Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3235332e3233392e302f32342d3234203d3e20313938373533.roa
File: 352e3235332e3233392e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: iezDNP3a+edWBrONJ5LHkl16nYxcqmRWifZ3RQdhB2s=
Subject key identifier: 57:E9:98:7B:A3:03:B5:84:17:B7:47:AA:71:A2:15:5F:DC:6F:2D:B2
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 26731557602B1CD2844D1686A7D7A3A478231E13
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3235332e3233392e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:46 +0000
ROA not before: Fri 16 Oct 2026 18:49:46 +0000
ROA not after: Fri 15 Oct 2027 18:54:46 +0000
asID: 198753
IP address blocks: 5.253.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:73:15:57:60:2b:1c:d2:84:4d:16:86:a7:d7:a3:a4:78:23:1e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:49:46 2026 GMT
Not After : Oct 15 18:54:46 2027 GMT
Subject: CN=57E9987BA303B58417B747AA71A2155FDC6F2DB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:97:30:17:f0:42:a4:bb:80:fe:bc:7c:65:4d:
0c:1a:19:a3:c1:5c:77:ac:0e:40:66:f0:87:1b:2b:
44:fd:66:a6:a1:f7:32:1f:78:04:ee:8d:54:2b:3b:
e0:a2:f2:2a:ce:a9:d0:0b:f3:f2:29:13:f9:13:4f:
c6:49:91:c1:d7:fa:dc:cd:bd:b9:21:10:24:9c:cd:
be:8d:da:b9:12:33:df:85:6e:28:80:a2:f3:af:d0:
83:fe:09:19:1d:ab:62:5d:65:71:ee:2c:e7:bd:4b:
3b:55:06:fa:97:dc:f0:b7:bf:7c:4b:42:28:18:54:
54:13:ac:0b:c7:fe:28:df:fb:0a:b9:47:f2:2b:5f:
d8:92:0a:30:9b:eb:e0:3b:b9:0c:25:03:0d:5f:4b:
20:ab:18:c4:3c:4b:11:61:0d:0d:f2:db:8c:f7:73:
b5:9e:9e:3c:97:3c:ff:3c:c0:36:49:53:f6:55:49:
60:9c:31:78:e7:65:f5:64:de:e3:5b:c9:c2:3e:3b:
2d:97:6c:ad:7b:10:b4:57:da:92:10:db:86:b0:68:
26:3c:84:e3:1d:05:84:93:9f:93:2b:35:bd:0d:80:
39:7c:27:80:1b:92:b7:74:7e:0c:98:6b:6b:93:95:
64:4b:ea:8d:59:74:c1:d9:48:78:73:88:80:db:00:
88:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E9:98:7B:A3:03:B5:84:17:B7:47:AA:71:A2:15:5F:DC:6F:2D:B2
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3235332e3233392e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.239.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:3e:1e:36:de:90:ba:c9:69:a8:b0:1a:b3:d9:87:76:ff:3b:
74:6b:d9:00:42:26:80:ed:84:86:8e:07:65:1c:a9:56:94:9f:
31:3c:37:47:2b:76:ee:f7:e4:b7:6d:71:3a:0e:c4:ff:a2:b9:
36:ca:70:1c:77:d0:b0:b4:e2:01:22:8c:0d:5c:d4:e0:08:8f:
04:5a:38:5a:e1:55:37:4f:1d:3e:ad:25:8d:0b:c5:4e:f7:b5:
b1:88:d6:ae:73:93:ed:47:46:dd:1e:ed:27:ac:74:28:78:a1:
b9:98:7c:ba:59:75:ff:56:b8:d1:f5:58:73:cd:c8:91:a4:e3:
49:c4:be:e6:fe:c8:27:57:30:8c:2b:96:45:a6:7e:6d:d6:82:
d8:25:bc:84:94:43:7b:17:7a:a3:52:0d:ce:2a:87:96:d8:82:
b7:8c:5f:29:5d:f3:fe:39:9e:a7:33:88:b4:1e:73:33:70:9b:
c4:4d:5a:3d:4a:0e:e9:ff:c5:77:cd:b1:09:0f:8b:32:04:8f:
c9:d3:33:ce:eb:06:f8:e4:36:2c:ef:cf:b3:ea:ba:42:1d:8d:
85:02:0d:b1:28:06:8c:e1:40:45:35:89:91:f8:c4:c5:91:b0:
29:07:0a:2e:6a:3c:d9:9d:10:c3:90:fc:6b:4f:f4:9d:9d:d0:
6f:be:a1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:47 2026 by rpki-client