Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e392e302f32342d3234203d3e20323032303731.roa
File: 352e3139392e392e302f32342d3234203d3e20323032303731.roa (raw, json)
Hash identifier: heWqLcR2+V9RbESqzsAO/O3q9Fok13ESrdCeHFKi9Fo=
Subject key identifier: A7:CA:57:FF:60:C9:A9:B4:13:40:40:78:80:B3:9B:8D:F1:C2:87:EF
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 08844087154CC27C20DE4F2946064A5050F6061E
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e392e302f32342d3234203d3e20323032303731.roa
Signing time: Mon 26 Jan 2026 14:25:59 +0000
ROA not before: Mon 26 Jan 2026 14:20:59 +0000
ROA not after: Mon 25 Jan 2027 14:25:59 +0000
asID: 202071
IP address blocks: 5.199.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:84:40:87:15:4c:c2:7c:20:de:4f:29:46:06:4a:50:50:f6:06:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Jan 26 14:20:59 2026 GMT
Not After : Jan 25 14:25:59 2027 GMT
Subject: CN=A7CA57FF60C9A9B41340407880B39B8DF1C287EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3b:e7:bd:c3:99:c9:70:cd:d4:01:a5:6b:f6:
68:9e:99:1b:e9:be:03:ef:d8:67:09:49:12:1c:53:
34:07:51:e9:dc:20:0c:ba:7a:16:dc:ae:23:61:2e:
a0:af:58:d8:31:f2:53:24:ff:34:c6:12:d1:29:cb:
84:92:b7:d3:26:56:65:fc:3a:93:e8:08:dc:14:3d:
c7:e5:78:dd:a7:c8:c5:c1:39:c6:1f:13:d4:b6:1c:
0d:94:12:e4:98:ba:97:0f:b5:df:23:91:0e:2c:57:
16:46:0b:3f:2d:03:6d:1a:8f:8b:24:98:c1:0f:c8:
a1:a3:e9:1d:c8:53:04:c4:77:c8:d1:bc:f2:5a:99:
44:14:0c:90:ec:f0:d3:ef:b5:99:37:21:6f:d2:1c:
9f:3e:21:f5:8d:9b:8a:86:6a:6c:c6:8a:ac:80:de:
90:f5:0d:2c:8c:08:2f:75:1f:c6:b9:6e:54:e4:84:
24:a8:ac:80:92:67:ec:e4:29:c0:23:59:d7:66:9d:
90:3c:f1:91:22:8e:57:3b:63:df:73:95:f8:ad:85:
79:1b:c8:4c:4d:11:7e:f4:80:bf:85:c3:f2:71:78:
73:c1:74:76:d1:ea:86:fc:8b:e8:eb:04:f2:17:66:
8d:b4:d2:4f:91:09:6c:e1:24:aa:cb:46:96:93:77:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CA:57:FF:60:C9:A9:B4:13:40:40:78:80:B3:9B:8D:F1:C2:87:EF
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e392e302f32342d3234203d3e20323032303731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.9.0/24
Signature Algorithm: sha256WithRSAEncryption
00:29:02:ad:3f:cd:c1:64:d3:0d:33:22:ea:ad:fb:ba:a9:78:
89:cb:b3:ed:b3:5c:40:06:40:ce:07:0f:e7:24:0d:6f:17:84:
5f:23:a1:5d:14:89:1f:ce:ff:78:13:83:b6:1a:d0:39:a8:be:
4b:e4:b2:b4:c2:b6:44:96:3b:b9:92:d4:1e:f9:2d:fa:17:e7:
5a:99:b9:c7:2b:92:40:32:10:75:c4:59:14:3b:df:68:b6:12:
da:61:88:2f:e8:8f:78:a4:13:d4:0d:51:80:c3:55:36:fe:fd:
4f:0f:e5:7a:62:a7:17:05:6a:61:1f:5c:85:3a:55:10:7c:04:
b0:1a:4c:36:26:1e:01:26:64:57:18:65:b7:8e:dd:8c:10:ff:
28:3c:ed:3d:e8:76:d6:77:f2:aa:fc:2c:45:cc:a2:11:96:24:
15:78:b0:63:cc:00:3d:26:17:3c:ed:88:05:7d:ac:f5:70:ae:
bc:45:6f:f7:f3:56:71:22:06:20:3b:54:08:6c:50:de:b8:5f:
87:f5:9e:56:f7:b0:33:a1:34:3c:8f:3b:f1:22:e8:e0:9c:36:
d6:25:4d:8e:5a:08:20:e5:bc:1a:7b:26:1e:7f:af:ae:56:aa:
be:2b:39:20:fc:1b:ca:af:1c:13:41:fe:cf:c4:64:d4:13:53:
ba:84:22:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:45:09 2026 by rpki-client