Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37382e302f32342d3234203d3e20313532363732.roa
File: 3137312e32322e37382e302f32342d3234203d3e20313532363732.roa (raw, json)
Hash identifier: 2OSpxWv5QBZrOVfJSvXTfcxVViX54zaPCRy37fp8J0w=
Subject key identifier: A5:5C:4D:2C:BA:33:96:79:E0:AC:4E:A6:DA:A5:F5:01:F0:65:DA:05
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 6E5395594DF8C1B291861D93896C40E15C307161
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37382e302f32342d3234203d3e20313532363732.roa
Signing time: Mon 01 Jun 2026 12:47:20 +0000
ROA not before: Mon 01 Jun 2026 12:42:20 +0000
ROA not after: Mon 31 May 2027 12:47:20 +0000
asID: 152672
IP address blocks: 171.22.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:53:95:59:4d:f8:c1:b2:91:86:1d:93:89:6c:40:e1:5c:30:71:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jun 1 12:42:20 2026 GMT
Not After : May 31 12:47:20 2027 GMT
Subject: CN=A55C4D2CBA339679E0AC4EA6DAA5F501F065DA05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:68:c9:47:22:3b:86:5a:bd:62:08:64:38:c7:
fb:15:22:81:5d:f3:e7:6b:75:0f:aa:3a:26:68:19:
32:c0:33:9a:af:d3:a0:d8:8c:7c:91:a8:15:47:8e:
ca:69:a0:39:91:79:c8:ad:64:0b:05:25:7d:08:49:
c0:a7:78:83:93:20:3d:68:f4:ee:5b:65:fb:3f:a0:
3b:16:99:43:38:f3:07:09:94:61:9d:7f:44:46:20:
73:2f:67:b5:45:d4:af:54:69:3c:65:94:62:4c:7e:
f5:0a:50:e4:8d:87:24:2a:64:d9:a2:4f:0f:c1:2c:
dd:46:eb:62:1c:dc:96:8b:18:6e:77:b6:32:57:5e:
63:0f:fa:ed:d0:e4:03:50:4a:78:df:b1:48:9f:14:
a5:15:c4:19:e0:16:38:33:b1:5c:52:b2:a0:08:c1:
71:dc:de:8a:07:10:94:41:cb:30:47:51:9a:af:55:
2c:f2:d2:12:6a:44:53:56:d9:c5:00:7b:46:51:37:
c7:5b:56:01:5e:da:e7:ab:ce:c7:d1:42:1c:01:4f:
b8:6e:31:9d:27:a6:70:8a:4c:57:5c:71:12:8b:8e:
b0:4a:97:a2:f8:f7:7a:96:f8:fc:96:86:a3:94:ab:
2a:6e:cb:19:67:14:25:fe:f6:2e:89:b3:1c:d7:15:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5C:4D:2C:BA:33:96:79:E0:AC:4E:A6:DA:A5:F5:01:F0:65:DA:05
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37382e302f32342d3234203d3e20313532363732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.78.0/24
Signature Algorithm: sha256WithRSAEncryption
42:5d:74:f8:67:d4:5a:6e:87:c9:b7:28:9d:57:f3:a5:19:7f:
03:19:63:29:7d:69:13:46:83:5b:99:5a:8a:10:86:43:8b:64:
e8:bc:20:e5:d7:b1:c1:23:7e:36:01:6e:7a:d7:13:d9:5a:eb:
1d:e8:18:eb:d1:cb:6b:8e:b7:35:7b:92:73:bc:56:7b:50:ef:
d6:91:b3:6e:00:c1:63:9f:dc:d7:8c:fd:19:b8:8f:60:11:4c:
06:9d:58:a4:65:19:21:76:7e:29:96:67:04:cf:cb:d9:fa:93:
a3:dc:ba:7d:1d:27:9e:3f:6b:77:a4:05:b4:7b:fe:3e:b9:24:
7a:aa:36:21:b5:80:8c:22:12:ee:29:93:90:30:d9:49:d3:d1:
d4:3e:96:48:37:0e:5b:de:4c:ea:57:5e:41:b9:ba:b1:15:6f:
88:3d:16:d0:8d:c5:2e:24:02:7e:8c:6c:39:e6:6c:dd:73:11:
14:c1:93:28:bc:0d:02:8f:27:90:5f:c8:13:90:43:bb:5e:c6:
a6:df:20:6e:69:e8:8e:31:56:34:37:c0:8f:45:f7:a5:7e:c8:
63:58:1e:95:dc:2f:4a:5d:8d:f1:71:67:e6:e9:0d:40:1b:9b:
90:d2:2e:03:29:9e:7a:0e:37:52:aa:db:f8:c6:7d:70:5a:c5:
4c:9b:d4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:10:35 2026 by rpki-client