Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33352e302f32342d3234203d3e20313939373431.roa
File: 352e3138322e33352e302f32342d3234203d3e20313939373431.roa (raw, json)
Hash identifier: EX+4IIEE1KwUs7m74DZ0SxHLP3vgHBPSj46ynwLmIe4=
Subject key identifier: 34:B1:DF:50:85:D4:5E:37:74:71:64:CC:E8:84:7C:1F:70:B4:0C:EF
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 23242989D247317118A786F210E146053363A8F7
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33352e302f32342d3234203d3e20313939373431.roa
Signing time: Thu 13 Aug 2026 19:27:49 +0000
ROA not before: Thu 13 Aug 2026 19:22:49 +0000
ROA not after: Thu 12 Aug 2027 19:27:49 +0000
asID: 199741
IP address blocks: 5.182.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:24:29:89:d2:47:31:71:18:a7:86:f2:10:e1:46:05:33:63:a8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Aug 13 19:22:49 2026 GMT
Not After : Aug 12 19:27:49 2027 GMT
Subject: CN=34B1DF5085D45E37747164CCE8847C1F70B40CEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:53:75:48:ee:1e:1d:13:d2:cc:e3:10:3e:
b8:9e:00:7f:3c:bc:8c:ea:ae:e1:e2:5b:1d:f4:09:
ec:04:19:25:fe:ab:83:0d:22:d9:95:8f:4c:c4:90:
f2:5a:f8:51:32:56:c6:b4:c0:72:8e:60:7a:b5:b7:
27:fd:76:49:d2:d0:c6:7d:22:4d:5c:23:e1:14:6e:
21:18:db:0f:a7:92:a5:84:9c:2b:76:f7:ed:72:8d:
b6:c0:09:e4:ca:0b:25:60:18:34:55:02:e0:f6:49:
80:99:0c:b2:f9:4a:0f:5b:d6:a0:13:c1:d8:1a:6b:
52:86:26:5a:8a:ab:d3:c9:72:e9:7b:fe:fc:87:89:
83:08:0e:a4:22:55:3f:22:2a:6d:8c:49:81:5a:e6:
71:c1:bc:9b:b3:08:fc:a2:c6:73:4a:99:14:f2:9d:
a8:d7:6a:fa:a1:cc:97:f2:77:85:6b:0e:f3:78:f1:
32:94:99:7c:77:26:79:e0:1f:0f:df:76:13:3f:69:
b1:14:1a:e3:ad:43:40:2b:e0:48:ae:dc:99:cb:6e:
1b:45:52:f8:c1:fe:e4:9b:b7:69:3e:88:88:b9:9e:
f1:b8:6c:6f:18:ce:ee:9d:e6:e3:69:94:44:87:cd:
ea:9f:50:01:8c:00:38:5a:f9:5e:12:1e:61:93:6a:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B1:DF:50:85:D4:5E:37:74:71:64:CC:E8:84:7C:1F:70:B4:0C:EF
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33352e302f32342d3234203d3e20313939373431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.35.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f4:a8:b8:14:a7:15:f8:ba:bb:e0:15:b8:e1:02:82:e5:11:
60:01:40:32:f0:fe:1e:1f:50:e8:9e:5c:5f:87:d7:7e:d5:95:
ad:7c:4c:3c:c9:51:c4:5b:5b:44:8c:cf:30:47:5e:79:48:c5:
80:9f:c7:f4:1d:20:86:27:99:0c:61:7f:05:20:51:c3:cb:c8:
10:81:ad:59:2c:72:f1:0e:81:b3:8d:24:bd:02:9f:67:1b:5c:
28:f6:84:9c:b8:96:29:e2:a6:cc:92:b9:5c:92:a1:a2:0c:e6:
85:03:44:b3:a5:3a:72:f5:63:92:15:da:a4:3f:4c:51:3a:cb:
09:89:55:c5:05:2a:d5:7c:17:03:91:e8:95:2d:65:37:ab:9a:
7c:f3:b2:a5:82:26:f4:4e:57:e1:fe:aa:b0:f3:16:ee:90:8f:
50:d5:ed:6d:cf:c5:4a:8c:45:fb:68:f4:1a:9e:e8:4e:a2:02:
f1:c4:ab:fa:b2:cc:71:ce:da:11:2d:f8:41:90:01:99:21:f2:
93:89:77:4e:fe:b5:78:67:87:8c:da:bb:4c:fb:23:0e:aa:5b:
b8:24:e5:82:f6:65:e5:6c:ee:0d:65:6b:5e:49:1e:ea:6d:c7:
a9:c0:91:29:fd:0d:ec:3b:41:e6:64:85:c4:b3:8f:ad:72:62:
4e:9a:ac:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:34 2026 by rpki-client