Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3235332e3233372e302f32342d3234203d3e203538323931.roa
File: 352e3235332e3233372e302f32342d3234203d3e203538323931.roa (raw, json)
Hash identifier: IsuNxn4d3HgVhcc4B7WVz86tnh4A0UrWphwxv3JCBiA=
Subject key identifier: 53:A4:5F:F9:96:15:36:8A:8D:DE:77:94:83:DA:65:8D:67:78:11:F1
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 3D2C1B8850058EC5F04996F4FD0CA35DD26C2422
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3235332e3233372e302f32342d3234203d3e203538323931.roa
Signing time: Wed 16 Sep 2026 21:48:24 +0000
ROA not before: Wed 16 Sep 2026 21:43:24 +0000
ROA not after: Wed 15 Sep 2027 21:48:24 +0000
asID: 58291
IP address blocks: 5.253.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:2c:1b:88:50:05:8e:c5:f0:49:96:f4:fd:0c:a3:5d:d2:6c:24:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 16 21:43:24 2026 GMT
Not After : Sep 15 21:48:24 2027 GMT
Subject: CN=53A45FF99615368A8DDE779483DA658D677811F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:a0:84:5e:c1:a4:cb:f7:e0:a8:b4:d2:08:80:
ef:de:5b:54:32:67:da:b9:de:ec:50:23:38:48:ad:
ea:d6:35:a5:d7:17:1f:50:9d:95:51:c8:54:8a:03:
fa:7e:c7:bb:8e:da:2d:97:b5:05:a7:79:58:f3:cf:
7f:bb:d9:21:78:09:aa:89:53:ca:87:ac:82:5a:d9:
86:98:6e:64:43:45:e8:5d:61:1f:6d:be:7b:49:31:
f6:ba:e6:de:46:fd:1d:a4:e2:3f:d4:c5:d2:87:f9:
eb:e7:60:01:0d:aa:ba:fc:41:bb:ec:df:85:b4:4c:
42:91:74:40:3e:09:b5:5d:54:42:35:d1:01:bd:5f:
a6:0f:0c:d8:81:b0:7a:ef:2c:55:7e:48:0b:94:d0:
e4:0d:d2:07:c9:7b:bb:74:38:3b:09:88:56:2a:4c:
06:eb:01:fc:9c:37:fd:71:41:fe:d0:00:f6:32:27:
73:b9:06:a0:d5:06:90:66:af:e1:2d:3d:c4:27:57:
68:86:24:6e:38:16:8d:da:79:5e:40:d3:42:81:d9:
5e:d3:35:3e:ac:c3:64:c9:63:75:6e:ac:8d:ef:e8:
3e:d6:35:85:d2:0a:b8:7a:b4:af:db:e3:52:4f:05:
46:9b:9c:27:09:ed:1d:dc:5f:ed:cc:71:7c:ee:53:
85:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A4:5F:F9:96:15:36:8A:8D:DE:77:94:83:DA:65:8D:67:78:11:F1
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3235332e3233372e302f32342d3234203d3e203538323931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.237.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c1:29:de:00:59:af:3f:d8:13:89:72:f0:fc:0d:a8:72:94:
d9:b2:76:93:05:98:c8:ce:ad:6b:c2:de:05:e4:2e:01:9d:e9:
dd:fb:62:8f:32:62:6d:12:10:3e:99:47:5c:77:1b:cb:40:17:
7f:e7:7d:fd:8b:3b:24:db:7c:18:ed:48:7d:68:c3:06:86:3e:
7b:ef:99:16:16:0f:4e:c4:cb:57:b9:b0:4a:71:88:ab:6e:bf:
07:74:ae:91:07:bd:9c:ea:08:5b:b7:3d:ba:8e:ff:98:e4:ec:
67:75:19:fb:0b:c2:68:62:b1:14:a3:f3:7d:c5:b2:ff:1a:22:
10:2b:17:b2:cc:a1:3a:fb:cb:3c:4a:55:49:ef:4b:e9:cc:f0:
cb:64:08:75:7d:27:4c:4c:3e:1d:d6:1d:50:c3:b4:6d:ec:31:
93:9a:99:49:5d:b5:15:38:10:72:dd:43:ca:e6:55:03:5b:ee:
a2:1c:05:da:6a:4d:51:ec:9e:03:98:3e:52:90:7b:19:f8:d5:
d8:7a:e9:c5:1f:14:13:bf:a9:4b:87:64:02:fd:d6:3b:32:6e:
88:24:7a:52:9f:26:4b:00:41:09:10:fe:b6:d3:46:31:af:c0:
68:a2:09:e1:72:1f:e4:95:01:28:7f:be:63:b2:21:69:b1:c3:
e2:35:7f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:37:53 2026 by rpki-client