Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138342e302f32342d3234203d3e20323131333733.roa
File: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (raw, json)
Hash identifier: 2zHb0T4tIHau6aSZ9D+c/6DXvLxBGB8a+KLhel+Tre4=
Subject key identifier: 57:6A:E3:89:57:18:3C:4F:7D:D3:E2:40:D8:A7:C7:7B:81:0F:34:C4
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 7A945862AA137BE927168EAD6D477512B8C7431B
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138342e302f32342d3234203d3e20323131333733.roa
Signing time: Fri 25 Sep 2026 09:49:35 +0000
ROA not before: Fri 25 Sep 2026 09:44:35 +0000
ROA not after: Fri 24 Sep 2027 09:49:35 +0000
asID: 211373
IP address blocks: 5.181.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:22:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:94:58:62:aa:13:7b:e9:27:16:8e:ad:6d:47:75:12:b8:c7:43:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Sep 25 09:44:35 2026 GMT
Not After : Sep 24 09:49:35 2027 GMT
Subject: CN=576AE38957183C4F7DD3E240D8A7C77B810F34C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:3a:3d:64:e6:34:e6:01:83:a4:f1:85:63:
ee:69:1e:d3:0c:ad:ca:11:7a:84:2c:3f:7b:3c:80:
0d:14:91:6b:a1:cb:62:1d:a4:e6:45:62:f2:7e:86:
c8:1b:aa:eb:31:12:14:95:f4:dc:a1:96:fc:99:8a:
2a:a6:71:78:de:90:91:93:b9:af:bd:4c:5c:d6:68:
82:1a:e6:f8:0f:a9:50:05:45:30:87:74:fc:42:1b:
c3:cf:83:31:9a:3e:d6:7d:0e:1a:2e:1f:bf:38:86:
99:e8:77:86:62:07:a6:f4:fe:67:f1:d4:97:ad:aa:
bc:32:c3:18:04:73:1c:bd:90:cb:27:ca:fd:83:f1:
6f:15:78:14:22:40:bb:49:21:98:66:98:d7:d9:3d:
54:18:ec:f8:fb:00:63:51:54:2a:75:a1:2a:68:d5:
55:14:42:25:86:1f:bc:71:78:cc:e5:b4:e6:7c:2d:
1d:14:4a:c9:36:a9:07:82:96:07:be:3e:0f:45:47:
6f:a3:b2:84:e9:40:0c:b0:b6:09:92:07:e7:5c:d3:
aa:73:1a:a4:92:31:31:f2:2e:bc:cd:49:fb:d1:7b:
bc:d6:0a:70:b9:6c:85:0b:82:e7:1f:7c:51:17:cd:
e7:c9:f6:cf:ff:14:9e:6a:b8:b4:08:f0:27:03:27:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6A:E3:89:57:18:3C:4F:7D:D3:E2:40:D8:A7:C7:7B:81:0F:34:C4
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138342e302f32342d3234203d3e20323131333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.184.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:3a:38:f6:c3:21:91:b4:5a:dc:9f:da:a1:73:45:56:56:6e:
71:ad:02:7e:9b:3e:a9:00:9f:cf:90:93:f9:a2:36:a8:b3:3a:
82:9a:21:4f:75:9f:60:ac:84:47:f0:17:5d:c5:8a:df:9e:3c:
ce:3c:fb:7e:ae:a8:b4:f6:e8:03:49:1a:6f:da:c3:09:12:87:
e7:01:fd:51:75:39:85:72:07:de:9a:04:68:3b:20:c1:44:f5:
3c:42:da:df:84:f1:33:96:5b:27:bb:9f:99:fc:d7:8d:bc:85:
1b:e2:a9:d4:37:aa:aa:82:58:92:87:35:17:55:fe:01:d3:ea:
5f:ba:80:1d:13:40:7e:2a:5d:4c:d0:7d:58:50:f6:2e:b3:77:
2e:b1:e6:01:1b:1e:5e:12:d9:9e:b1:fe:83:9a:a3:53:70:1f:
ac:fe:03:fd:bf:bd:34:ca:d8:e7:c9:d6:ff:09:f2:f5:f0:0e:
1e:71:29:5c:91:68:3c:43:11:b3:4b:cd:d3:cd:e3:a1:d3:09:
ad:8c:7b:e4:d8:55:a0:54:05:5e:56:39:91:58:d3:e5:5b:63:
83:17:ac:07:b2:fd:32:81:3b:36:ab:16:97:1e:f3:b9:cf:ce:
c5:eb:f3:27:59:ad:d4:26:cd:b7:97:34:38:8e:2a:d1:14:34:
fb:e2:9c:9e
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUepRYYqoTe+knFo6tbUd1ErjHQxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yNjA5MjUwOTQ0MzVaFw0yNzA5MjQwOTQ5MzVaMDMxMTAvBgNV
BAMTKDU3NkFFMzg5NTcxODNDNEY3REQzRTI0MEQ4QTdDNzdCODEwRjM0QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmzo9ZOY05gGDpPGFY+5pHtMM
rcoReoQsP3s8gA0UkWuhy2IdpOZFYvJ+hsgbqusxEhSV9NyhlvyZiiqmcXjekJGT
ua+9TFzWaIIa5vgPqVAFRTCHdPxCG8PPgzGaPtZ9DhouH784hpnod4ZiB6b0/mfx
1JetqrwywxgEcxy9kMsnyv2D8W8VeBQiQLtJIZhmmNfZPVQY7Pj7AGNRVCp1oSpo
1VUUQiWGH7xxeMzltOZ8LR0USsk2qQeClge+Pg9FR2+jsoTpQAywtgmSB+dc06pz
GqSSMTHyLrzNSfvRe7zWCnC5bIULgucffFEXzefJ9s//FJ5quLQI8CcDJ0XXAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUV2rjiVcYPE990+JA2KfHe4EPNMQwHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt
MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzUyZTMxMzgzMTJlMzEzODM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMxMzMzNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
BbW4MA0GCSqGSIb3DQEBCwUAA4IBAQCcOjj2wyGRtFrcn9qhc0VWVm5xrQJ+mz6p
AJ/PkJP5ojaoszqCmiFPdZ9grIRH8BddxYrfnjzOPPt+rqi09ugDSRpv2sMJEofn
Af1RdTmFcgfemgRoOyDBRPU8QtrfhPEzllsnu5+Z/NeNvIUb4qnUN6qqgliShzUX
Vf4B0+pfuoAdE0B+Kl1M0H1YUPYus3cuseYBGx5eEtmesf6DmqNTcB+s/gP9v700
ytjnydb/CfL18A4ecSlckWg8QxGzS83TzeOh0wmtjHvk2FWgVAVeVjmRWNPlW2OD
F6wHsv0ygTs2qxaXHvO5z87F6/MnWa3UJs23lzQ4jirRFDT74pye
-----END CERTIFICATE-----
Generated at Tue Oct 13 08:01:16 2026 by rpki-client