Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138372e302f32342d3234203d3e20343031313633.roa
File: 352e3232362e3138372e302f32342d3234203d3e20343031313633.roa (raw, json)
Hash identifier: IbKgcdiPr/i2i2rIRhBWD6e5rrg19IAANUbUYzpzvAs=
Subject key identifier: E9:42:A1:D1:C5:66:04:24:73:72:4B:BB:DC:82:6C:0C:1D:2E:8F:E0
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 2EEA0052815A3CEAF2B932DFD3405C35D40725E3
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138372e302f32342d3234203d3e20343031313633.roa
Signing time: Mon 18 Aug 2025 18:42:35 +0000
ROA not before: Mon 18 Aug 2025 18:37:35 +0000
ROA not after: Mon 17 Aug 2026 18:42:35 +0000
asID: 401163
IP address blocks: 5.226.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ea:00:52:81:5a:3c:ea:f2:b9:32:df:d3:40:5c:35:d4:07:25:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Aug 18 18:37:35 2025 GMT
Not After : Aug 17 18:42:35 2026 GMT
Subject: CN=E942A1D1C566042473724BBBDC826C0C1D2E8FE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:01:13:b0:b6:26:34:07:ed:30:38:95:3e:
51:bf:7d:25:58:c9:2b:05:37:24:bf:35:a7:e3:e2:
36:b1:e0:31:60:0f:27:39:46:9f:89:3f:bc:c9:68:
be:ed:84:99:86:3d:34:a6:35:b8:17:94:0d:d6:b4:
b7:29:b3:4e:62:91:4a:4a:36:7b:02:55:ff:77:5a:
53:7e:77:50:03:dd:a7:77:fc:41:8a:77:a8:56:38:
0d:f9:3c:cb:49:0f:ad:15:6d:bc:44:84:ff:ba:87:
f0:af:64:6e:32:2c:7f:ee:c4:19:a1:57:f1:31:32:
87:71:e0:d8:f2:26:2b:5e:5c:90:6f:9b:a8:8f:63:
45:85:43:4d:38:5f:c0:c7:60:f4:8b:69:8b:35:1c:
69:85:3f:af:fa:50:b8:aa:0b:78:86:a3:65:ed:7a:
c8:c4:09:3c:a5:ba:5c:d1:8c:d5:a5:3d:e0:9b:e9:
21:6e:32:db:c6:8e:bb:31:1d:97:84:7a:ef:8e:62:
09:9b:53:ed:6e:de:dd:51:f8:79:68:8a:83:4c:7c:
2f:b4:ac:51:aa:32:34:ac:0a:b4:1b:be:a5:8a:8c:
40:d1:7e:61:2b:e4:b3:4d:4d:97:34:57:fb:57:ea:
00:23:31:af:4d:d6:63:f3:fa:0b:ed:bb:da:b9:e1:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:42:A1:D1:C5:66:04:24:73:72:4B:BB:DC:82:6C:0C:1D:2E:8F:E0
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138372e302f32342d3234203d3e20343031313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.187.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:4d:f4:b6:88:22:26:92:21:99:e1:1d:27:96:9d:55:4e:69:
17:fa:59:1b:2b:fa:dc:c3:dc:18:90:77:5f:de:25:e2:70:0f:
1f:03:e4:19:07:76:6a:4f:71:4c:ed:aa:70:48:a7:96:39:9f:
32:cc:3d:36:77:37:00:11:71:7e:e2:42:2b:df:40:ed:c4:e3:
b0:16:7e:0d:39:e9:ce:73:5e:6c:7a:b0:72:75:08:78:a3:83:
c1:8b:73:70:58:8f:5c:80:9d:84:4e:27:c1:7d:7a:1a:eb:38:
74:cc:ac:21:b2:26:01:35:ce:1d:21:d2:d1:66:95:70:c5:0f:
fc:7e:f7:11:06:a8:36:1c:a9:9d:cf:61:e1:bb:d2:23:b2:75:
d5:61:30:16:83:a9:39:f7:ba:92:8d:da:18:01:e9:bf:44:e9:
db:2a:07:b0:b8:1a:40:7a:37:4c:2e:aa:1b:89:e4:92:89:b5:
19:23:b2:72:55:ed:49:da:38:54:3b:8c:4a:61:7b:da:b5:d0:
7c:85:28:10:ee:0b:6b:6e:db:d6:96:94:7e:24:b1:1c:80:5a:
d7:2c:9c:c9:3b:c6:7c:f5:a6:95:0f:07:35:a9:44:20:79:08:
3a:8a:cb:0b:7b:49:2f:d2:b2:54:39:61:fa:a8:a1:50:f8:2b:
fc:8e:7c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:30:39 2025 by rpki-client