Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e372e302f32342d3234203d3e20323139303638.roa
File: 352e3139392e372e302f32342d3234203d3e20323139303638.roa (raw, json)
Hash identifier: TZ0QOC3/MTnSwcmxNtwEBDVKMNAqQgFsmYJqRecNQSk=
Subject key identifier: 84:A4:02:9E:F9:4F:3B:9A:23:F2:67:42:5B:7A:9A:1E:A2:35:97:98
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 1F2B3E94F919D9D81CB124CF02E9741F6AED5DC6
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e372e302f32342d3234203d3e20323139303638.roa
Signing time: Wed 12 Aug 2026 03:43:21 +0000
ROA not before: Wed 12 Aug 2026 03:38:21 +0000
ROA not after: Wed 11 Aug 2027 03:43:21 +0000
asID: 219068
IP address blocks: 5.199.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 19:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:2b:3e:94:f9:19:d9:d8:1c:b1:24:cf:02:e9:74:1f:6a:ed:5d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 12 03:38:21 2026 GMT
Not After : Aug 11 03:43:21 2027 GMT
Subject: CN=84A4029EF94F3B9A23F267425B7A9A1EA2359798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:47:72:f9:49:de:fd:a4:23:ea:de:ec:d0:
f3:fc:d6:7a:c0:31:b3:d8:69:05:c3:35:c6:d0:5d:
32:02:c4:aa:a6:16:5b:91:1f:66:e9:96:28:e3:2e:
a3:18:e3:6c:d9:6f:b9:db:3e:0a:30:d7:95:3b:3e:
de:fc:f6:d7:4f:30:31:60:25:bc:af:b2:37:27:98:
8d:59:26:df:11:ea:e8:e2:b8:27:24:89:a9:bb:70:
0b:f4:66:ba:f3:40:b4:67:e7:31:8d:0d:7c:bb:6b:
ef:55:f0:c1:bb:4e:ff:65:0b:b5:4c:90:53:af:bb:
c6:55:09:04:13:dc:62:3c:13:d9:68:c4:86:0a:a3:
1b:8a:b2:b7:b7:de:7b:01:02:af:3c:ba:4b:fb:d0:
d7:79:ad:6b:1f:07:67:cb:9e:c8:f9:e5:96:fc:9e:
d9:a3:18:05:33:a3:b4:bd:82:dd:e6:e1:5e:83:29:
41:af:ca:7e:f4:52:a1:52:1e:78:52:1e:34:a9:75:
ab:4a:ba:4c:27:28:c6:9f:d9:99:bb:be:31:d6:ea:
8b:3f:88:c0:bc:b7:e1:20:69:f3:3c:05:e2:20:c4:
d5:ed:88:08:a4:7d:f2:00:0f:58:75:da:40:f4:6a:
8c:ea:87:7b:3d:3d:83:59:9d:91:2e:69:41:0d:e1:
64:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A4:02:9E:F9:4F:3B:9A:23:F2:67:42:5B:7A:9A:1E:A2:35:97:98
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e372e302f32342d3234203d3e20323139303638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.7.0/24
Signature Algorithm: sha256WithRSAEncryption
68:65:7b:34:c5:b1:62:6f:f8:f9:ee:07:3c:7d:8e:0b:a9:2e:
96:c2:16:91:b5:c5:1e:a3:87:03:85:00:92:9e:4a:82:c8:88:
b6:95:7f:56:35:a5:4b:f0:61:92:62:db:91:35:ad:ca:07:24:
21:8c:89:09:ac:b0:b9:8b:bf:7b:fd:12:bf:8d:ba:a2:85:a9:
d5:14:12:e2:db:66:65:23:39:19:47:ec:f7:d3:71:01:51:0f:
51:65:86:93:08:9c:1c:16:eb:3d:5d:cd:63:82:0f:25:39:a5:
27:d8:61:17:d2:87:77:6f:2b:00:9d:44:21:24:b3:a1:64:14:
a8:a5:85:8c:37:1b:2c:01:de:de:80:40:29:7e:99:90:55:d3:
67:60:86:7c:ce:38:d4:47:16:4b:03:2e:5e:e8:e9:90:e0:c2:
01:fd:54:04:31:5e:43:62:70:37:7b:34:aa:4c:5e:e4:3f:1f:
2b:33:2e:df:34:3c:d0:09:d9:15:61:5a:c4:14:14:f2:bc:aa:
2b:76:ba:89:73:1f:8f:51:06:1a:25:a1:9f:c6:1d:bf:6d:8e:
15:ea:d1:24:f6:c6:0b:d2:5a:f3:58:b9:48:e7:b6:b2:19:5a:
b2:96:47:17:de:73:fe:45:52:db:6e:34:ad:a3:6d:64:e0:51:
88:dc:45:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 10:36:10 2026 by rpki-client