Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20323031303330.roa
File: 352e3138322e33342e302f32342d3234203d3e20323031303330.roa (raw, json)
Hash identifier: mkqFwAXV4Th4NW6+OyijpmKakWy3fLC0U1Apg/vUhoQ=
Subject key identifier: C3:06:37:73:2E:11:89:1F:2B:0D:09:58:98:8A:33:AA:3A:67:5A:E8
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 1F5C0D20F2C22235913A65CDBBC92AF163A35689
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20323031303330.roa
Signing time: Tue 03 Mar 2026 08:15:15 +0000
ROA not before: Tue 03 Mar 2026 08:10:15 +0000
ROA not after: Tue 02 Mar 2027 08:15:15 +0000
asID: 201030
IP address blocks: 5.182.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:5c:0d:20:f2:c2:22:35:91:3a:65:cd:bb:c9:2a:f1:63:a3:56:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 3 08:10:15 2026 GMT
Not After : Mar 2 08:15:15 2027 GMT
Subject: CN=C30637732E11891F2B0D0958988A33AA3A675AE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:12:7c:7a:d1:01:26:7e:bf:9d:b4:6d:9d:
99:59:fb:be:b6:b9:bd:c0:89:62:d3:ba:5f:65:df:
a0:3b:d9:91:54:2f:66:55:1e:f5:14:ae:f0:fe:38:
4b:1a:17:80:06:f2:8d:5e:d4:36:15:04:f2:3f:ff:
32:3d:f6:85:4e:25:38:36:ce:c8:80:24:ef:e2:3b:
cf:22:f6:d3:f7:06:be:bf:28:0e:0f:42:af:af:71:
d6:18:26:87:a3:9c:83:5a:c1:08:c5:0e:7b:fe:ab:
a3:9b:ef:c9:5d:cf:2a:f7:81:0f:07:66:a9:28:57:
54:a0:4f:ec:5f:66:ba:00:75:e5:4b:96:ef:0d:e0:
82:cb:95:d5:48:77:6f:78:5f:2f:26:f5:1c:8d:ef:
7e:c8:7e:9c:ae:9d:0d:0e:bf:18:c3:c4:42:ad:9a:
2b:66:6f:23:ed:a1:81:37:c7:18:8c:d7:a4:18:a1:
96:bb:ec:a1:ea:e7:6e:32:b0:d3:e5:39:24:44:96:
6e:18:21:07:70:3d:b0:80:50:7b:9e:55:3a:35:c4:
56:31:51:4f:67:e3:d3:00:9a:b4:f3:ca:33:2c:59:
ed:27:2a:93:70:92:19:09:26:44:29:a3:cf:d4:63:
3a:95:3f:02:2c:3e:42:68:ae:12:62:44:b4:d1:03:
fb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:06:37:73:2E:11:89:1F:2B:0D:09:58:98:8A:33:AA:3A:67:5A:E8
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20323031303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.34.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:38:c0:5e:5b:79:5e:94:e8:08:e6:5b:e1:38:9d:7f:87:cc:
84:43:74:3a:15:3f:03:f9:a8:09:b7:7c:ac:71:5d:ea:f3:1d:
e0:66:a5:16:4b:39:00:1c:1a:89:c4:9d:52:f3:f5:91:cd:9a:
42:cc:ce:f1:65:a6:7f:0d:66:c4:35:ef:62:ed:4f:80:e6:94:
6a:c8:5e:86:55:e2:4d:f3:07:ff:01:55:db:52:1f:0f:fe:21:
bc:e0:74:ba:8d:75:a7:75:1f:c9:45:6e:3a:c2:3f:51:2c:26:
0e:e4:66:30:b2:43:4e:17:69:57:d0:63:5d:fa:47:50:24:da:
0a:83:e0:e6:ba:c2:2d:89:57:ea:a7:90:1c:35:05:0d:e3:40:
0d:95:9c:e9:e5:45:fc:be:83:f2:16:1c:ec:f1:81:57:58:43:
09:60:9a:76:92:c3:8d:18:04:07:36:c9:85:1a:25:29:59:db:
fc:93:7d:b6:30:57:67:3d:5c:8d:97:1d:36:22:c5:6c:b3:37:
6a:cc:b2:41:d2:ef:a9:0d:c8:e6:0e:f1:6b:1f:c3:49:41:27:
38:d6:68:32:7a:ec:f0:82:8f:e4:9c:4e:d8:e2:1d:6e:a3:e0:
07:28:cb:d7:c4:4f:33:25:56:df:a8:12:e7:dd:07:75:6d:d3:
d2:9d:2e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:14:02 2026 by rpki-client