Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e203536363535.roa
File: 34352e38372e3137352e302f32342d3234203d3e203536363535.roa (raw, json)
Hash identifier: fe2d3bnywg6QCr+FgvQnZoZOeQLwIZSDKVKYHVx2Cds=
Subject key identifier: F2:81:52:20:39:B9:06:99:1C:91:B3:C4:3E:89:B2:EC:E0:D1:DB:9F
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 1124FA12185C7C81A7B88DE5377223599D754C86
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e203536363535.roa
Signing time: Tue 25 Aug 2026 09:22:54 +0000
ROA not before: Tue 25 Aug 2026 09:17:54 +0000
ROA not after: Tue 24 Aug 2027 09:22:54 +0000
asID: 56655
IP address blocks: 45.87.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:24:fa:12:18:5c:7c:81:a7:b8:8d:e5:37:72:23:59:9d:75:4c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Aug 25 09:17:54 2026 GMT
Not After : Aug 24 09:22:54 2027 GMT
Subject: CN=F281522039B906991C91B3C43E89B2ECE0D1DB9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:97:58:ad:dc:fd:cf:a9:ad:ec:99:c1:36:bf:
17:64:e1:69:4b:af:1c:46:1f:9f:b7:24:24:4a:be:
f2:59:f3:ef:32:75:6f:f6:c1:43:f3:a0:a5:f2:cc:
b2:e3:d4:59:d1:e3:83:2f:ba:27:61:12:2f:d1:23:
af:81:a0:f1:f8:c7:5e:88:3d:62:34:e3:41:25:d7:
8a:ff:a3:8f:aa:b3:fa:89:38:aa:5e:55:6a:6d:b5:
49:08:b1:0f:c0:67:90:b5:28:4c:0e:ef:f3:9d:04:
5e:61:55:d7:b3:2a:0e:b6:eb:74:cf:49:2b:aa:84:
ce:58:d9:c7:f8:5f:f6:27:c5:12:fe:49:1f:fc:1b:
9c:bd:cb:eb:da:04:81:5f:21:dc:21:47:a4:a0:aa:
1a:26:4e:0f:52:f5:d1:39:e1:b3:9b:8e:99:84:a8:
7d:f7:5f:1d:10:b9:25:b1:46:72:25:36:e5:51:85:
8c:ff:e3:35:27:21:8e:87:40:40:3b:af:d1:e9:41:
60:8b:bd:62:b5:90:35:9d:ea:c8:a6:ab:38:04:15:
90:2c:7f:9e:89:c8:9c:c3:33:eb:95:d1:49:18:25:
a9:3a:16:ee:d2:fc:dc:ef:bf:bd:82:03:ae:33:81:
4c:7b:c2:2e:c0:3f:12:04:be:30:72:8d:59:43:e1:
e6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:81:52:20:39:B9:06:99:1C:91:B3:C4:3E:89:B2:EC:E0:D1:DB:9F
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e203536363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.175.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:1c:91:6e:0b:ec:72:f7:52:17:c1:0f:5a:8b:8d:85:5d:d0:
61:d0:85:78:8a:e9:15:c6:28:c4:5b:de:0d:15:53:ee:db:a5:
56:0b:4c:87:5e:65:97:f9:a5:40:dd:11:32:a9:b8:49:ab:f2:
3a:39:b1:59:87:c9:f9:18:5c:a8:eb:41:cf:fe:0d:49:9d:97:
c6:71:11:25:68:69:da:d5:4f:40:24:5c:eb:a8:62:96:d0:1e:
2e:fd:4e:78:47:af:fe:66:25:e2:99:eb:0b:77:83:dd:1a:26:
ca:87:80:a8:d5:af:bd:02:52:3a:20:0a:f3:0a:cb:22:c8:fc:
ed:29:f7:fa:54:5f:a5:3f:1d:d6:6f:3d:87:41:93:f1:12:64:
1a:f8:a4:37:ae:2c:83:e2:ba:2a:ed:76:6f:7c:86:92:fe:a5:
04:48:81:b2:54:64:5d:a4:f5:fd:93:bd:2d:bb:ae:a0:8a:52:
de:a3:06:8a:09:09:8e:ef:3f:e2:1b:60:a7:07:05:12:b9:e5:
ab:c2:06:81:f1:5c:1c:c0:86:ef:7a:41:0d:04:96:32:1d:77:
08:e5:c6:e5:89:91:df:7f:76:2a:cd:5e:5a:0f:d0:4a:a5:9f:
4f:29:45:83:27:65:03:a9:4f:d5:16:61:84:11:bb:f5:08:e7:
b9:6d:af:db
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUEST6EhhcfIGnuI3lN3IjWZ11TIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNjA4MjUwOTE3NTRaFw0yNzA4MjQwOTIyNTRaMDMxMTAvBgNV
BAMTKEYyODE1MjIwMzlCOTA2OTkxQzkxQjNDNDNFODlCMkVDRTBEMURCOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTl1it3P3Pqa3smcE2vxdk4WlL
rxxGH5+3JCRKvvJZ8+8ydW/2wUPzoKXyzLLj1FnR44MvuidhEi/RI6+BoPH4x16I
PWI040El14r/o4+qs/qJOKpeVWpttUkIsQ/AZ5C1KEwO7/OdBF5hVdezKg6263TP
SSuqhM5Y2cf4X/YnxRL+SR/8G5y9y+vaBIFfIdwhR6SgqhomTg9S9dE54bObjpmE
qH33Xx0QuSWxRnIlNuVRhYz/4zUnIY6HQEA7r9HpQWCLvWK1kDWd6simqzgEFZAs
f56JyJzDM+uV0UkYJak6Fu7S/Nzvv72CA64zgUx7wi7APxIEvjByjVlD4eY9AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU8oFSIDm5BpkckbPEPomy7ODR258wHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzQzNTJlMzgzNzJlMzEzNzM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjM2MzUzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1X
rzANBgkqhkiG9w0BAQsFAAOCAQEAnByRbgvscvdSF8EPWouNhV3QYdCFeIrpFcYo
xFveDRVT7tulVgtMh15ll/mlQN0RMqm4SavyOjmxWYfJ+RhcqOtBz/4NSZ2XxnER
JWhp2tVPQCRc66hiltAeLv1OeEev/mYl4pnrC3eD3RomyoeAqNWvvQJSOiAK8wrL
Isj87Sn3+lRfpT8d1m89h0GT8RJkGvikN64sg+K6Ku12b3yGkv6lBEiBslRkXaT1
/ZO9LbuuoIpS3qMGigkJju8/4htgpwcFErnlq8IGgfFcHMCG73pBDQSWMh13COXG
5YmR3392Ks1eWg/QSqWfTylFgydlA6lP1RZhhBG79QjnuW2v2w==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:06 2026 by rpki-client