Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138362e302f32342d3234203d3e20323031313336.roa
File: 352e3232362e3138362e302f32342d3234203d3e20323031313336.roa (raw, json)
Hash identifier: 9fdIPJo0eMjnKb22xK7IcX10k9v1+loDfWBv90zohJM=
Subject key identifier: 7B:62:0D:02:7D:FF:ED:F9:A9:A4:3E:B0:DC:6D:11:F3:E5:04:E6:F9
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 4C0D52E49783A86A08E4F772F8B5023AB21F7E1E
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138362e302f32342d3234203d3e20323031313336.roa
Signing time: Tue 30 Jun 2026 16:38:36 +0000
ROA not before: Tue 30 Jun 2026 16:33:36 +0000
ROA not after: Tue 29 Jun 2027 16:38:36 +0000
asID: 201136
IP address blocks: 5.226.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:0d:52:e4:97:83:a8:6a:08:e4:f7:72:f8:b5:02:3a:b2:1f:7e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Jun 30 16:33:36 2026 GMT
Not After : Jun 29 16:38:36 2027 GMT
Subject: CN=7B620D027DFFEDF9A9A43EB0DC6D11F3E504E6F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:a0:82:49:04:ef:4e:9b:9b:b8:6e:57:ed:
51:69:c9:90:57:40:bb:e0:1d:df:61:cd:55:bb:a4:
07:23:ad:c3:68:3c:fb:2b:92:f1:2f:2b:a3:75:af:
1c:ff:e3:ea:10:b0:ea:a5:10:68:88:31:6a:6a:39:
eb:a0:35:2c:35:d0:41:b4:e0:9f:a4:c8:a5:2c:7d:
c3:dd:59:8f:cd:eb:43:31:fe:5a:75:17:42:8d:1f:
1d:79:33:95:9e:55:73:ec:cc:62:e4:3c:f9:62:51:
f9:ae:32:38:98:1f:ab:b7:52:cc:10:c9:5c:ee:a6:
9d:65:4f:b9:38:45:76:62:3c:ab:61:f6:30:84:c2:
7e:18:29:40:4c:ce:ba:a9:70:e5:f6:69:5c:9b:d7:
a7:5b:84:79:8d:c8:a5:c0:23:37:f5:03:6c:f2:0b:
7f:24:30:cb:6f:3a:c0:b0:a3:ea:d4:b4:fe:3b:8c:
39:1f:30:3a:0b:65:71:4a:c3:aa:bb:ba:7b:23:38:
08:8e:ee:2a:fb:3d:b3:b9:1b:26:7e:88:29:fe:43:
1b:12:14:e0:39:b2:80:ff:2a:53:ca:40:71:ba:72:
32:a2:ef:87:54:55:0b:a2:7f:56:0f:ad:54:2b:ff:
a6:e0:83:82:5e:13:79:f5:ed:74:b1:cd:18:dd:8e:
26:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:62:0D:02:7D:FF:ED:F9:A9:A4:3E:B0:DC:6D:11:F3:E5:04:E6:F9
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138362e302f32342d3234203d3e20323031313336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.186.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:35:e0:d4:bf:8f:b8:09:c5:3f:10:ee:ed:aa:e0:77:44:bc:
e0:06:66:aa:11:78:60:d9:b6:2d:b3:2d:1a:eb:66:52:b6:4a:
fa:da:8d:52:75:b1:dc:f1:e4:0e:7b:f6:c6:bb:13:0b:6b:7e:
73:27:aa:53:d9:17:ad:8e:ab:56:da:d0:a9:3a:cc:5f:37:1f:
2c:88:96:19:b7:e7:96:1a:df:a4:84:ff:71:47:f5:d8:3a:c2:
d8:c8:74:f9:df:6f:be:c7:29:26:0e:43:7d:a1:dd:14:c0:47:
51:47:ae:c9:1a:1a:e9:31:04:db:14:36:43:79:67:b2:94:05:
c7:28:f3:72:0f:d2:e8:c3:e4:59:f3:84:4d:4c:51:33:58:b3:
aa:fa:ff:11:7f:56:fe:31:fc:75:1e:72:11:7a:c3:b6:b2:40:
ba:45:6f:9c:37:d7:ca:ae:37:e6:75:b3:61:c9:15:3d:cb:4c:
ef:70:05:43:7f:15:5f:bd:28:39:6e:cf:f2:83:55:f3:1d:f0:
ed:5e:db:e7:01:f6:0b:ba:bb:28:03:b2:4c:06:3f:39:94:1b:
92:f6:ca:bc:bb:22:95:ca:94:67:38:dd:b4:ef:92:be:1a:e2:
7c:62:bf:62:75:bd:ee:2c:21:5f:49:b2:b5:53:87:74:00:49:
9f:58:7d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:38:49 2026 by rpki-client