Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138352e302f32342d3234203d3e20323131333733.roa
File: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (raw, json)
Hash identifier: tIeHJEF41zbDRQ8KbMBp/GsLGj1RgNxno+RElBJQNMw=
Subject key identifier: AB:43:C2:93:3C:18:D6:BE:7F:69:A6:94:CE:7C:50:17:F2:F1:18:78
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 020CA6486102988D7AF1794ACD49F62EC7713229
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138352e302f32342d3234203d3e20323131333733.roa
Signing time: Fri 08 May 2026 13:47:11 +0000
ROA not before: Fri 08 May 2026 13:42:11 +0000
ROA not after: Fri 07 May 2027 13:47:11 +0000
asID: 211373
IP address blocks: 5.181.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:0c:a6:48:61:02:98:8d:7a:f1:79:4a:cd:49:f6:2e:c7:71:32:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: May 8 13:42:11 2026 GMT
Not After : May 7 13:47:11 2027 GMT
Subject: CN=AB43C2933C18D6BE7F69A694CE7C5017F2F11878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:46:8d:f2:57:77:d3:de:f3:b6:a7:d7:06:c0:
46:c1:65:d5:bc:b7:76:e5:69:76:2c:48:92:c9:17:
2a:a5:cd:c3:a1:25:07:5c:c2:98:18:4a:1d:aa:84:
ec:08:3e:b0:36:be:ee:9a:20:c6:ee:ea:6e:dd:90:
ec:1d:ad:b8:54:da:7c:7d:a9:4f:05:dc:50:c9:05:
38:30:7d:f0:3b:97:3b:4d:7a:a3:9d:03:70:5e:58:
c3:a3:29:47:16:97:4b:50:b3:3d:ba:98:8c:03:e2:
42:7a:a2:a7:d2:ad:c5:1c:7d:2f:0a:32:1f:cb:b2:
b6:0f:bc:4c:20:f2:d6:d4:6d:bc:36:c7:a6:88:5f:
8a:fe:4b:ae:96:01:f8:d5:b5:fd:c2:48:82:90:40:
0a:5c:de:90:1c:41:f8:61:3f:dc:9f:16:f3:c0:4b:
5c:ba:3d:ed:14:d9:39:70:37:2c:cf:c3:61:e3:c1:
26:a4:c9:e7:ce:3d:b8:c3:22:23:0d:72:2c:0e:04:
0b:49:3a:4a:6c:d7:6a:5f:6a:13:a6:f2:ed:a4:d0:
23:7b:21:32:0b:85:22:c3:14:ab:28:fc:1d:2d:5b:
66:65:46:7a:cf:9e:1b:da:b2:00:1f:cf:3e:9e:83:
30:43:b2:6e:46:18:c6:7b:ff:5a:3b:a3:7e:c9:5a:
05:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:43:C2:93:3C:18:D6:BE:7F:69:A6:94:CE:7C:50:17:F2:F1:18:78
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138352e302f32342d3234203d3e20323131333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.185.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ea:24:4a:a5:51:0e:eb:39:3e:07:26:37:ba:f2:c8:a4:10:
89:37:05:a5:7b:6a:81:31:0c:19:2e:91:31:dd:88:00:46:93:
89:b3:94:66:71:f9:45:67:54:3b:3c:c5:8d:31:02:ee:73:63:
0c:eb:1c:0c:fa:e1:d2:89:72:08:5d:43:4a:a1:2e:98:81:07:
54:47:6e:cc:60:2f:51:68:0a:8e:d2:e5:aa:8a:9a:8d:eb:4f:
5d:d0:b2:c1:8d:59:19:c5:44:05:c7:78:5d:a9:d1:f6:6b:2f:
a2:1b:1c:0b:a6:d8:1e:3d:db:9b:fb:aa:6f:87:72:ff:3b:23:
63:35:50:72:eb:f8:d3:85:f3:45:1f:fe:13:51:ce:da:6d:1a:
d4:0e:2f:33:30:80:93:ed:a7:ff:62:e9:2d:93:59:22:3b:9f:
31:fc:9e:07:3c:1d:9d:d8:2a:57:56:3f:d1:32:27:36:38:74:
20:fd:01:7b:30:48:20:24:ec:1c:0a:a2:56:87:71:90:f7:71:
c8:f5:9f:e3:f3:01:b1:74:7d:25:4b:b7:1c:07:1f:ff:5c:b7:
9f:8e:ed:5d:4e:a9:65:12:31:9f:12:f5:60:d8:80:13:26:f3:
ef:d4:b7:a5:bb:af:65:dc:59:13:fc:36:0d:25:6a:65:69:b8:
d1:26:40:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:41 2026 by rpki-client