Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138342e302f32342d3234203d3e20313534303439.roa
File: 352e3232362e3138342e302f32342d3234203d3e20313534303439.roa (raw, json)
Hash identifier: H9hlRxAktpjIeT3DJhaD4nFRiEtoUGveoYH/KllFDKE=
Subject key identifier: FC:46:D1:1E:CB:9D:94:28:C4:63:8B:DC:74:8D:DA:79:08:C1:90:34
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 0104C7193F8090B49CEC51544B10844BCFBBCE70
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138342e302f32342d3234203d3e20313534303439.roa
Signing time: Mon 04 Aug 2025 17:27:09 +0000
ROA not before: Mon 04 Aug 2025 17:22:09 +0000
ROA not after: Mon 03 Aug 2026 17:27:09 +0000
asID: 154049
IP address blocks: 5.226.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:04:c7:19:3f:80:90:b4:9c:ec:51:54:4b:10:84:4b:cf:bb:ce:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Aug 4 17:22:09 2025 GMT
Not After : Aug 3 17:27:09 2026 GMT
Subject: CN=FC46D11ECB9D9428C4638BDC748DDA7908C19034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:1d:00:bc:95:56:d9:cd:39:ea:9d:2a:fc:
7f:90:8a:70:ed:73:52:e8:5b:d4:19:07:24:11:12:
86:57:24:7d:15:57:fc:f7:2f:85:44:c1:50:45:56:
c6:5c:cf:73:8c:0f:9a:6a:04:a0:3a:83:97:78:79:
e6:05:d5:c6:f4:12:96:aa:7b:c3:0e:3d:b2:04:66:
27:cb:ba:6f:fc:45:07:8b:f2:9b:f8:fa:ef:8e:b8:
8f:34:89:72:5d:cd:01:25:84:e0:83:96:5c:46:ca:
ce:63:5d:c9:d8:f1:d3:cb:bb:0d:67:d9:b3:4a:09:
93:e0:98:06:4a:93:0e:04:ba:66:a8:6d:81:65:9d:
35:49:28:5a:f0:f9:0f:cd:bc:6f:55:fd:35:f3:46:
35:49:e7:cf:c7:30:87:3f:01:2d:0d:6c:41:fc:36:
45:5c:72:68:3e:c8:0d:a5:40:45:39:99:bc:76:a7:
03:11:40:9a:c5:e9:af:25:d7:51:cf:39:5f:f6:cc:
b4:5a:ea:86:5e:51:33:69:be:cd:1b:59:ea:29:0d:
95:11:86:b0:0d:c2:17:71:04:a9:4d:bd:55:dd:22:
c8:a7:40:db:4b:5e:41:b0:1b:b7:b8:8f:1f:46:9a:
54:02:f7:8e:eb:f1:ed:48:4a:01:a9:ef:3e:7b:2e:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:46:D1:1E:CB:9D:94:28:C4:63:8B:DC:74:8D:DA:79:08:C1:90:34
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138342e302f32342d3234203d3e20313534303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.184.0/24
Signature Algorithm: sha256WithRSAEncryption
14:24:0f:7b:ec:f6:0d:d1:3d:64:7d:99:ba:dd:6d:c9:e9:ad:
75:59:b2:3c:55:b9:03:44:9e:4d:ee:b9:f7:85:45:54:1e:f3:
7d:1d:78:0e:5e:6a:c6:71:c1:a0:dc:db:df:c1:e8:a0:5a:85:
c1:f2:77:b3:57:c3:ad:7f:e8:6b:8e:ca:97:7d:c7:54:2b:e9:
bd:b2:07:97:c6:64:88:ce:8f:92:e2:7e:3a:2d:37:fd:47:9b:
b9:92:76:58:5f:65:21:56:95:54:d6:7e:a8:b2:45:60:e2:49:
40:13:b1:7c:81:de:a9:3b:b5:96:18:e7:ab:11:5d:64:3b:1f:
ab:a6:8f:58:a8:28:0c:58:91:06:38:a3:04:e0:59:36:6a:c0:
f6:53:ba:5c:a6:d0:a8:a2:93:43:1f:23:aa:a4:f3:e6:24:75:
21:4c:45:ca:69:3f:05:42:ff:42:a0:a8:04:8f:34:4c:ef:9f:
94:d2:d6:bd:be:1a:53:13:91:ca:ed:9b:bc:86:e9:fe:96:a5:
5c:25:9f:6f:da:c9:87:71:c7:a3:cf:cc:85:9b:08:77:d7:3c:
ef:46:c1:d1:4f:7f:c8:a7:3f:f4:84:bd:23:0c:50:24:1c:7b:
e5:f6:2a:bd:2b:8a:13:ce:35:13:4a:bc:ca:bf:48:e3:07:51:
b6:61:0e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:24:00 2025 by rpki-client