Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39392e302f32342d3234203d3e20323135363539.roa
File: 34352e3133372e39392e302f32342d3234203d3e20323135363539.roa (raw, json)
Hash identifier: W3QG5PUgS2Tv8C2R+rToZhPPRIqfx9x33sRdZSW2w+Y=
Subject key identifier: FA:B9:AA:65:72:5F:8C:49:78:D6:1C:6B:70:50:AB:EE:C0:68:77:92
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 59034F981616665791F1A41499411DFF2A76FD24
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39392e302f32342d3234203d3e20323135363539.roa
Signing time: Thu 21 May 2026 15:35:13 +0000
ROA not before: Thu 21 May 2026 15:30:13 +0000
ROA not after: Thu 20 May 2027 15:35:13 +0000
asID: 215659
IP address blocks: 45.137.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:03:4f:98:16:16:66:57:91:f1:a4:14:99:41:1d:ff:2a:76:fd:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: May 21 15:30:13 2026 GMT
Not After : May 20 15:35:13 2027 GMT
Subject: CN=FAB9AA65725F8C4978D61C6B7050ABEEC0687792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dd:92:eb:2a:30:fe:eb:c0:37:c6:e5:ee:76:
3e:e3:7c:a4:e6:b8:d0:ec:11:56:c9:c8:55:14:87:
22:d4:75:99:23:7f:03:31:cd:d0:f5:3f:de:4c:57:
17:f8:aa:99:b5:94:9b:95:d4:67:d0:f9:50:28:33:
73:5d:0b:33:21:d2:86:a0:6c:57:e3:38:71:1a:76:
a9:48:c4:fa:ed:29:06:fd:93:d5:05:32:a6:14:32:
2f:4a:66:1a:7d:25:52:31:ec:3d:3d:45:8d:41:46:
26:05:b6:41:d5:c5:41:c5:90:df:32:12:55:91:41:
10:7e:07:3e:c3:97:4e:82:16:b6:b3:66:db:ea:e4:
35:3e:ff:ea:2a:8f:74:59:ab:20:b5:e7:7a:21:5b:
d9:1d:7b:f9:90:bf:b7:76:8f:c4:b5:07:1d:a7:59:
49:79:35:e2:e7:0f:e0:55:cc:3b:b0:99:8f:fe:20:
05:04:d9:40:23:ae:e4:35:2e:2f:d6:a9:7c:fa:d3:
04:d7:82:39:63:5d:59:1a:b7:16:30:53:2c:da:e6:
bd:a5:f8:f2:10:a9:86:2b:00:2d:0b:43:06:25:d5:
1d:ce:9a:96:54:20:59:ea:d2:1d:c0:c3:0a:a5:0a:
d7:33:fb:cb:d4:96:6d:f3:78:10:2d:8b:db:7e:07:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B9:AA:65:72:5F:8C:49:78:D6:1C:6B:70:50:AB:EE:C0:68:77:92
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39392e302f32342d3234203d3e20323135363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.99.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a0:21:09:c2:69:18:35:59:24:2c:c5:82:d3:5c:29:6a:4d:
d5:cb:36:81:61:94:1d:a7:88:76:7f:4e:7d:1d:5a:fe:f9:d7:
c9:8d:ad:43:e6:af:28:12:3c:f1:16:b1:f1:ae:43:09:a8:f4:
6c:ef:e9:e7:53:c6:c5:5d:26:83:45:b7:ec:13:09:b0:5d:dc:
21:9b:46:64:0a:0a:fa:9c:2c:d8:89:60:15:83:6c:bc:fe:43:
5d:69:03:c6:e5:56:33:6a:2a:cd:1c:fa:89:d9:1e:38:e3:2c:
35:52:1d:a0:37:4d:db:ab:48:59:34:0f:29:aa:d8:98:d1:a8:
e8:fc:fd:b5:b6:b4:55:0e:5e:6a:94:41:cf:6a:7b:8d:7e:6f:
54:fe:74:45:cb:c9:31:90:f9:b4:fd:8e:5b:14:bd:89:52:7e:
59:e1:e5:87:57:b9:ae:c6:9a:75:93:c3:39:bf:39:f9:53:ec:
f1:ad:a9:f0:e7:d7:e3:a4:e3:83:d0:24:ea:9e:d7:7b:04:66:
49:17:da:dc:40:22:ed:95:17:d6:53:90:3f:1f:30:ce:ac:b6:
45:1c:f0:b0:e7:91:b3:0c:8e:a6:3f:3b:17:3d:a8:74:bd:bf:
9d:2f:c4:91:12:85:63:4a:09:eb:d2:86:64:21:b3:b4:d5:65:
e7:39:6f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:31 2026 by rpki-client