Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/352e3137382e3132342e302f32342d3234203d3e203431373230.roa
File: 352e3137382e3132342e302f32342d3234203d3e203431373230.roa (raw, json)
Hash identifier: denS4ShosQEflOOKSOFKHIlQq2P37gUifSSYnpY0oi4=
Subject key identifier: DF:51:03:91:42:8E:B2:2A:2A:F6:3E:C7:E5:66:93:83:C4:B9:0D:85
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 5D2C12C30C523308058FCFEC8039BEDA34F16945
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/352e3137382e3132342e302f32342d3234203d3e203431373230.roa
Signing time: Wed 07 Oct 2026 15:18:30 +0000
ROA not before: Wed 07 Oct 2026 15:13:30 +0000
ROA not after: Wed 06 Oct 2027 15:18:30 +0000
asID: 41720
IP address blocks: 5.178.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:2c:12:c3:0c:52:33:08:05:8f:cf:ec:80:39:be:da:34:f1:69:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Oct 7 15:13:30 2026 GMT
Not After : Oct 6 15:18:30 2027 GMT
Subject: CN=DF510391428EB22A2AF63EC7E5669383C4B90D85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:f2:b9:23:47:9c:b8:8f:e9:14:0a:66:8a:
fb:7f:7d:91:93:d0:43:43:11:33:17:86:7d:99:db:
67:e2:29:dd:ce:5c:40:2a:37:c1:5f:3d:f7:b7:44:
bc:39:fd:18:3e:2f:09:73:44:9e:90:0a:63:28:d1:
e9:58:1a:df:e6:95:e6:17:e4:66:6d:79:c9:1d:e3:
c6:2d:1f:36:d2:e5:b1:5d:65:78:d5:b9:b4:1b:27:
4f:17:26:69:3a:a9:d0:a4:45:cf:8d:c2:e1:10:88:
b1:0b:7f:6e:ce:48:9b:af:cf:22:67:9a:27:c7:8d:
0c:0f:a6:c1:ca:83:08:1c:5c:71:24:87:84:18:d2:
9f:33:9f:30:9e:98:e3:fe:d4:f9:f9:a4:65:1a:9c:
30:2f:cf:07:33:54:70:37:4c:3b:8f:57:31:cf:f8:
aa:f5:87:66:cb:dc:bd:9d:3a:6b:75:85:e5:94:c2:
e7:db:4b:8a:dc:e7:c4:0c:4c:4b:e9:5b:0b:f1:e0:
9b:5c:30:33:03:38:8b:9c:8b:72:72:d5:cb:dc:0e:
82:47:0a:4f:70:87:d6:56:98:11:87:41:aa:6e:7a:
4e:76:4c:bf:08:07:45:85:09:dd:f7:5c:84:47:d9:
96:10:90:e9:a5:f2:d6:07:c5:d6:7c:cf:c5:5c:fe:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:51:03:91:42:8E:B2:2A:2A:F6:3E:C7:E5:66:93:83:C4:B9:0D:85
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/352e3137382e3132342e302f32342d3234203d3e203431373230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.124.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c8:4b:e4:aa:00:f4:9e:fd:b5:1a:1f:32:3c:68:8e:24:04:
57:7c:f5:03:c7:5e:4b:f4:d7:2a:50:c1:c4:a6:74:fc:fc:69:
d7:d9:c3:d4:24:c0:7c:3d:73:14:ae:55:e8:f4:f5:1a:49:e1:
46:7c:e8:34:10:3c:28:53:ef:c5:c6:df:d7:2d:25:09:d8:00:
35:20:74:76:29:3a:ae:46:ce:e6:74:40:d5:f6:65:60:ea:35:
24:9e:69:b9:52:5d:cc:ae:71:41:62:5c:97:e2:8b:71:eb:3f:
9c:6e:49:cc:f3:f3:63:39:04:52:02:a1:3b:de:f5:9e:a0:e9:
47:b3:ce:0a:41:9d:2b:34:af:1b:45:b1:b2:95:8a:a9:91:1c:
8b:47:bf:8d:e9:7f:71:16:9f:aa:3d:5f:f9:18:cc:61:69:03:
97:cd:6f:b0:3e:c1:ce:8b:bb:8a:9b:c3:03:b1:7f:29:32:50:
dc:0e:0e:67:9d:86:ca:0c:ed:28:19:2b:b5:f1:78:a6:57:8e:
a5:c1:6b:92:23:3e:3a:ff:e8:b9:7d:e3:39:6e:fe:29:38:50:
6b:b8:92:6c:5c:8f:53:56:a3:c3:5b:27:78:19:58:bd:bc:0e:
78:9e:c7:69:cb:67:dc:3d:0f:e7:9a:42:b4:ff:a3:1d:82:eb:
3c:c8:83:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:52:20 2026 by rpki-client