Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137342e302f32342d3234203d3e20323133363534.roa
File: 34352e38372e3137342e302f32342d3234203d3e20323133363534.roa (raw, json)
Hash identifier: zaOfqBMhbG+MZB0bgxq7RiRrkhWpraF+KUCaOI5/PVU=
Subject key identifier: AF:02:E9:57:AC:13:31:9F:9F:C0:C5:CD:F8:D9:7F:40:6F:3A:7E:C3
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 23636E5BA56977887ECD73030AAA08A45A1A03EB
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137342e302f32342d3234203d3e20323133363534.roa
Signing time: Fri 09 Oct 2026 15:49:36 +0000
ROA not before: Fri 09 Oct 2026 15:44:36 +0000
ROA not after: Fri 08 Oct 2027 15:49:36 +0000
asID: 213654
IP address blocks: 45.87.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:63:6e:5b:a5:69:77:88:7e:cd:73:03:0a:aa:08:a4:5a:1a:03:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Oct 9 15:44:36 2026 GMT
Not After : Oct 8 15:49:36 2027 GMT
Subject: CN=AF02E957AC13319F9FC0C5CDF8D97F406F3A7EC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:86:93:c6:b3:ce:0e:a8:22:4d:3b:f4:5a:
72:f6:fc:23:56:1b:cf:c8:ad:f3:ee:b7:63:c9:3f:
0e:96:08:3c:1a:cc:20:f4:a4:cb:97:fe:63:06:e2:
d9:18:20:f5:d8:51:67:23:60:8c:d0:98:4f:3a:e1:
f7:1a:6a:97:49:b9:5e:4e:ac:24:8a:31:29:47:90:
52:d3:80:5d:3c:74:53:59:ff:19:13:66:e5:af:ad:
54:ec:12:b4:5c:9e:b9:eb:12:7c:df:97:74:4d:7d:
a6:d5:65:e6:cf:1c:5f:c6:bb:b7:ba:f3:04:38:5b:
42:eb:ad:4c:c4:c1:c1:38:1b:fb:71:f7:d2:11:78:
df:eb:57:4a:02:7c:33:77:83:66:44:5c:e5:bc:41:
85:26:4c:e0:36:d3:8d:49:f2:de:89:2a:2e:3b:7b:
53:57:d4:08:99:22:34:47:06:b8:8b:80:2d:6d:42:
49:88:79:a0:d2:84:15:9e:9b:25:77:e0:57:04:65:
c5:f0:20:69:c6:d5:13:c0:4f:9c:5f:65:5f:aa:ea:
b2:60:e9:e9:c4:45:a6:26:50:8c:60:0a:fe:14:db:
16:e8:ac:54:36:33:06:01:08:a5:cb:01:52:80:64:
68:74:77:17:fe:12:88:ac:c9:56:30:6a:a5:55:1c:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:02:E9:57:AC:13:31:9F:9F:C0:C5:CD:F8:D9:7F:40:6F:3A:7E:C3
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137342e302f32342d3234203d3e20323133363534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.174.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:09:09:55:a7:2a:74:62:37:27:4d:ba:5a:b8:1f:08:29:f8:
68:c2:16:4c:10:30:61:10:fa:5a:8a:68:b7:93:d2:08:cd:d6:
ec:04:4a:94:7a:38:35:eb:03:55:3b:ac:91:b1:35:47:18:7e:
ce:28:b3:3d:29:91:b0:a5:81:07:97:bb:84:c2:33:57:29:c1:
d4:f1:5b:49:7e:8f:93:08:0d:c2:74:57:62:34:ea:7f:46:6d:
bb:79:e6:c4:ed:81:03:75:b3:29:a4:c8:3d:f7:38:72:56:f8:
47:5a:9a:4c:55:41:ca:42:c4:33:99:f7:a7:f5:ed:6e:e8:a6:
eb:b8:4e:ea:7f:68:fe:a0:e4:5f:5e:c3:54:29:bc:70:ef:7b:
74:cb:95:ce:24:54:09:ff:47:ed:3b:52:f2:a1:cc:18:66:e4:
a5:93:0a:e9:e7:a1:c1:8f:3e:8e:ae:a5:96:00:44:5e:93:b7:
0f:39:46:63:64:f4:4a:55:f2:0d:71:c8:09:3c:63:c9:36:ac:
f2:92:ce:51:6e:5f:44:3d:20:cb:5b:bf:82:b3:71:7e:9a:d6:
e8:53:a0:32:f0:06:71:e9:e7:dd:07:02:f9:0e:08:a2:78:91:
64:e9:33:eb:c7:b9:de:4e:e4:16:0c:16:e4:3a:33:4f:3b:34:
47:f6:d1:82
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUI2NuW6Vpd4h+zXMDCqoIpFoaA+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNjEwMDkxNTQ0MzZaFw0yNzEwMDgxNTQ5MzZaMDMxMTAvBgNV
BAMTKEFGMDJFOTU3QUMxMzMxOUY5RkMwQzVDREY4RDk3RjQwNkYzQTdFQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCebYaTxrPODqgiTTv0WnL2/CNW
G8/IrfPut2PJPw6WCDwazCD0pMuX/mMG4tkYIPXYUWcjYIzQmE864fcaapdJuV5O
rCSKMSlHkFLTgF08dFNZ/xkTZuWvrVTsErRcnrnrEnzfl3RNfabVZebPHF/Gu7e6
8wQ4W0LrrUzEwcE4G/tx99IReN/rV0oCfDN3g2ZEXOW8QYUmTOA2041J8t6JKi47
e1NX1AiZIjRHBriLgC1tQkmIeaDShBWemyV34FcEZcXwIGnG1RPAT5xfZV+q6rJg
6enERaYmUIxgCv4U2xborFQ2MwYBCKXLAVKAZGh0dxf+EoisyVYwaqVVHKcbAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUrwLpV6wTMZ+fwMXN+Nl/QG86fsMwHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzQzNTJlMzgzNzJlMzEzNzM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMzMzYzNTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LVeuMA0GCSqGSIb3DQEBCwUAA4IBAQDKCQlVpyp0YjcnTbpauB8IKfhowhZMEDBh
EPpaimi3k9IIzdbsBEqUejg16wNVO6yRsTVHGH7OKLM9KZGwpYEHl7uEwjNXKcHU
8VtJfo+TCA3CdFdiNOp/Rm27eebE7YEDdbMppMg99zhyVvhHWppMVUHKQsQzmfen
9e1u6KbruE7qf2j+oORfXsNUKbxw73t0y5XOJFQJ/0ftO1LyocwYZuSlkwrp56HB
jz6OrqWWAERek7cPOUZjZPRKVfINccgJPGPJNqzyks5Rbl9EPSDLW7+Cs3F+mtbo
U6Ay8AZx6efdBwL5DgiieJFk6TPrx7neTuQWDBbkOjNPOzRH9tGC
-----END CERTIFICATE-----
Generated at Sat Oct 24 11:14:39 2026 by rpki-client