Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31362e302f32342d3234203d3e20313531333830.roa
File: 352e3139392e31362e302f32342d3234203d3e20313531333830.roa (raw, json)
Hash identifier: ZPe/Im/xFcYnYZR8iVFkLXOO6uik75RW/RGxfyoqZBA=
Subject key identifier: 7D:93:73:51:55:AF:B1:6D:9A:54:DB:C6:CA:70:73:7B:D2:C8:7A:D6
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 38FA474B55A051243DD2C00DAB6955765C4617C3
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31362e302f32342d3234203d3e20313531333830.roa
Signing time: Wed 25 Feb 2026 03:07:57 +0000
ROA not before: Wed 25 Feb 2026 03:02:57 +0000
ROA not after: Wed 24 Feb 2027 03:07:57 +0000
asID: 151380
IP address blocks: 5.199.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:fa:47:4b:55:a0:51:24:3d:d2:c0:0d:ab:69:55:76:5c:46:17:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Feb 25 03:02:57 2026 GMT
Not After : Feb 24 03:07:57 2027 GMT
Subject: CN=7D93735155AFB16D9A54DBC6CA70737BD2C87AD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:f7:26:16:62:ac:e2:e5:de:da:c1:bf:62:
93:57:6d:8f:97:7c:29:2f:0b:66:24:c7:81:b5:d3:
ea:7c:83:43:93:e3:59:45:db:a2:50:46:4e:a8:aa:
af:96:e9:52:c1:43:5b:18:c4:a5:fa:c2:69:55:20:
b5:c5:96:69:83:58:03:45:79:34:02:b3:a3:be:f6:
f3:c1:12:62:0d:c8:b9:97:f4:19:40:25:a5:de:b3:
85:cf:b6:db:f9:a2:0d:7e:e6:3f:6e:15:ae:14:2a:
9d:96:e6:e4:2c:66:45:12:47:bc:a2:29:db:d6:cc:
e8:0a:89:c6:43:2b:ff:d4:6a:d7:da:db:70:f9:8e:
d7:0d:df:7f:d5:c6:da:31:b2:f3:cd:74:53:0a:4d:
3a:c7:4a:23:29:2a:d5:f6:fe:69:c6:5b:53:05:dd:
03:78:5a:b8:70:6e:7c:e8:8e:1e:9b:1d:72:98:3e:
a1:b5:ac:08:69:b5:e3:ef:19:71:4e:e3:ae:18:db:
41:6b:73:06:a7:d3:ee:a3:ff:64:ae:f0:21:40:f8:
50:cb:38:77:b3:13:b4:e2:8d:65:02:cf:cc:b4:d3:
41:c8:b4:e0:bc:45:c9:35:06:bc:2d:e0:d4:e3:f0:
2a:39:7a:7b:58:60:0d:cf:c2:62:87:16:7c:44:59:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:93:73:51:55:AF:B1:6D:9A:54:DB:C6:CA:70:73:7B:D2:C8:7A:D6
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31362e302f32342d3234203d3e20313531333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.16.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b0:88:35:28:7b:d3:d8:fe:5c:99:b5:35:ff:b2:5d:30:b8:
18:9f:0d:37:51:1b:2d:ca:ba:6a:5b:87:ea:ad:55:8f:ee:65:
fd:be:e2:18:15:14:b6:54:14:03:2e:c5:f8:68:5e:57:b4:2e:
f2:33:6e:15:4c:61:80:f9:d5:c2:dd:5f:59:4f:c2:50:d8:35:
bb:50:95:67:bb:cd:ed:cb:0e:b9:ff:51:3b:71:4c:81:2a:26:
a7:82:43:40:8d:87:fe:6e:2c:1e:c6:df:bd:4d:a3:e7:21:58:
d9:7f:00:f3:89:b3:2a:96:61:25:b9:b7:c0:54:3c:5a:43:b0:
0a:72:e9:70:47:4c:99:fc:7e:ac:ac:f0:c6:e0:93:ff:b4:76:
2f:23:a1:47:a0:c7:5b:20:b0:02:a5:78:d2:51:99:fb:f3:31:
77:13:29:ae:d9:44:18:7c:b9:b9:66:62:42:ca:23:4d:9d:7e:
31:c8:ee:be:52:d1:75:97:be:84:92:b5:fc:f8:b1:dc:fe:9d:
2c:03:21:6d:49:4a:61:15:6e:4e:6b:60:6d:9b:7c:ed:7d:49:
68:79:2a:c9:92:cf:a8:84:f4:07:7d:b2:44:26:39:50:32:27:
7d:d3:e3:69:5e:ef:ef:d2:a7:6c:e5:7a:c7:37:5a:dd:00:c5:
b8:cb:f4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:16 2026 by rpki-client