Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3235332e3233362e302f32342d3234203d3e203133333335.roa
File: 352e3235332e3233362e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: Mk2DF4bUY6J+ewcBXNmU+hD3Y1ny82UxtaD5OCSOdOs=
Subject key identifier: 5B:FF:45:AE:A4:BF:8A:14:3F:B8:80:BF:06:EC:90:7D:E9:D7:BE:94
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 35363ABA847D97A04E2582034912BF35ECC93963
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3235332e3233362e302f32342d3234203d3e203133333335.roa
Signing time: Wed 09 Sep 2026 19:36:27 +0000
ROA not before: Wed 09 Sep 2026 19:31:27 +0000
ROA not after: Wed 08 Sep 2027 19:36:27 +0000
asID: 13335
IP address blocks: 5.253.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:36:3a:ba:84:7d:97:a0:4e:25:82:03:49:12:bf:35:ec:c9:39:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 9 19:31:27 2026 GMT
Not After : Sep 8 19:36:27 2027 GMT
Subject: CN=5BFF45AEA4BF8A143FB880BF06EC907DE9D7BE94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:65:e9:f6:72:76:d4:7a:9c:56:76:f9:13:
12:23:5f:7f:18:3c:8d:14:33:9e:ae:d2:5d:84:96:
d6:f3:92:e8:b6:0e:aa:bf:f4:46:1b:4f:6c:dc:4d:
e0:ee:8b:4b:2b:68:8a:be:1a:a0:68:da:9e:57:d2:
91:79:11:b0:9b:74:60:58:6c:26:5a:69:31:3f:32:
80:37:6b:e4:5a:51:99:ba:4a:0f:88:09:2e:5c:a0:
ab:f0:90:43:51:89:8d:85:6b:44:a5:26:f3:e5:a9:
23:54:67:01:5e:be:8d:22:35:e2:b9:0e:b5:1c:8e:
e5:1a:ec:6e:24:eb:7f:d5:6a:a9:e9:c4:ed:3f:89:
d3:f5:56:ee:2d:a7:a0:3b:44:e5:7b:bf:f7:75:4f:
0f:d4:57:04:d8:59:b3:e4:4a:b5:61:34:72:ce:38:
d4:ba:af:07:46:fe:e6:eb:20:d7:b5:5f:1f:98:5b:
9b:82:b9:aa:60:a0:23:31:9f:4f:f7:77:a6:24:4d:
86:c6:34:b6:48:af:f9:90:44:31:1b:27:7d:16:cb:
f6:a7:b1:c9:54:25:b6:ca:4c:29:6b:6b:19:24:79:
f3:3c:80:42:27:4d:ad:90:9a:81:75:bd:a0:63:dd:
d4:84:93:47:d9:88:dd:3c:01:0b:24:e7:b2:c5:18:
4a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FF:45:AE:A4:BF:8A:14:3F:B8:80:BF:06:EC:90:7D:E9:D7:BE:94
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3235332e3233362e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.236.0/24
Signature Algorithm: sha256WithRSAEncryption
40:30:e6:59:0f:1a:7c:1d:3b:3a:a5:95:e5:aa:0b:e4:a8:67:
a8:4c:f7:97:dd:36:53:25:20:db:d5:02:65:7a:cf:2e:96:bc:
13:d7:83:43:87:48:a6:90:90:cd:e3:8c:e8:fc:5f:e6:3b:c4:
4c:a9:5e:c4:08:8a:32:95:14:18:d8:d6:7f:36:75:37:9a:d3:
91:42:6f:34:44:97:61:76:1c:25:dd:04:31:ee:2e:e4:69:6a:
3b:15:0a:76:bb:e5:e5:e2:50:ff:31:17:f8:8a:22:1d:1a:d7:
76:13:67:55:3e:a5:8d:63:98:96:12:01:7b:ed:6a:cf:03:b0:
b6:89:bc:e1:11:23:d9:3f:ee:eb:29:57:dc:04:72:e3:d9:b3:
c8:48:b3:11:b0:48:c8:40:8c:29:1b:27:f7:e5:1b:aa:4b:cf:
53:80:09:1a:93:36:ef:a6:18:c1:25:95:f2:09:cb:13:a6:3b:
01:52:d0:9f:92:e5:fd:38:7d:fd:70:8a:b2:4d:37:75:32:91:
6b:35:0b:47:da:c0:58:6b:84:00:27:87:1c:81:eb:5f:a8:ac:
31:65:02:57:bc:8d:cb:c1:60:3c:d0:7c:86:0d:86:6d:1c:22:
4b:c9:12:04:ba:10:97:d6:90:29:a0:82:c5:d7:8f:a2:b6:cd:
f8:39:d0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:44:53 2026 by rpki-client