Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e38302e302f32302d3234203d3e20323134313539.roa
File: 352e3139392e38302e302f32302d3234203d3e20323134313539.roa (raw, json)
Hash identifier: dbzzEAd2jE5pMtOpnIfaB4cBocu8lypMk33CmECd7oY=
Subject key identifier: B6:1D:BB:00:DC:F6:ED:77:ED:9A:15:E8:71:74:9E:F0:6B:3F:2A:AA
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 21820215D2BC5EBD05B2B02337DAAB338D052261
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e38302e302f32302d3234203d3e20323134313539.roa
Signing time: Wed 12 Aug 2026 14:57:45 +0000
ROA not before: Wed 12 Aug 2026 14:52:45 +0000
ROA not after: Wed 11 Aug 2027 14:57:45 +0000
asID: 214159
IP address blocks: 5.199.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:82:02:15:d2:bc:5e:bd:05:b2:b0:23:37:da:ab:33:8d:05:22:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 12 14:52:45 2026 GMT
Not After : Aug 11 14:57:45 2027 GMT
Subject: CN=B61DBB00DCF6ED77ED9A15E871749EF06B3F2AAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:de:c4:38:fc:05:67:47:87:96:09:fa:7d:
fa:2e:2d:05:6a:1b:03:33:fb:2e:00:98:71:ec:9f:
b5:b5:19:9c:96:4e:5c:76:46:25:6f:4e:b7:41:2b:
cc:e0:07:fb:c4:37:dc:67:f0:38:45:9c:ca:5d:4f:
e5:94:7f:f4:6c:97:0a:22:4a:e8:7b:60:ac:f8:ce:
8a:8c:c5:2a:c8:23:d1:01:47:28:98:05:54:6e:79:
9c:3d:bb:28:6d:a1:23:87:63:51:ab:f5:0e:c4:43:
1c:53:f4:f4:15:57:9c:4d:5a:1e:bd:61:dd:cf:40:
77:43:85:75:cd:22:8e:5e:ee:c6:c5:65:28:0d:df:
57:8a:f8:20:81:56:43:13:09:67:aa:95:dd:f8:3e:
11:10:a4:7f:0f:fc:80:61:03:97:49:6b:cb:b2:94:
08:3a:2d:65:f0:84:83:45:26:14:84:60:56:fa:70:
cc:19:d8:e8:8c:bb:85:1f:4b:5e:4d:96:a1:46:55:
2e:f1:7c:ab:8e:84:41:5d:bf:d3:33:43:2b:b7:b9:
00:21:50:1a:20:c2:36:19:93:e3:f9:df:24:ed:97:
dc:3c:8b:ef:46:8e:63:c7:39:67:08:09:42:72:20:
3e:b3:50:27:1b:b0:64:b7:bc:6a:d9:46:fc:21:6e:
80:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1D:BB:00:DC:F6:ED:77:ED:9A:15:E8:71:74:9E:F0:6B:3F:2A:AA
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e38302e302f32302d3234203d3e20323134313539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.80.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:db:b5:49:a6:f1:01:04:b0:72:d5:2d:0f:71:3d:57:ad:4c:
11:0a:29:92:35:8c:d6:a3:c5:a7:9d:46:65:01:92:85:23:4e:
f5:7c:21:07:2c:dd:50:d4:85:89:44:f6:c3:04:52:90:a0:40:
fa:ad:ed:78:9f:83:61:52:dc:36:39:19:7d:29:44:8b:2e:0c:
ea:c1:a6:10:30:c7:78:50:14:75:df:43:3b:4f:30:46:80:0f:
93:ab:fe:29:3a:04:07:80:68:9c:fc:67:4a:86:7b:ca:d6:ec:
fc:b9:83:d2:49:e7:b4:f9:e8:6d:00:77:9e:b2:4e:9f:b2:4d:
d2:92:db:92:24:40:49:59:6f:ca:cc:68:69:c7:ea:bd:48:cc:
bd:55:c2:5b:2a:cb:b7:4b:c1:65:07:e8:1b:0b:e7:58:f0:7b:
89:ee:ec:64:db:66:46:0a:88:81:40:dc:51:9a:1c:5f:b0:48:
38:83:d4:08:14:ef:f7:dd:d2:b2:9a:b6:51:d8:12:d7:d0:31:
0f:fd:23:f2:1c:7f:28:88:80:1d:54:e1:d2:72:a0:ad:cf:85:
01:d3:c9:14:1e:6a:8a:04:3a:d8:83:5d:15:15:c5:83:b1:62:
f1:6c:2b:d8:46:83:5a:bc:b5:c8:59:80:3c:47:d4:5b:f8:b1:
ab:ac:c6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:26:39 2026 by rpki-client