Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e20313437323736.roa
File: 34352e38372e3137352e302f32342d3234203d3e20313437323736.roa (raw, json)
Hash identifier: on/2cXFQCtg4+9lDY4P78kAVprMfcyyYlWiOAB8AQFA=
Subject key identifier: 29:FA:C7:FA:41:4A:D5:BD:88:0C:90:11:FD:D2:BE:EB:9A:05:86:1F
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 0EA32839D868AC18B530F8B55852C3EBD81F2306
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e20313437323736.roa
Signing time: Mon 20 Jul 2026 11:38:41 +0000
ROA not before: Mon 20 Jul 2026 11:33:41 +0000
ROA not after: Mon 19 Jul 2027 11:38:41 +0000
asID: 147276
IP address blocks: 45.87.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a3:28:39:d8:68:ac:18:b5:30:f8:b5:58:52:c3:eb:d8:1f:23:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jul 20 11:33:41 2026 GMT
Not After : Jul 19 11:38:41 2027 GMT
Subject: CN=29FAC7FA414AD5BD880C9011FDD2BEEB9A05861F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:bd:82:7c:ba:c1:9f:cd:78:d8:7f:d0:67:
d1:d4:58:1f:bd:f5:3c:be:3c:2b:a6:fd:2d:03:c5:
c4:76:c3:80:f2:b2:d0:94:b7:35:da:c6:f9:93:c2:
db:67:14:08:54:f0:f9:ae:5c:58:e2:a8:92:ce:fe:
9a:36:94:7c:f6:00:3a:81:33:7b:78:cc:82:39:e5:
dd:f4:7d:88:c6:b0:c3:58:55:95:89:55:74:02:2e:
5f:b6:ae:f7:6e:cf:2c:c5:1c:26:79:7e:50:5c:98:
ff:2c:d5:c9:a2:50:85:79:04:6c:7b:cf:82:37:6b:
a3:d4:55:5f:70:ea:1f:ab:34:c3:1a:52:4e:29:15:
0d:8e:88:18:99:e0:12:59:e2:f6:f2:b6:91:93:0b:
a6:89:5a:37:e1:69:40:e8:5d:b4:e8:fe:49:59:38:
3d:8e:b1:c8:97:5f:dc:2e:50:12:16:34:0a:33:9b:
24:5d:ea:cb:77:63:e9:8e:36:ce:28:f5:5e:fb:3a:
68:08:f3:cc:90:c4:0e:cb:b2:53:7e:49:ba:0e:3c:
a6:a2:91:eb:f9:97:bc:0d:58:97:ad:52:63:70:66:
23:03:46:d1:b7:19:1a:68:bf:95:2e:72:9a:00:91:
a0:07:a3:45:6b:26:2f:ed:86:43:ee:42:a0:92:c6:
68:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FA:C7:FA:41:4A:D5:BD:88:0C:90:11:FD:D2:BE:EB:9A:05:86:1F
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e20313437323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.175.0/24
Signature Algorithm: sha256WithRSAEncryption
10:18:82:ad:7d:a9:48:d1:98:8d:4b:13:1e:7d:0e:e8:5d:97:
12:69:38:16:0e:d1:cb:b9:d9:18:27:8f:17:8e:d9:99:4e:0e:
7a:1d:17:42:97:b8:c6:64:4c:4e:c1:3a:f7:97:a7:60:c4:a1:
7c:01:f4:b9:1b:83:5c:5b:bd:33:0c:11:b7:d7:26:33:5e:e8:
28:a7:9c:90:37:84:41:33:ec:ed:80:db:01:8d:80:72:86:2b:
0c:51:d0:85:0a:b8:08:c0:77:48:15:b7:3a:94:55:bb:fe:c8:
e5:9d:67:be:96:d6:3c:c0:0a:bc:5a:52:43:0d:78:84:ae:fa:
c8:ef:e3:8f:21:50:8c:20:95:62:56:71:26:eb:18:02:29:85:
8a:a3:0d:47:19:5e:b9:34:e9:30:18:60:df:0e:d8:e0:c5:82:
86:ca:4c:b1:29:f7:50:15:10:9c:02:b4:f5:a3:76:89:84:1e:
48:33:20:20:38:fc:54:3d:e1:3f:dd:a8:52:62:d5:92:9e:c0:
0f:0d:d9:b5:2a:f5:f3:5b:cf:0f:37:65:29:89:03:a1:54:3f:
9c:0d:f9:23:f1:11:47:9f:8b:0f:a8:e2:3c:81:6d:1e:b1:ae:
1c:4e:e6:d7:73:27:df:9a:b2:a4:b4:38:33:f5:86:0e:93:be:
c1:95:98:d5
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUDqMoOdhorBi1MPi1WFLD69gfIwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNjA3MjAxMTMzNDFaFw0yNzA3MTkxMTM4NDFaMDMxMTAvBgNV
BAMTKDI5RkFDN0ZBNDE0QUQ1QkQ4ODBDOTAxMUZERDJCRUVCOUEwNTg2MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJiL2CfLrBn8142H/QZ9HUWB+9
9Ty+PCum/S0DxcR2w4DystCUtzXaxvmTwttnFAhU8PmuXFjiqJLO/po2lHz2ADqB
M3t4zII55d30fYjGsMNYVZWJVXQCLl+2rvduzyzFHCZ5flBcmP8s1cmiUIV5BGx7
z4I3a6PUVV9w6h+rNMMaUk4pFQ2OiBiZ4BJZ4vbytpGTC6aJWjfhaUDoXbTo/klZ
OD2OsciXX9wuUBIWNAozmyRd6st3Y+mONs4o9V77OmgI88yQxA7LslN+SboOPKai
kev5l7wNWJetUmNwZiMDRtG3GRpov5UucpoAkaAHo0VrJi/thkPuQqCSxmiVAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUKfrH+kFK1b2IDJAR/dK+65oFhh8wHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzQzNTJlMzgzNzJlMzEzNzM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDM3MzIzNzM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LVevMA0GCSqGSIb3DQEBCwUAA4IBAQAQGIKtfalI0ZiNSxMefQ7oXZcSaTgWDtHL
udkYJ48XjtmZTg56HRdCl7jGZExOwTr3l6dgxKF8AfS5G4NcW70zDBG31yYzXugo
p5yQN4RBM+ztgNsBjYByhisMUdCFCrgIwHdIFbc6lFW7/sjlnWe+ltY8wAq8WlJD
DXiErvrI7+OPIVCMIJViVnEm6xgCKYWKow1HGV65NOkwGGDfDtjgxYKGykyxKfdQ
FRCcArT1o3aJhB5IMyAgOPxUPeE/3ahSYtWSnsAPDdm1KvXzW88PN2UpiQOhVD+c
Dfkj8RFHn4sPqOI8gW0esa4cTubXcyffmrKktDgz9YYOk77BlZjV
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:06:05 2026 by rpki-client