Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e302e302f32342d3234203d3e20383334.roa
File: 352e3139392e302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: fVPCiKBHbHKVCqUU82TuU9OsIuTzlNy8GP3CxulaFxc=
Subject key identifier: 6F:01:D9:98:F5:29:14:DF:E2:0D:A7:D9:FE:17:AD:A6:F8:E9:71:B0
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 0D6AB724447E98B1ED4396090533FA36164E1BF3
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e302e302f32342d3234203d3e20383334.roa
Signing time: Sat 25 Jul 2026 15:59:01 +0000
ROA not before: Sat 25 Jul 2026 15:54:01 +0000
ROA not after: Sat 24 Jul 2027 15:59:01 +0000
asID: 834
IP address blocks: 5.199.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:6a:b7:24:44:7e:98:b1:ed:43:96:09:05:33:fa:36:16:4e:1b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Jul 25 15:54:01 2026 GMT
Not After : Jul 24 15:59:01 2027 GMT
Subject: CN=6F01D998F52914DFE20DA7D9FE17ADA6F8E971B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:70:27:df:6f:f7:a4:fb:5b:78:da:41:8e:ed:
59:8f:cb:54:bf:63:27:58:d0:36:47:e2:7b:46:3d:
17:12:38:de:28:3b:ea:bd:6d:47:bf:9e:72:71:21:
20:35:2b:85:e7:b9:42:28:ab:aa:0f:f4:17:a5:cf:
c7:b8:22:67:d3:83:12:02:2a:9f:4f:13:cb:38:9f:
49:a0:fe:0a:0d:aa:cb:02:22:e5:11:8c:fe:0d:f0:
5d:43:9a:1d:84:23:02:71:b7:b8:55:f3:43:08:18:
6b:f2:80:01:8d:a5:c2:fc:01:98:16:5e:3f:a1:70:
2e:ef:99:12:51:29:12:a7:00:9f:61:74:31:4d:34:
c2:a4:38:75:05:4e:a1:b0:f2:53:53:36:2b:c8:2f:
ac:56:6b:e8:39:f3:87:3a:57:53:cb:12:9a:25:87:
1f:9a:54:5d:ea:33:5e:b8:68:d9:c3:56:e0:6a:f5:
48:52:3a:d9:a2:7b:45:e9:14:21:75:1f:44:c3:05:
ae:bb:c4:20:83:fa:90:29:9b:b7:7a:69:58:3b:44:
e4:14:a6:1d:81:e6:82:c6:86:cb:f7:c1:33:cf:8b:
92:68:f7:a7:96:14:43:71:28:d4:22:c1:dd:73:ae:
a3:ea:3f:5f:e6:9e:53:c4:66:26:1b:56:fa:5e:7a:
23:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:01:D9:98:F5:29:14:DF:E2:0D:A7:D9:FE:17:AD:A6:F8:E9:71:B0
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.0.0/24
Signature Algorithm: sha256WithRSAEncryption
92:3f:16:a2:89:c3:f5:aa:e1:c0:8e:13:c7:7f:86:1f:37:4d:
d3:4f:1d:19:db:dc:0b:b0:5a:a6:e5:07:2c:b2:08:ac:2e:0f:
9f:90:32:2c:c4:1b:80:aa:52:dd:99:92:4c:87:9f:f0:c6:12:
bc:f3:f7:fd:08:78:48:44:51:df:0d:e2:c4:0c:d1:17:6b:4b:
ed:6c:fd:fc:87:d1:b6:f4:54:0e:6e:e1:2f:47:5f:c5:87:85:
cf:8e:b7:ec:77:cc:4d:e6:e8:51:ad:44:6d:b0:c9:2f:0e:9c:
39:44:54:29:c5:84:48:96:c7:6a:87:d4:d6:2e:88:53:14:c8:
5d:10:12:b3:52:57:18:f2:b8:8d:1d:43:1b:ea:30:0f:d3:63:
8a:a7:73:42:a3:81:42:a4:24:7d:21:fe:d0:6c:90:d1:95:22:
92:fd:ed:82:4c:7e:ec:a3:1a:e9:c1:d5:c9:f1:a3:6c:d5:7e:
ee:30:52:84:b1:12:17:c9:49:1d:04:42:44:0a:1e:95:f5:4a:
b5:4e:10:a4:af:c5:a7:2a:8a:e6:b0:37:e8:fb:2b:fc:2e:8b:
71:27:15:a0:4d:0f:06:a5:4d:46:a0:4c:14:70:aa:0f:f6:7d:
54:c0:02:6e:bd:00:57:16:43:4d:25:77:d2:72:15:1e:81:51:
f0:51:61:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:03:46 2026 by rpki-client