Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e36342e302f31382d3234203d3e20383334.roa
File: 352e3139392e36342e302f31382d3234203d3e20383334.roa (raw, json)
Hash identifier: 1Ym3slZiKLDPCF9IebFEZQlMMNcVzDtgSNG5lJzxVDQ=
Subject key identifier: F1:F5:C9:93:73:23:65:1B:0E:B6:80:A2:23:A9:27:4C:06:26:A3:60
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 6948AF09FED73AC87847ED24DCA80652342B2564
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e36342e302f31382d3234203d3e20383334.roa
Signing time: Thu 03 Sep 2026 19:18:04 +0000
ROA not before: Thu 03 Sep 2026 19:13:04 +0000
ROA not after: Thu 02 Sep 2027 19:18:04 +0000
asID: 834
IP address blocks: 5.199.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 20:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:48:af:09:fe:d7:3a:c8:78:47:ed:24:dc:a8:06:52:34:2b:25:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 3 19:13:04 2026 GMT
Not After : Sep 2 19:18:04 2027 GMT
Subject: CN=F1F5C9937323651B0EB680A223A9274C0626A360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ae:5e:04:b4:6c:8a:70:d6:aa:e0:82:52:35:
c3:b1:2d:2e:f7:c6:31:79:e2:8e:ec:52:fe:82:3a:
8a:cc:69:78:22:23:95:ee:d5:0e:bf:bd:6a:2e:54:
27:14:75:eb:51:bd:56:a4:a4:5d:ef:c3:ed:2f:2e:
8c:7f:43:53:51:e2:6f:e0:c0:d2:c4:4f:75:56:a0:
57:e5:a8:f0:7e:e0:f2:fa:15:bc:14:e3:97:82:42:
c2:4d:58:ce:58:03:98:20:4d:6b:04:d0:f0:22:82:
cd:d3:8b:93:9e:8e:19:4d:69:09:37:69:47:1b:70:
c4:d8:4f:2f:1c:56:45:fb:82:ac:cc:27:5e:60:a1:
3e:0d:6d:bb:fa:d8:c4:f9:c5:67:d6:9a:6f:62:06:
07:49:0d:07:eb:0d:6b:be:71:dc:8f:a0:68:8a:cb:
65:9f:13:9b:fa:73:40:3e:b9:60:d3:b5:40:10:db:
54:39:78:1e:e0:62:c4:67:f8:f8:29:ad:7c:89:e2:
aa:02:88:70:73:cd:73:07:6d:8b:e7:c0:14:4e:90:
9a:41:18:fa:18:8a:01:84:9c:e4:bc:06:d2:f5:bb:
51:f2:7d:eb:f2:be:00:56:e4:65:0e:9e:bc:3f:e1:
c6:4f:a9:9d:f1:11:e6:4d:63:69:85:96:27:49:6d:
25:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F5:C9:93:73:23:65:1B:0E:B6:80:A2:23:A9:27:4C:06:26:A3:60
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e36342e302f31382d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.64.0/18
Signature Algorithm: sha256WithRSAEncryption
04:20:58:43:8d:a0:23:c9:34:1b:c2:de:e1:7e:fe:c6:76:23:
35:54:99:61:cf:f4:2a:82:b0:4c:12:7b:f1:1a:8c:9e:44:4c:
7b:a4:bd:32:3b:24:10:d3:ff:4a:08:c6:b8:7e:6a:99:eb:71:
5a:c0:07:23:e0:e1:77:ce:48:d4:15:4e:a2:6c:19:ab:d9:6f:
26:b9:65:a8:2a:15:fe:cd:6f:f9:ba:eb:f7:80:92:8d:b1:42:
c2:b5:6e:d1:88:09:fa:c8:3d:8c:54:00:53:d2:23:81:bd:5e:
b9:ae:76:af:2d:79:c5:a2:f9:c3:45:de:07:1d:ff:bd:e5:28:
10:25:26:0d:a1:1e:e4:5a:e5:96:be:95:0d:f7:7e:0c:4b:35:
fb:b9:07:80:ee:62:12:35:73:5f:b1:21:4d:37:74:e9:ce:71:
30:a2:99:22:82:08:33:29:55:d0:6e:f3:b9:8c:09:90:26:43:
28:e2:e9:d1:e9:af:0b:13:01:98:8e:bb:c6:03:1f:f2:3b:fb:
52:9f:06:0b:da:df:dc:24:34:ef:37:45:50:86:26:f2:13:d0:
2e:96:0d:fa:ff:a5:29:0c:78:e2:12:1a:59:f0:11:3a:3f:33:
37:b1:31:eb:30:2c:9e:34:cc:55:db:be:8e:bb:b1:e9:cd:96:
49:33:97:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 13:57:19 2026 by rpki-client