Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138342e302f32342d3234203d3e20323132363039.roa
File: 352e3138312e3138342e302f32342d3234203d3e20323132363039.roa (raw, json)
Hash identifier: 6u+5ELEJLeXXB4+8NHbO0dG4EQaKYkOwI0K9os45OcQ=
Subject key identifier: 6A:39:29:0E:CE:50:04:2D:72:24:FB:C0:0C:1E:88:A8:E3:4C:75:7F
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 3651F0F44D4F25809B5F69D36C0FEEEDFDE1509B
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138342e302f32342d3234203d3e20323132363039.roa
Signing time: Thu 30 Jul 2026 09:36:49 +0000
ROA not before: Thu 30 Jul 2026 09:31:49 +0000
ROA not after: Thu 29 Jul 2027 09:36:49 +0000
asID: 212609
IP address blocks: 5.181.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:51:f0:f4:4d:4f:25:80:9b:5f:69:d3:6c:0f:ee:ed:fd:e1:50:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jul 30 09:31:49 2026 GMT
Not After : Jul 29 09:36:49 2027 GMT
Subject: CN=6A39290ECE50042D7224FBC00C1E88A8E34C757F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:bd:e0:cf:f2:9f:aa:b4:ba:20:3c:a6:fb:
59:2d:5a:b4:4e:59:54:41:5d:1b:a7:00:37:13:79:
ce:38:e1:0c:58:1e:4e:54:e4:e6:6a:ca:7c:43:f5:
c0:7d:b1:fb:52:86:64:43:61:46:48:c6:fa:3b:12:
99:db:da:71:ab:09:0c:98:6f:e1:08:d9:4d:f0:d1:
00:cc:e9:0f:82:85:71:4b:f3:38:27:cd:e4:05:99:
9b:e7:48:48:39:81:92:82:88:5b:55:15:09:4c:f7:
cf:65:99:12:67:98:c9:ac:c2:ce:26:33:c0:76:da:
39:53:d0:08:88:5c:3b:91:5e:01:ae:dc:1a:35:89:
83:16:43:9d:3c:6f:24:65:13:03:91:ca:30:a7:13:
76:05:2d:6f:53:34:3c:e0:8e:a7:2d:6b:3a:9d:e3:
5a:02:f6:be:9d:5a:62:dc:30:f0:98:8c:22:f4:9e:
5c:5b:97:d8:f3:c8:f7:16:b8:71:c7:d8:93:19:d9:
22:99:13:6b:cf:48:8c:ac:23:46:af:fc:61:5d:f6:
a0:61:36:74:64:c5:24:38:43:37:13:95:6c:47:4e:
c3:a7:9b:d7:35:c5:10:04:c3:a3:44:c8:0b:0a:e6:
02:54:3d:17:31:36:7c:b2:dc:52:92:74:30:64:38:
f5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:39:29:0E:CE:50:04:2D:72:24:FB:C0:0C:1E:88:A8:E3:4C:75:7F
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138342e302f32342d3234203d3e20323132363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.184.0/24
Signature Algorithm: sha256WithRSAEncryption
77:59:ee:49:11:1b:d1:54:15:f8:c7:b0:5a:90:4e:cc:4a:ca:
20:ec:5b:8b:a9:1b:1b:d8:30:45:9a:a9:ae:e2:90:8f:11:87:
ea:e8:01:d1:96:ec:ce:42:bd:f5:7c:f6:75:a6:b1:57:04:f4:
0f:89:ce:79:3c:b0:d3:d0:64:34:cc:d0:8f:49:58:b5:eb:36:
9e:89:8a:61:2d:e0:04:a0:ca:50:0d:d5:6c:45:9b:f2:51:55:
b7:f3:4c:c7:2c:a6:15:14:74:a1:23:eb:50:6b:d5:60:07:24:
c1:34:4a:6c:58:80:51:a1:71:99:25:ae:6b:d4:be:58:cf:32:
57:88:10:ea:43:60:31:24:ee:f4:5e:13:b1:97:5c:a1:28:6e:
96:d5:bb:ef:37:ea:3c:a5:a3:ed:85:88:31:08:70:54:24:7f:
0b:9f:f4:17:cc:a3:21:d8:6f:fd:62:4d:eb:b7:54:16:83:08:
5f:2b:54:a1:2d:b8:3f:43:1d:f4:7c:ba:cc:04:86:0a:c5:e4:
b9:b1:4f:87:7f:82:94:e3:b2:16:02:29:7d:cb:de:cd:a5:20:
f9:d7:c5:b5:57:19:e0:a7:4d:a8:d2:d6:be:69:ef:61:00:a0:
3e:28:a2:1a:98:7d:bd:34:e5:68:e4:2d:a0:62:c5:73:6d:40:
6f:2e:41:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 11:25:30 2026 by rpki-client