Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33302e302f32342d3234203d3e20383334.roa
File: 352e3139392e33302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: lzBQVhZtgue8q6W6iB19on5kfufckUhLA+vSn87MKjg=
Subject key identifier: 1C:98:7D:8C:E6:11:88:1B:1A:F0:7B:FD:2D:A0:D8:C7:64:51:29:15
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 598F2EB765BADDE004A2FB70F5EE0A6CBD23BA66
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33302e302f32342d3234203d3e20383334.roa
Signing time: Fri 20 Feb 2026 18:46:38 +0000
ROA not before: Fri 20 Feb 2026 18:41:38 +0000
ROA not after: Fri 19 Feb 2027 18:46:38 +0000
asID: 834
IP address blocks: 5.199.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:8f:2e:b7:65:ba:dd:e0:04:a2:fb:70:f5:ee:0a:6c:bd:23:ba:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Feb 20 18:41:38 2026 GMT
Not After : Feb 19 18:46:38 2027 GMT
Subject: CN=1C987D8CE611881B1AF07BFD2DA0D8C764512915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:d6:5d:1d:3b:2c:51:34:c3:fb:5d:d9:20:
bd:18:a9:b9:01:0f:b8:27:c8:e3:ca:0a:b3:e3:4e:
f2:0e:6f:2d:79:d5:23:23:4f:da:27:71:da:e5:85:
32:b6:04:1a:12:d3:c1:30:ae:55:fc:bb:6a:33:c8:
e7:a4:aa:67:3b:bd:61:60:2e:6d:35:10:5b:49:c5:
63:95:38:ff:d8:80:5b:0f:0d:0d:63:13:c2:06:bd:
e4:e6:2c:99:13:58:16:f8:70:ae:4d:63:10:bd:9b:
0c:e1:ae:85:fe:84:cd:43:57:a9:40:82:26:5f:b6:
0f:18:ce:44:b3:80:ec:ac:cc:fc:b8:e5:09:52:b6:
c8:81:7b:af:d3:ac:56:a0:92:23:65:37:52:3d:28:
ba:4c:e1:c2:87:e8:2f:f9:c8:82:0d:af:17:e4:06:
1e:ef:7a:53:7c:ea:76:25:30:eb:96:e9:f6:49:8d:
c2:28:94:5b:99:d5:3a:0e:22:f0:a4:7d:8a:bc:69:
68:cc:4b:f2:e6:41:4a:1f:b8:50:bf:c6:85:ba:58:
c6:07:52:ad:d4:c0:7b:17:67:ea:63:15:30:f0:7f:
61:c6:19:ba:46:79:c2:c6:21:e7:ba:df:f3:56:31:
c9:82:98:93:2e:46:b4:84:af:12:14:44:09:d5:09:
7e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:98:7D:8C:E6:11:88:1B:1A:F0:7B:FD:2D:A0:D8:C7:64:51:29:15
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.30.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:f8:aa:74:2a:d3:a1:4f:42:0e:29:cb:d7:09:63:97:d0:55:
f9:8e:ce:37:2d:a5:35:ca:c4:fb:c5:08:61:76:1e:66:45:29:
6d:3c:27:2d:27:b4:3c:f8:f0:a4:69:4b:7f:2d:73:16:14:02:
4c:ae:df:fa:83:a6:37:fb:f6:11:52:b9:0e:b6:0d:5e:3d:46:
fa:c3:6c:2f:8d:74:77:84:b4:5d:23:60:b2:c4:c9:b8:f6:da:
e7:69:b3:ce:b6:e6:4a:69:ff:c7:94:f1:02:0f:3d:28:6e:c8:
2a:4b:16:33:33:4a:52:d5:14:cd:ab:49:b0:ac:af:32:17:55:
71:8c:67:d6:52:70:2d:05:17:89:39:77:25:0a:c6:9c:8e:81:
9e:ae:21:2b:8c:f6:8f:8a:3e:9c:3e:88:6b:90:35:a4:6f:d7:
56:64:b7:b6:68:00:4c:d1:5c:33:da:f2:c4:d5:2e:8c:1a:49:
fb:ce:76:6b:d8:3c:cb:fa:67:1e:e3:37:3b:92:a9:63:23:38:
02:e5:03:ee:82:b1:27:ac:1d:f8:45:11:78:64:40:c4:a6:38:
37:dc:f4:83:de:8f:93:dd:86:04:95:00:14:61:8e:fe:26:e0:
94:d5:99:0d:c6:9b:8e:95:a0:6e:b1:ff:aa:68:78:cf:3f:a6:
38:50:69:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:47 2026 by rpki-client