Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37392e302f32342d3234203d3e203433393639.roa
File: 3137312e32322e37392e302f32342d3234203d3e203433393639.roa (raw, json)
Hash identifier: J3EvJt/l0D1rPtXQvKpVwCsUWfAHV17Z9PkXsm1ZPqE=
Subject key identifier: 92:9C:B7:F6:D2:3B:F1:C6:D7:D8:32:9A:7F:EF:A6:83:27:AB:37:DF
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 46D2E1CB4B021CDB2D8397286ABA02E87FD5CB0C
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37392e302f32342d3234203d3e203433393639.roa
Signing time: Fri 09 Oct 2026 19:45:41 +0000
ROA not before: Fri 09 Oct 2026 19:40:41 +0000
ROA not after: Fri 08 Oct 2027 19:45:41 +0000
asID: 43969
IP address blocks: 171.22.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:d2:e1:cb:4b:02:1c:db:2d:83:97:28:6a:ba:02:e8:7f:d5:cb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Oct 9 19:40:41 2026 GMT
Not After : Oct 8 19:45:41 2027 GMT
Subject: CN=929CB7F6D23BF1C6D7D8329A7FEFA68327AB37DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:96:56:e5:cf:f8:20:a4:75:d3:26:46:44:f4:
e0:f1:51:c8:2a:0a:b5:f0:28:ac:b1:4c:f2:85:65:
ba:6a:9c:18:64:99:b2:bb:4a:cc:1b:da:69:df:69:
50:cd:2f:f0:e5:f6:4e:68:a5:a7:a0:27:68:74:46:
d3:3f:30:d0:d8:ed:ec:71:e5:51:b1:fe:d4:e7:50:
cb:a9:5f:c2:52:28:a9:95:06:8c:b0:62:ce:f6:8b:
b1:d3:f0:42:0e:29:37:84:b5:9d:b3:83:28:17:e6:
22:59:2c:45:cc:77:87:b3:0c:87:ef:58:b1:c0:2f:
56:55:99:13:1f:04:4f:29:37:f1:92:ac:1e:18:fc:
a8:46:be:dc:8d:fa:00:9e:7b:34:90:74:bc:7a:66:
4f:d5:92:0a:7a:4e:b1:82:d2:b9:ac:e3:39:b1:ee:
6b:c4:16:8f:4f:a7:10:ae:18:e3:28:a0:27:38:9d:
61:98:a8:b9:8e:6a:4a:33:fb:05:09:58:b5:07:55:
49:69:ea:17:47:df:f3:57:ec:0a:d5:6b:28:1c:08:
91:06:77:f8:8c:7f:b0:50:b7:5b:d2:08:ed:40:bb:
6f:b2:a7:d2:c8:f6:99:9c:43:54:e5:df:5f:17:56:
d3:e7:8f:87:93:74:df:1d:8b:e9:ae:c4:0c:4b:c0:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9C:B7:F6:D2:3B:F1:C6:D7:D8:32:9A:7F:EF:A6:83:27:AB:37:DF
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37392e302f32342d3234203d3e203433393639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.79.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:78:02:0f:be:a8:e1:81:6f:eb:48:17:c7:03:0f:14:b2:ce:
58:15:a9:60:14:be:17:88:86:0f:e8:98:3b:e2:d2:f5:cb:49:
57:7e:80:1f:74:ae:6c:d5:2d:60:39:65:27:d1:48:30:f8:e9:
a4:f0:48:04:b1:54:df:62:16:d6:8a:0b:ee:74:ff:48:99:8e:
ce:c9:e6:c8:af:3c:77:6b:b2:00:13:66:8d:2d:97:e9:f7:9e:
1f:29:9d:09:e3:4c:b5:d3:38:33:83:81:f2:0f:2b:9d:24:6f:
dd:45:ee:69:20:51:71:4c:da:64:a6:43:a7:78:7b:63:7c:3d:
5d:da:5c:d2:db:f6:d3:c5:d8:2c:00:e9:a6:48:86:6f:3f:38:
a6:3f:8c:76:97:77:e5:a6:ec:f7:44:42:be:5d:a2:eb:6d:8a:
a4:6c:14:27:ac:79:c1:8b:4b:33:10:e0:4c:d6:93:89:dc:d6:
42:2f:a2:83:b4:e8:13:62:57:0f:0f:5e:e8:76:de:43:1d:d3:
58:e4:1f:35:17:cb:29:59:08:f6:4f:a4:1a:97:14:7f:0c:29:
ff:6a:b6:34:fc:f3:ed:ec:14:4d:17:3e:1a:e6:75:f7:0b:f4:
c9:82:c2:5a:78:6f:da:f0:54:60:e1:86:3d:a1:ce:f0:ea:df:
43:32:a1:0c
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIURtLhy0sCHNstg5coaroC6H/VywwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNjEwMDkxOTQwNDFaFw0yNzEwMDgxOTQ1NDFaMDMxMTAvBgNV
BAMTKDkyOUNCN0Y2RDIzQkYxQzZEN0Q4MzI5QTdGRUZBNjgzMjdBQjM3REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHllblz/ggpHXTJkZE9ODxUcgq
CrXwKKyxTPKFZbpqnBhkmbK7Sswb2mnfaVDNL/Dl9k5opaegJ2h0RtM/MNDY7exx
5VGx/tTnUMupX8JSKKmVBoywYs72i7HT8EIOKTeEtZ2zgygX5iJZLEXMd4ezDIfv
WLHAL1ZVmRMfBE8pN/GSrB4Y/KhGvtyN+gCeezSQdLx6Zk/Vkgp6TrGC0rms4zmx
7mvEFo9PpxCuGOMooCc4nWGYqLmOakoz+wUJWLUHVUlp6hdH3/NX7ArVaygcCJEG
d/iMf7BQt1vSCO1Au2+yp9LI9pmcQ1Tl318XVtPnj4eTdN8di+muxAxLwC7nAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUkpy39tI78cbX2DKaf++mgyerN98wHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzEzNzMxMmUzMjMyMmUzNzM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMzM5MzYzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKsW
TzANBgkqhkiG9w0BAQsFAAOCAQEAO3gCD76o4YFv60gXxwMPFLLOWBWpYBS+F4iG
D+iYO+LS9ctJV36AH3SubNUtYDllJ9FIMPjppPBIBLFU32IW1ooL7nT/SJmOzsnm
yK88d2uyABNmjS2X6feeHymdCeNMtdM4M4OB8g8rnSRv3UXuaSBRcUzaZKZDp3h7
Y3w9Xdpc0tv208XYLADppkiGbz84pj+Mdpd35abs90RCvl2i622KpGwUJ6x5wYtL
MxDgTNaTidzWQi+ig7ToE2JXDw9e6HbeQx3TWOQfNRfLKVkI9k+kGpcUfwwp/2q2
NPzz7ewUTRc+GuZ19wv0yYLCWnhv2vBUYOGGPaHO8OrfQzKhDA==
-----END CERTIFICATE-----
Generated at Thu Oct 22 17:54:10 2026 by rpki-client