Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32312e302f32342d3234203d3e20323033303934.roa
File: 352e3139392e32312e302f32342d3234203d3e20323033303934.roa (raw, json)
Hash identifier: qXE2AEqBqTgbeWA7U5Au2aIIneqIHGLeRDDilVnOwXg=
Subject key identifier: BB:97:8B:53:1B:6D:1C:74:0D:77:E4:85:69:09:EC:75:0C:39:E3:A8
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 76086FC630CB8B596992CC372B85E5D0C74E78A1
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32312e302f32342d3234203d3e20323033303934.roa
Signing time: Thu 05 Feb 2026 07:28:02 +0000
ROA not before: Thu 05 Feb 2026 07:23:02 +0000
ROA not after: Thu 04 Feb 2027 07:28:02 +0000
asID: 203094
IP address blocks: 5.199.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:08:6f:c6:30:cb:8b:59:69:92:cc:37:2b:85:e5:d0:c7:4e:78:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Feb 5 07:23:02 2026 GMT
Not After : Feb 4 07:28:02 2027 GMT
Subject: CN=BB978B531B6D1C740D77E4856909EC750C39E3A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:92:03:7f:7c:a7:de:8d:e0:2e:a9:34:a9:
be:55:90:d9:97:e4:48:aa:c0:4a:5a:08:5b:b7:4f:
80:f4:fb:e8:f9:66:f1:f3:6b:32:2f:cc:ba:1d:8f:
8c:4f:35:b9:20:dd:77:ca:8d:00:f3:33:3e:d5:04:
f0:31:48:96:90:dd:3e:63:ed:8f:ea:03:74:29:a7:
7f:cd:f3:00:18:fd:4c:96:44:95:53:23:fd:58:5c:
70:34:64:67:8c:3d:bc:03:23:3a:54:7d:08:df:59:
66:b5:27:a7:bc:2e:47:11:cf:10:3e:ef:f5:86:55:
34:66:c8:d9:f1:f3:d9:d0:06:84:cf:46:af:8d:07:
27:6a:81:a8:8f:97:66:46:c7:76:a5:46:82:46:37:
5d:0b:4d:1a:34:b0:47:cd:c2:ec:55:54:d2:c2:02:
04:dc:cf:0a:e3:fa:5f:60:04:dc:8a:e1:a1:19:23:
4f:2a:c4:d0:d8:24:4f:df:9e:01:8c:35:b6:73:e9:
a0:81:7b:6f:de:21:fb:b9:20:50:45:39:0c:c8:76:
d1:09:b4:bf:96:60:b7:5e:2d:b6:cd:64:6d:5c:09:
d7:89:8e:47:0d:49:dd:c2:ce:ae:2f:71:4e:de:50:
97:18:c1:1f:29:a6:0e:74:22:19:28:ac:6d:2f:5a:
8d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:97:8B:53:1B:6D:1C:74:0D:77:E4:85:69:09:EC:75:0C:39:E3:A8
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32312e302f32342d3234203d3e20323033303934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.21.0/24
Signature Algorithm: sha256WithRSAEncryption
33:5c:c9:1a:23:cc:af:3e:da:88:59:7c:0f:2e:a8:b6:96:d1:
fe:65:d3:b1:40:46:ea:10:72:fe:56:93:bb:19:ca:91:3d:9f:
0e:a3:c5:05:86:a4:cd:86:0b:54:f7:f7:a6:c3:b2:45:af:d7:
77:cd:c8:d9:5c:09:6b:e9:d4:3e:71:e2:b8:02:2b:87:2c:39:
1f:84:72:a0:69:ab:6c:60:a4:e4:17:99:fe:cb:ce:62:74:fb:
2e:be:db:03:46:36:a0:df:71:d8:63:21:69:0b:04:d7:a4:3a:
10:24:4b:78:41:69:1a:e4:c0:1a:86:b9:d8:d0:7c:8d:af:a3:
5d:7c:58:5e:21:38:0a:f6:ef:f0:85:92:64:17:fb:4b:f4:ad:
40:be:69:18:0f:57:cd:bc:4c:68:cf:c8:a8:2a:ec:97:45:94:
74:51:4a:86:01:c0:48:80:1e:11:ef:98:94:f7:5e:b6:67:c2:
7f:4d:ed:43:5e:8a:fe:c6:5e:62:d4:df:4c:df:4b:9a:32:64:
51:1e:f0:7a:b9:67:a7:7a:fc:6d:06:6d:ae:c2:e0:ba:7a:ca:
38:4a:3b:b7:cb:7b:3f:ea:09:3e:e3:8c:e3:68:9a:0c:1f:ad:
04:76:94:4c:59:3e:73:53:34:a5:f6:43:eb:bc:b1:b1:50:0b:
96:73:a5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:45:09 2026 by rpki-client