Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e36342e302f32302d3234203d3e20323134313539.roa
File: 352e3139392e36342e302f32302d3234203d3e20323134313539.roa (raw, json)
Hash identifier: gUZTLDSjhTDE1J+4Le/9j73Gik8za57EZXikOSgpqnc=
Subject key identifier: 6B:5C:78:77:BA:26:E7:44:A6:25:DC:05:12:2F:F4:93:1C:58:67:DA
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 1688B18A2868021CC6BFCD0C72FB89ABD202C7
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e36342e302f32302d3234203d3e20323134313539.roa
Signing time: Wed 12 Aug 2026 14:57:43 +0000
ROA not before: Wed 12 Aug 2026 14:52:43 +0000
ROA not after: Wed 11 Aug 2027 14:57:43 +0000
asID: 214159
IP address blocks: 5.199.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:88:b1:8a:28:68:02:1c:c6:bf:cd:0c:72:fb:89:ab:d2:02:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 12 14:52:43 2026 GMT
Not After : Aug 11 14:57:43 2027 GMT
Subject: CN=6B5C7877BA26E744A625DC05122FF4931C5867DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:d1:24:26:d1:c7:b2:38:dd:dd:fa:da:74:
0c:9e:a7:a8:2c:17:5e:a4:67:fd:df:2d:60:ed:ea:
08:fc:50:9f:ff:9f:52:27:07:1b:55:6a:1d:77:62:
ed:2a:f1:72:ef:78:b4:4f:58:a6:c6:5e:66:0c:11:
76:38:d1:3e:de:3c:cd:18:4a:c4:87:55:a2:20:2c:
0f:f8:82:9f:d7:e5:26:3e:b2:99:f9:95:55:ab:67:
cf:38:91:9f:c0:43:02:a3:c7:d4:8c:48:fe:60:87:
9f:49:f9:82:22:a6:7b:96:3c:1b:7a:57:fd:35:b6:
c8:63:12:7d:0c:1e:bf:e2:b7:0c:0d:38:cf:dc:0f:
09:1f:f5:3f:b3:28:82:be:2d:88:b2:da:49:63:a7:
83:36:9a:f6:59:0d:38:35:4c:3d:0d:81:46:e6:ac:
8c:36:ee:0e:1f:51:14:5d:bf:3a:b7:33:62:37:f3:
62:8f:a7:a5:58:56:37:a0:a1:15:87:db:87:45:83:
d1:c3:17:b7:04:8d:af:a1:34:75:6d:4d:ba:aa:8f:
58:9d:70:1e:59:6e:c1:44:27:54:eb:22:0c:11:a3:
8e:ca:66:af:67:62:a6:2f:d9:25:31:fc:d4:bc:c7:
72:34:e8:90:19:27:59:5f:41:eb:82:02:bc:2e:dc:
03:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5C:78:77:BA:26:E7:44:A6:25:DC:05:12:2F:F4:93:1C:58:67:DA
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e36342e302f32302d3234203d3e20323134313539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.64.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:f2:3f:a4:c4:7d:a4:2e:c9:85:81:ec:3c:69:13:2c:2b:25:
3d:0a:9a:94:0c:a3:1c:70:e9:33:7c:da:3f:df:ec:9f:36:93:
4c:bd:87:19:19:f0:bb:04:a8:b7:7f:94:7f:a7:eb:07:3a:a9:
9f:1f:00:c5:21:b5:3b:4a:64:ae:76:27:e0:5e:f4:29:c7:47:
5e:15:80:9a:1a:f4:79:8f:e0:5d:94:72:71:2e:12:f5:bd:85:
51:7b:a6:b3:57:65:65:25:3d:df:86:24:48:35:83:df:ea:37:
ce:a5:58:07:9c:0d:35:9a:05:68:ba:d1:60:7d:e2:71:a0:9c:
0c:f7:e4:0b:a8:11:20:a1:48:bf:ae:19:9b:89:d2:02:f7:1f:
ff:7f:0d:f9:c0:09:c0:aa:57:2a:92:a5:a8:c9:be:02:9d:d8:
2b:95:47:22:ef:ee:24:b7:64:57:b5:6f:8d:19:23:e7:95:ed:
eb:43:09:a8:f1:d6:ba:f3:75:f1:b6:47:92:76:5e:70:38:4d:
d8:fd:1f:83:ea:04:f8:ea:b4:a8:fd:82:01:50:9a:ef:e8:1b:
8a:8c:41:2e:f4:0f:e1:8a:51:6a:37:9e:30:6f:68:07:d8:22:
a5:f7:80:13:f0:3b:c6:ea:6f:46:de:4e:e7:c9:14:50:ad:0e:
10:ce:68:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:26:39 2026 by rpki-client