Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e39362e302f31392d3234203d3e20383334.roa
File: 352e3139392e39362e302f31392d3234203d3e20383334.roa (raw, json)
Hash identifier: u1T95gI026i2zjRHE30ZbwsCb43wYADlKpIz7SsVPQE=
Subject key identifier: D4:4D:AB:62:16:E4:2F:97:42:08:FD:BB:25:DC:2F:EF:9C:01:13:B3
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 1DF7082A956B81F12528E64407E647ABEEB92E4C
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e39362e302f31392d3234203d3e20383334.roa
Signing time: Wed 12 Aug 2026 14:58:11 +0000
ROA not before: Wed 12 Aug 2026 14:53:11 +0000
ROA not after: Wed 11 Aug 2027 14:58:11 +0000
asID: 834
IP address blocks: 5.199.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 07:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:f7:08:2a:95:6b:81:f1:25:28:e6:44:07:e6:47:ab:ee:b9:2e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 12 14:53:11 2026 GMT
Not After : Aug 11 14:58:11 2027 GMT
Subject: CN=D44DAB6216E42F974208FDBB25DC2FEF9C0113B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:12:d2:6a:88:da:52:31:6b:ad:41:8a:72:1e:
6e:03:06:4e:79:8c:59:e7:33:9e:cd:e5:ea:ef:bb:
2e:0d:0b:92:e4:cd:53:34:57:88:b7:c5:5f:80:8d:
0f:23:c6:3d:d3:a1:be:18:e4:b7:69:03:29:64:2b:
f0:80:36:84:41:f6:78:79:3d:57:49:d5:20:77:5c:
90:61:32:cd:2b:15:3c:67:42:11:e0:7d:72:e6:18:
42:15:bf:55:eb:5f:dc:20:e8:97:40:15:1e:8f:36:
26:71:c7:10:fe:22:68:13:2d:3a:9b:c7:91:b1:b2:
00:96:59:6b:dc:a1:f0:58:b9:f8:dd:83:a3:92:50:
7f:13:09:00:61:c2:e3:5d:3b:99:be:d1:de:05:dc:
1b:a9:01:f5:68:4c:06:95:e2:1b:5a:56:63:80:7b:
1b:e8:9c:69:09:3e:4b:c9:da:ea:51:8d:70:88:79:
d7:96:3f:0a:ae:c5:ae:09:e7:8c:fb:d1:f2:ac:39:
7e:a5:f6:6c:7f:63:64:89:33:3e:4f:77:9e:10:f3:
1d:79:3b:dd:c8:9f:12:20:72:ec:b9:46:6c:88:f9:
2f:36:6c:18:e2:23:83:9e:d6:c5:87:8b:18:81:e7:
8a:0a:e4:ed:1e:77:5d:b8:de:7c:08:6a:17:1a:c4:
51:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4D:AB:62:16:E4:2F:97:42:08:FD:BB:25:DC:2F:EF:9C:01:13:B3
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e39362e302f31392d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.96.0/19
Signature Algorithm: sha256WithRSAEncryption
72:e7:72:0a:1a:99:a7:a2:9d:b9:41:6b:ff:b6:39:64:68:c6:
a5:3c:97:a2:92:51:56:22:a6:2d:62:13:84:6d:01:d1:97:09:
c9:c9:b3:74:fb:7e:5e:0d:16:c7:2e:b8:a4:a8:37:16:77:d1:
6d:b0:bf:b4:f4:8b:47:41:b6:81:83:78:14:3d:cc:7a:40:fe:
dd:f2:68:07:fc:bf:1b:5f:52:9b:f3:58:75:03:c6:67:1e:a9:
af:95:5c:64:76:ea:cb:31:ad:cc:57:75:69:a4:2c:af:f1:3b:
51:81:e1:4e:a7:7d:7c:f0:6f:c3:b3:14:29:4c:e2:04:6c:c9:
74:89:40:54:31:22:48:96:f4:d3:7a:cd:d3:93:ef:39:61:03:
cc:cb:c9:4d:b4:54:c7:0c:50:08:46:ca:20:03:21:7e:20:1a:
47:27:c0:40:24:bf:8a:ca:7a:bc:e8:13:2a:0a:3a:33:39:9f:
b3:01:0c:72:32:98:00:10:13:36:61:94:ed:c7:cb:8e:ba:bf:
5c:a8:6c:10:77:9c:b9:44:5e:cb:78:f7:44:14:08:a3:35:2a:
35:2f:34:15:16:07:bf:83:65:2a:de:bb:b8:39:7b:a6:a4:54:
a9:04:01:1b:88:e6:1b:81:ff:5b:ac:68:2b:99:32:ac:3f:fc:
a1:6f:05:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:54 2026 by rpki-client