
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139302e302f32342d3234203d3e20313337353137.roa
File: 352e3232362e3139302e302f32342d3234203d3e20313337353137.roa (raw, json)
Hash identifier: dSlf5pGXbGsGZE5EEAyZeM/B2DRLa5hIPls1KRkA5S4=
Subject key identifier: 04:16:65:06:57:9C:D1:AA:AA:12:73:26:30:E3:B8:9C:F1:B4:2D:A5
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 4E6B676901B63A7F1C6495FCB0B4D7034077E8EF
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139302e302f32342d3234203d3e20313337353137.roa
Signing time: Tue 09 Sep 2025 06:32:40 +0000
ROA not before: Tue 09 Sep 2025 06:27:40 +0000
ROA not after: Tue 08 Sep 2026 06:32:40 +0000
asID: 137517
IP address blocks: 5.226.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:6b:67:69:01:b6:3a:7f:1c:64:95:fc:b0:b4:d7:03:40:77:e8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Sep 9 06:27:40 2025 GMT
Not After : Sep 8 06:32:40 2026 GMT
Subject: CN=04166506579CD1AAAA12732630E3B89CF1B42DA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4b:94:7e:f9:97:2d:38:e0:aa:4b:6c:0d:c5:
d5:ed:67:f6:72:11:c0:97:ef:ce:fb:e4:3c:c6:e4:
1a:63:45:41:98:9e:b4:3e:68:98:7a:7c:c5:95:3f:
43:33:1a:f4:52:8f:a2:b7:23:0b:36:2c:ef:18:a0:
db:7a:8d:84:27:a7:bd:0c:39:21:be:c1:10:a7:17:
d3:5e:91:ec:be:f2:b4:60:ec:38:c6:94:8c:f2:1f:
dc:1b:5b:b9:81:49:d6:12:55:8a:3c:a8:f1:e0:66:
eb:c0:fa:e1:3f:1d:9b:ef:a4:a8:ad:37:85:c0:aa:
ca:9f:74:eb:c0:4d:d1:9e:a7:0e:84:b7:fd:b4:3a:
55:fd:bf:14:35:dd:b8:27:66:79:8f:bc:c8:9a:0c:
34:e8:39:33:99:ec:d7:64:1a:cc:ed:7f:37:54:bb:
39:c9:8b:2d:9a:64:08:1b:ac:e7:ef:e7:d1:09:28:
e8:ad:6e:63:75:81:93:a1:42:7a:34:5a:ea:4a:04:
69:68:47:97:34:c1:62:e9:85:cf:ad:9c:97:8a:4f:
9f:17:fa:46:e3:9d:b0:51:28:e5:e6:2f:f0:be:24:
d4:29:11:90:25:2a:2c:22:d2:a6:49:94:0c:a8:09:
cc:34:b4:cd:0b:d1:f0:21:67:38:ff:eb:a9:2f:79:
cf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:16:65:06:57:9C:D1:AA:AA:12:73:26:30:E3:B8:9C:F1:B4:2D:A5
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139302e302f32342d3234203d3e20313337353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.190.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:56:0a:bc:95:0a:8f:71:27:ec:2d:2a:80:a5:84:37:e8:1a:
38:20:b0:f9:d6:af:67:1e:08:95:e9:0b:5f:c8:8d:65:3b:60:
0a:d6:94:25:76:01:60:66:79:70:d5:97:ef:0e:5e:03:b4:c7:
9a:14:3d:e3:7f:8f:db:7f:94:62:d3:6a:76:91:85:10:ee:23:
dd:fd:f5:c1:86:5a:70:c8:3b:eb:a5:08:2d:4d:30:62:6a:12:
95:d7:79:65:d0:9e:b4:bc:35:4b:db:d2:6e:14:26:5e:4c:01:
16:19:f6:6f:61:07:e7:41:b6:cb:f6:50:00:c6:01:ff:a6:ce:
2e:af:3c:6d:01:45:32:2a:59:44:6e:15:20:00:f1:5f:57:9f:
52:2d:ed:c5:8f:0e:30:ea:e1:21:05:95:ae:6f:00:19:91:50:
b6:49:1c:56:e4:2b:18:5d:f0:25:61:56:84:f1:fc:e2:b2:5f:
c9:f5:ee:6c:37:a1:90:13:66:44:38:2b:0c:9a:e4:1b:ee:04:
9a:07:76:56:64:f5:64:fc:52:93:5c:37:b8:11:c7:fa:92:e1:
9d:70:a6:bc:28:9e:bf:0a:a6:d3:81:de:2e:f0:fd:c3:50:0f:
11:fe:e5:62:2b:71:c3:ba:61:94:a1:ad:8f:23:d6:c0:b9:45:
5a:5f:1c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:20:37 2025 by rpki-client