c:65:5d:84:
4b:4b:af:22:e5:e0:c4:91:b4:a9:45:ba:d6:4e:95:
ba:26:f3:a4:3c:1c:b8:2f:29:8d:51:7a:15:a3:ee:
83:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7C:D1:E4:10:02:50:6B:18:D8:6E:50:55:5D:10:14:AB:51:26:DB
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e36332e302f32342d3234203d3e20323139313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.63.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ed:d0:e4:0b:99:82:56:a0:c0:94:88:a3:9d:36:80:e7:70:
44:97:76:49:00:01:ce:ed:07:db:52:64:b9:5a:82:08:49:3f:
38:30:0d:80:0a:0f:26:82:29:2b:a4:70:19:d2:b6:01:0a:a8:
11:18:29:43:df:e6:97:a2:d8:7c:b1:c9:17:12:ad:09:84:b2:
f6:12:3d:32:a5:76:13:37:c0:db:5c:af:7a:39:ee:f3:20:89:
23:0e:03:e3:22:15:75:c4:d5:66:4a:c2:d3:62:41:ea:60:b2:
17:71:26:d8:8f:ba:74:41:f0:f1:f2:11:03:0f:f2:fe:e7:fa:
70:15:e3:e3:54:78:98:23:f6:74:08:cb:3b:2c:3c:56:b3:f5:
08:96:88:0f:a2:d9:98:65:85:cf:63:37:b9:bf:b5:89:3f:8c:
b7:dd:2b:89:78:06:c0:3f:00:69:a6:cd:ef:06:65:e3:d3:ae:
da:e6:24:12:f9:91:e3:29:eb:62:39:03:5f:a0:1f:16:e5:fb:
d7:81:51:08:75:9a:2f:e3:52:2f:61:3f:a0:f6:4a:77:fe:a4:
d8:28:37:5f:fd:48:ee:a7:6e:73:2b:ee:53:48:6a:c1:97:63:
3a:02:58:c7:f0:1d:56:d4:03:9a:a5:94:91:cd:18:43:25:51:
79:ae:e3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 11:04:02 2026 by rpki-client