Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e20383334.roa
File: 3138352e3137322e3137342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: EIE7Ji0O9A3J7CA5I37DF+WQeYRP5M/RKPJ0r7iI0wI=
Subject key identifier: E5:6E:55:0D:BA:59:91:62:AF:CB:31:69:0D:09:1B:8A:1B:DA:56:04
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 69AD1289EDE82B4FC4B59061506C4FB8BB27A5FB
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e20383334.roa
Signing time: Tue 19 May 2026 04:15:03 +0000
ROA not before: Tue 19 May 2026 04:10:03 +0000
ROA not after: Tue 18 May 2027 04:15:03 +0000
asID: 834
IP address blocks: 185.172.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ad:12:89:ed:e8:2b:4f:c4:b5:90:61:50:6c:4f:b8:bb:27:a5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: May 19 04:10:03 2026 GMT
Not After : May 18 04:15:03 2027 GMT
Subject: CN=E56E550DBA599162AFCB31690D091B8A1BDA5604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:46:1b:12:f8:ef:c3:5f:aa:3c:c7:b9:29:
5f:e1:8b:47:7b:3d:04:a4:94:00:8f:ce:ea:a5:2d:
b0:cb:e5:25:d2:89:05:e1:05:c0:bc:3d:3e:71:07:
f6:c9:d9:ae:a3:9c:17:0a:bb:78:40:82:a2:86:49:
84:a1:72:84:92:4d:b8:42:8d:83:9f:59:97:ec:5c:
59:5b:f9:66:3f:d5:fd:4e:34:0b:44:9f:7e:25:dc:
a5:80:39:c2:20:6f:55:23:93:32:e8:33:f7:73:f2:
9b:f8:47:4d:8a:59:3d:79:49:a3:30:68:c8:e9:ea:
59:12:3b:ad:82:78:61:3d:42:8c:50:15:8a:2a:a5:
99:5a:6b:65:6d:0a:86:7c:4f:18:45:cb:b1:bb:16:
56:27:54:34:97:b6:76:18:6d:a5:4f:67:1a:c7:4c:
e6:77:ea:c3:15:2d:d8:7f:29:d9:99:50:0f:fc:3a:
d5:de:8c:fa:81:e1:ca:28:4a:41:37:87:ec:57:04:
6c:bf:a9:f4:d8:bf:44:a5:d8:19:a1:ce:b0:5b:12:
c9:b2:c4:3f:73:5a:d1:5b:5f:54:2b:25:04:77:eb:
cd:79:00:9b:ac:cb:a0:e9:5b:9c:da:a1:7e:e9:31:
47:66:0e:f2:b9:89:e4:32:62:da:d6:06:6e:ca:0a:
69:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6E:55:0D:BA:59:91:62:AF:CB:31:69:0D:09:1B:8A:1B:DA:56:04
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.174.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:09:e0:64:a4:c5:b8:8c:f8:70:fa:f5:74:47:2c:c3:3a:bc:
77:2d:29:67:d6:3c:d7:ba:37:61:a9:3b:5d:a6:19:4f:c9:ab:
f6:0d:c8:3d:14:18:75:37:7d:9c:d3:9d:78:45:61:a5:06:d4:
7d:58:c2:fd:bc:10:3e:66:5c:b3:fb:d8:9c:d8:b1:83:c2:d6:
2a:ee:bf:d5:56:fd:38:30:72:89:db:17:66:80:f3:63:20:5a:
52:0c:2b:81:bf:ac:ff:0d:64:5d:45:d2:22:7f:7e:83:ae:7d:
e6:0c:1c:f5:29:5e:0e:46:a0:0e:9a:9b:fb:6f:5b:15:0f:62:
59:77:3b:3c:08:76:02:6e:17:d2:39:4c:88:ec:55:67:cb:76:
7d:97:12:5d:ed:cc:05:d8:47:fd:46:aa:ad:a8:b2:0a:d7:f3:
e7:35:5d:cc:97:ed:ae:ad:fb:31:80:52:94:ee:d5:f2:64:11:
25:14:01:d2:da:80:96:6c:9c:e4:78:12:70:71:0a:a6:d5:ef:
5c:d5:e7:f2:b0:06:d6:ed:d6:f3:6c:7c:49:4c:f7:13:f5:65:
e1:d7:54:ff:e1:07:48:22:97:db:be:2c:67:bc:23:f8:16:39:
74:86:be:4a:c8:9f:43:bd:2d:b5:51:29:26:c4:f3:13:5d:1a:
5f:da:51:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:15:04 2026 by rpki-client