Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35392e35382e302f32342d3234203d3e20323036363936.roa
File: 322e35392e35382e302f32342d3234203d3e20323036363936.roa (raw, json)
Hash identifier: W7mcvbby1T7XLZNMiEjmJHNvu2dEpkO/lLY28OdV+yM=
Subject key identifier: 71:EF:A4:2B:34:5C:BF:1D:E0:E2:6C:16:66:7A:8D:63:D3:4E:20:2D
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 101041387A4357BD36C07F1296D4AB616A9D07F8
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35392e35382e302f32342d3234203d3e20323036363936.roa
Signing time: Tue 16 Jun 2026 08:47:36 +0000
ROA not before: Tue 16 Jun 2026 08:42:36 +0000
ROA not after: Tue 15 Jun 2027 08:47:36 +0000
asID: 206696
IP address blocks: 2.59.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:10:41:38:7a:43:57:bd:36:c0:7f:12:96:d4:ab:61:6a:9d:07:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jun 16 08:42:36 2026 GMT
Not After : Jun 15 08:47:36 2027 GMT
Subject: CN=71EFA42B345CBF1DE0E26C16667A8D63D34E202D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:a5:bc:7c:9d:4d:d1:af:12:51:f9:e2:fd:
29:a9:60:00:2c:93:56:6a:c1:2f:63:7f:42:1f:a3:
52:43:5c:5e:bc:4f:e0:b8:10:f3:b6:79:5d:69:30:
d3:dc:70:47:70:66:d9:41:fc:d4:74:8f:88:9f:22:
83:b8:2c:4c:fb:a0:af:9e:68:b8:b2:d7:c0:a9:97:
8a:ad:05:54:04:5a:f9:4c:60:b1:a6:8b:e6:3e:a2:
28:26:53:e7:42:9e:2c:12:3c:a5:ce:6d:95:48:39:
af:26:44:af:22:a4:e1:66:27:71:75:6e:28:f7:aa:
98:e8:81:dc:2e:6a:58:d5:62:c8:d7:ad:57:c4:23:
a1:f0:e5:14:cc:04:6d:77:d9:43:1b:79:23:0b:77:
92:89:86:96:6e:97:ec:79:f7:38:c8:c8:31:7a:3c:
9b:2a:1c:b7:c2:3f:ff:05:c7:2f:92:31:d5:40:14:
22:40:e6:8b:48:b1:7a:57:4e:54:0c:01:23:32:0b:
99:5d:e1:54:12:2e:6c:91:d2:39:87:49:be:10:bf:
ef:ef:bc:c5:a3:6b:22:5a:ba:a6:f2:74:d0:af:8b:
52:df:b7:9d:94:71:89:7a:4f:72:c9:fe:b6:c2:aa:
33:97:1f:ef:d0:44:0a:9e:75:ab:55:27:5a:c2:cc:
d3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EF:A4:2B:34:5C:BF:1D:E0:E2:6C:16:66:7A:8D:63:D3:4E:20:2D
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35392e35382e302f32342d3234203d3e20323036363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.58.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:0a:4d:d6:a5:10:c9:d4:ad:cd:70:72:9f:87:f9:1e:f6:69:
45:13:4a:f8:b4:06:27:d2:77:8a:9a:2e:8c:4f:77:52:f2:a8:
7a:36:e1:8c:a7:34:a6:07:02:e3:88:02:57:d0:14:38:43:60:
03:34:49:e3:78:49:78:f3:12:06:26:64:fd:14:09:2c:7f:d3:
77:9b:ee:9f:25:6e:a4:f3:26:67:3f:1d:17:cc:72:0d:66:0b:
cf:31:0b:3a:cb:ad:2c:23:e8:a6:8a:f3:3f:38:a5:78:dc:7d:
14:5f:75:90:ac:d3:2f:ec:db:76:b7:e7:76:29:a7:19:51:d7:
7c:2a:13:c4:64:91:f5:38:5e:53:2c:ca:28:11:46:c7:50:b2:
ab:1c:f7:97:74:72:18:3d:b6:57:81:e2:87:ef:5a:2b:53:e3:
cd:c5:91:17:e8:f5:03:08:bf:42:cf:2c:31:72:44:5c:4e:e2:
c9:eb:37:48:5a:0d:ca:73:b3:93:4c:e2:90:60:0f:5d:30:f8:
43:f0:cf:c7:92:80:91:f7:77:7d:60:8c:77:2c:12:1d:88:40:
a6:63:14:d5:50:46:db:20:66:e3:49:e3:5d:42:51:b4:15:2d:
ee:bb:f2:ec:11:f1:18:53:d3:04:89:e1:b0:00:0c:3d:e5:ea:
74:f2:02:84
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUEBBBOHpDV702wH8SltSrYWqdB/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNjA2MTYwODQyMzZaFw0yNzA2MTUwODQ3MzZaMDMxMTAvBgNV
BAMTKDcxRUZBNDJCMzQ1Q0JGMURFMEUyNkMxNjY2N0E4RDYzRDM0RTIwMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/PKW8fJ1N0a8SUfni/SmpYAAs
k1ZqwS9jf0Ifo1JDXF68T+C4EPO2eV1pMNPccEdwZtlB/NR0j4ifIoO4LEz7oK+e
aLiy18Cpl4qtBVQEWvlMYLGmi+Y+oigmU+dCniwSPKXObZVIOa8mRK8ipOFmJ3F1
bij3qpjogdwualjVYsjXrVfEI6Hw5RTMBG132UMbeSMLd5KJhpZul+x59zjIyDF6
PJsqHLfCP/8Fxy+SMdVAFCJA5otIsXpXTlQMASMyC5ld4VQSLmyR0jmHSb4Qv+/v
vMWjayJauqbydNCvi1Lft52UcYl6T3LJ/rbCqjOXH+/QRAqedatVJ1rCzNOtAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUce+kKzRcvx3g4mwWZnqNY9NOIC0wHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzIyZTM1MzkyZTM1MzgyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzYzNjM5MzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAACOzow
DQYJKoZIhvcNAQELBQADggEBAA4KTdalEMnUrc1wcp+H+R72aUUTSvi0BifSd4qa
LoxPd1LyqHo24YynNKYHAuOIAlfQFDhDYAM0SeN4SXjzEgYmZP0UCSx/03eb7p8l
bqTzJmc/HRfMcg1mC88xCzrLrSwj6KaK8z84pXjcfRRfdZCs0y/s23a353YppxlR
13wqE8RkkfU4XlMsyigRRsdQsqsc95d0chg9tleB4ofvWitT483FkRfo9QMIv0LP
LDFyRFxO4snrN0haDcpzs5NM4pBgD10w+EPwz8eSgJH3d31gjHcsEh2IQKZjFNVQ
RtsgZuNJ411CUbQVLe678uwR8RhT0wSJ4bAADD3l6nTyAoQ=
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:07:27 2026 by rpki-client