Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137322e302f32342d3234203d3e20383334.roa
File: 34352e38372e3137322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Q2y9vQMU6Hf+BIEfrmzVcUaxZKFAO1LXa3GMu03W/Ug=
Subject key identifier: F7:B6:D6:5B:C9:59:14:A6:06:46:52:46:EB:25:E0:7A:50:07:3C:2B
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 1AE121000D235C6938899B56F772E1CEB93A8D76
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137322e302f32342d3234203d3e20383334.roa
Signing time: Sat 10 Oct 2026 18:49:40 +0000
ROA not before: Sat 10 Oct 2026 18:44:40 +0000
ROA not after: Sat 09 Oct 2027 18:49:40 +0000
asID: 834
IP address blocks: 45.87.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:e1:21:00:0d:23:5c:69:38:89:9b:56:f7:72:e1:ce:b9:3a:8d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Oct 10 18:44:40 2026 GMT
Not After : Oct 9 18:49:40 2027 GMT
Subject: CN=F7B6D65BC95914A606465246EB25E07A50073C2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:20:44:f0:31:d2:5f:71:c0:94:d4:a5:1c:
e0:12:73:8d:b0:13:a9:0e:74:84:4c:dc:5d:d5:5a:
2b:39:20:e1:e4:2c:ca:ba:6b:e0:87:bf:4c:55:35:
b7:18:cd:47:71:79:0c:bd:7f:b9:96:05:75:7a:0e:
e9:b2:ea:99:a8:e3:0d:d7:96:7c:49:fa:dc:38:61:
90:66:6b:05:76:65:63:9c:eb:84:5d:b5:38:23:5b:
0e:3f:65:d5:14:62:25:4a:87:3f:02:50:40:27:58:
be:c7:04:6c:52:7b:c5:51:c4:46:e3:60:7a:a5:fe:
60:e5:fd:98:59:21:7a:5a:5e:05:1a:ba:1d:6d:75:
7e:43:a6:f1:00:92:9c:ba:70:9b:16:20:d1:55:32:
b6:6d:0c:22:93:cb:2e:5e:09:7d:cb:b2:b8:29:86:
ac:aa:5f:7f:44:d3:ee:39:2c:cc:67:c4:27:b0:af:
4f:75:a2:12:95:10:7a:42:d6:74:72:36:75:53:32:
1b:fb:3e:a8:c4:55:50:2e:25:66:05:7f:a3:a0:f7:
de:db:ee:cd:5b:b1:dd:e2:0e:49:41:d2:79:3e:59:
a7:28:91:9f:6d:4a:55:d3:06:60:a6:da:77:e1:97:
4c:a9:f0:88:b0:d9:9b:2d:67:e1:fc:38:19:01:e1:
99:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B6:D6:5B:C9:59:14:A6:06:46:52:46:EB:25:E0:7A:50:07:3C:2B
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.172.0/24
Signature Algorithm: sha256WithRSAEncryption
80:95:73:c8:ce:2a:35:62:a5:61:82:e6:1d:f1:b5:c4:c3:ae:
c3:03:b7:ef:86:57:0e:71:00:69:fb:12:43:ec:b1:c3:e0:9f:
b6:b0:d8:16:33:ab:aa:da:2b:0a:00:67:97:fc:e3:35:4f:2e:
0e:69:fc:95:32:89:c2:f8:00:8b:7b:fb:96:f2:0f:b5:4b:4b:
c0:67:2b:bb:79:4f:64:4c:00:70:de:39:f1:6e:05:c8:09:ef:
92:bd:9f:a5:ad:9a:ac:57:3f:f2:ae:db:ed:5a:95:54:86:5d:
fc:2e:03:76:36:bd:0e:7d:7c:f1:de:b9:f3:24:ad:4d:28:28:
90:5c:37:57:1e:15:d1:4c:5c:bf:32:89:a4:4b:6d:00:11:1e:
fa:58:0e:9c:ff:d5:fc:59:f6:a1:3c:82:1f:92:97:73:3e:2d:
cb:f1:9d:84:0e:8c:55:95:6d:29:00:e1:14:8b:1e:dd:70:9f:
64:f1:63:ee:82:43:26:7c:d8:8a:b0:d0:b7:2f:70:04:02:e1:
2e:24:20:f6:11:5b:e6:1b:19:3c:bc:af:27:86:35:e7:84:b8:
ee:bd:c8:be:04:7a:48:2c:08:59:12:68:e3:f7:7f:5d:cd:d7:
38:a2:62:06:f1:7c:53:a6:ae:8b:34:69:ac:e7:97:aa:d3:2a:
d9:f9:8c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 21:02:40 2026 by rpki-client