Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137342e302f32342d3234203d3e20323133363534.roa
File: 34352e38372e3137342e302f32342d3234203d3e20323133363534.roa (raw, json)
Hash identifier: eyDeMHXNZiIIcPxwNJdCPIezwM3d07d1cU/qMCFenv8=
Subject key identifier: F1:5E:5C:D0:97:BF:23:BB:A2:CC:ED:34:AC:F2:6F:23:51:7C:88:BF
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 65CFF3ED86B7F47A5E621F1A820A90CC932DA897
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137342e302f32342d3234203d3e20323133363534.roa
Signing time: Fri 07 Nov 2025 15:43:14 +0000
ROA not before: Fri 07 Nov 2025 15:38:14 +0000
ROA not after: Fri 06 Nov 2026 15:43:14 +0000
asID: 213654
IP address blocks: 45.87.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Nov 2025 12:22:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:cf:f3:ed:86:b7:f4:7a:5e:62:1f:1a:82:0a:90:cc:93:2d:a8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Nov 7 15:38:14 2025 GMT
Not After : Nov 6 15:43:14 2026 GMT
Subject: CN=F15E5CD097BF23BBA2CCED34ACF26F23517C88BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:84:6d:c4:64:82:1f:de:18:b6:df:42:c5:9c:
ae:34:11:cd:fb:44:fa:b6:46:62:fb:b7:5e:b0:e4:
1e:38:a8:8f:8f:0d:22:cf:c6:7b:01:f8:7d:c8:27:
be:be:ba:d5:8b:6d:7d:2a:d7:4a:b5:4c:86:2c:8e:
73:ba:77:fe:9f:c7:a8:19:74:4f:cb:83:66:01:46:
5b:52:a4:99:89:d2:48:91:50:b5:69:e9:2d:3b:7d:
5a:d8:6f:1f:cb:c6:88:b9:12:29:1a:9f:82:0b:88:
d2:29:e6:8d:8d:98:20:b1:7d:2b:b0:55:12:04:00:
8f:8c:59:ed:a8:b1:a9:8b:2c:f5:25:12:17:3e:eb:
d3:dd:61:7e:bd:d3:ea:6a:93:27:f7:d4:ba:8d:bf:
37:9c:7c:67:40:25:35:43:23:4c:1e:ae:e0:b2:3b:
1c:ec:a8:48:56:04:6d:13:7c:a6:4f:b2:96:f3:9e:
2e:02:d1:c4:a9:59:ab:dc:88:46:12:79:c3:7f:c3:
fc:0d:5a:27:81:c7:18:7e:ef:92:95:0c:8a:60:5e:
74:50:b8:15:c0:c0:ea:c4:3f:9b:42:f9:fb:1d:bd:
21:48:9d:ca:e8:6c:89:bf:37:c4:7f:04:94:a9:aa:
f1:18:52:52:00:07:fa:0f:5f:71:0c:8b:3c:10:08:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5E:5C:D0:97:BF:23:BB:A2:CC:ED:34:AC:F2:6F:23:51:7C:88:BF
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137342e302f32342d3234203d3e20323133363534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.174.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:b8:f0:b9:62:0a:19:e7:34:2c:81:f2:af:c2:4f:62:86:93:
3c:8c:ff:85:a7:03:77:cc:a5:51:64:cf:9a:7f:6b:23:e5:16:
f5:b0:b6:fd:27:cd:88:c5:4b:40:50:1e:aa:67:5a:9e:fe:7f:
87:13:25:ca:e6:47:ca:8a:a1:12:04:95:26:ef:f9:64:63:c3:
6b:d3:41:86:81:1d:dd:37:94:08:b0:9e:10:62:bf:e0:f6:2a:
a7:a3:1a:ba:36:fd:86:e3:db:8a:5c:70:fc:7f:ba:95:67:63:
e3:5d:87:30:ca:ad:b6:76:95:0d:cb:9b:dc:58:41:a7:2e:c1:
68:fd:75:59:85:5f:58:e4:f5:24:b1:b7:fe:24:b0:33:14:f2:
32:9a:bc:a2:5b:a0:87:b7:13:6a:46:ca:3a:45:68:3e:0b:1c:
6d:c5:c9:7d:35:c4:0c:2c:3d:11:74:f2:98:54:5c:4e:89:a0:
4c:f3:fd:b7:0f:eb:27:4e:2b:4b:e0:e2:b8:87:0f:19:c5:7a:
60:15:ba:35:8d:6c:04:21:9b:94:b2:af:06:eb:93:fd:d1:59:
4b:2e:15:06:9e:db:99:f0:e3:bc:63:58:9f:92:d2:56:39:78:
b8:4a:fe:a1:a9:64:54:ea:38:dc:87:99:54:08:54:6a:01:a4:
00:ad:93:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 13 23:05:02 2025 by rpki-client