Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33312e302f32342d3234203d3e20323134343332.roa
File: 352e3139392e33312e302f32342d3234203d3e20323134343332.roa (raw, json)
Hash identifier: p3+PFHb7EIgLJRZ6cZqKJF+uLAh1tOTKiRX4m31t/rM=
Subject key identifier: A3:11:EE:4A:DD:B9:C1:A1:88:31:18:8E:97:94:49:CB:B0:91:62:93
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 5743FE3747407D5F7B2047BC0C0472F0DCAF7A6D
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33312e302f32342d3234203d3e20323134343332.roa
Signing time: Fri 20 Feb 2026 18:45:10 +0000
ROA not before: Fri 20 Feb 2026 18:40:10 +0000
ROA not after: Fri 19 Feb 2027 18:45:10 +0000
asID: 214432
IP address blocks: 5.199.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:43:fe:37:47:40:7d:5f:7b:20:47:bc:0c:04:72:f0:dc:af:7a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Feb 20 18:40:10 2026 GMT
Not After : Feb 19 18:45:10 2027 GMT
Subject: CN=A311EE4ADDB9C1A18831188E979449CBB0916293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d3:1a:2a:29:97:40:44:d6:04:c0:d8:fa:54:
7c:75:ab:20:fc:0f:e9:7a:f8:cc:4b:cd:b0:00:04:
7c:f5:e1:b2:d9:d8:c1:9c:8f:8f:52:a2:bf:0a:da:
45:d1:bd:a1:ca:99:65:15:c8:53:3f:0c:dc:dd:f9:
ef:04:01:0a:f8:fd:72:a9:7d:87:0b:06:0a:71:ee:
ad:fe:04:ff:99:ee:67:25:49:66:21:71:6e:a8:2f:
c8:e5:9f:fc:b4:36:96:db:c0:c2:0f:41:e9:bb:e9:
1e:74:d0:68:02:45:3d:76:65:d3:a5:7a:a5:86:26:
56:0f:91:bf:4e:1d:c5:5d:54:55:e4:c0:d6:cc:f4:
9b:71:45:f7:49:9a:31:d6:14:16:ae:b6:9f:e9:b6:
6e:6c:99:ce:4f:e9:18:65:a8:51:8a:5d:ca:79:a1:
ad:b0:5e:0b:1b:da:83:d6:79:67:01:db:34:62:19:
a5:4f:30:c1:ac:6e:1c:ab:23:b1:61:f7:74:6b:d4:
e8:88:68:ad:b2:b5:20:77:d4:5b:14:ff:41:71:48:
cc:01:20:79:c7:a8:02:ac:b5:8a:0c:4b:4b:77:2a:
a0:bd:f7:2e:cc:9a:c9:2f:59:3f:85:62:e3:5b:36:
ad:b7:5b:1e:d5:ba:2f:4e:62:82:20:6a:b9:ed:45:
8e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:11:EE:4A:DD:B9:C1:A1:88:31:18:8E:97:94:49:CB:B0:91:62:93
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33312e302f32342d3234203d3e20323134343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.31.0/24
Signature Algorithm: sha256WithRSAEncryption
22:45:0d:2d:b2:7d:3c:72:d3:d1:a1:d6:54:56:52:b2:de:18:
0d:11:6e:9d:30:4b:29:2a:ad:6b:ea:48:4c:6f:48:0d:6c:0f:
aa:50:bc:0b:4e:27:e1:f5:1f:c0:2c:85:fa:75:5f:85:53:b5:
bd:f6:57:a1:4e:40:45:4e:d6:b1:98:62:68:fd:84:f3:3a:d4:
79:cd:4b:f1:3f:10:e6:98:db:f6:e5:be:a1:a8:08:b4:b8:54:
e4:09:03:f6:1f:60:dd:a8:17:52:fe:39:9c:bd:bf:53:01:db:
66:0c:77:51:8f:f7:39:34:2b:94:c7:75:d2:a5:30:2d:d9:ee:
57:1b:15:cb:7d:22:11:b7:7b:7e:59:0c:35:a2:8c:ea:a7:2e:
b4:61:92:d4:20:3e:2d:c2:36:00:b9:85:f8:38:f3:cb:ba:41:
7d:22:d8:5a:61:e8:0d:dc:95:f1:96:3c:7b:09:7b:26:95:cb:
03:38:04:f1:39:09:e3:2f:6f:84:a7:62:a5:98:b7:19:b6:b9:
56:2f:3b:3b:de:f1:a8:92:a1:91:93:d0:f3:23:cc:74:7c:90:
ec:92:a8:c9:c1:95:22:84:8b:33:8a:ad:76:7e:b9:63:72:dd:
87:29:a0:fc:9f:31:2c:57:cb:24:99:98:a6:a4:f1:1f:66:51:
39:f6:83:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:54:30 2026 by rpki-client