Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e20383334.roa
File: 34352e38372e3137352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 8hxf5/Py6cqFLTRpn3P82uuoOlLbr6mAPfHZMEqfBNo=
Subject key identifier: D5:A6:61:BC:FF:88:82:06:12:4C:CC:18:4B:60:76:C0:56:9F:F9:48
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 0E9C53149A217345E633B2609C1D22310C9794EC
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e20383334.roa
Signing time: Thu 05 Mar 2026 00:01:33 +0000
ROA not before: Wed 04 Mar 2026 23:56:33 +0000
ROA not after: Thu 04 Mar 2027 00:01:33 +0000
asID: 834
IP address blocks: 45.87.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:9c:53:14:9a:21:73:45:e6:33:b2:60:9c:1d:22:31:0c:97:94:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Mar 4 23:56:33 2026 GMT
Not After : Mar 4 00:01:33 2027 GMT
Subject: CN=D5A661BCFF888206124CCC184B6076C0569FF948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:05:26:85:f9:e0:d4:0d:58:e2:e7:ab:43:a8:
4d:fe:72:48:be:e9:5b:8f:86:69:6d:d5:4a:6c:f5:
70:6e:86:e5:50:e8:59:f1:b1:42:c3:70:43:ff:59:
67:6a:f8:f3:5c:a2:03:7f:c2:37:e6:d5:07:8a:85:
b8:0c:f4:fc:eb:73:fb:4c:d5:55:cf:be:85:c5:e1:
19:10:85:ff:8d:42:aa:d6:07:7e:ed:99:55:8f:72:
0c:71:5b:5a:95:75:06:f4:b3:22:52:28:9a:84:87:
ad:1f:06:a5:2d:bb:94:50:ed:27:15:b0:54:0e:12:
fc:20:a4:8c:fb:71:3e:3d:c6:ab:03:51:f9:09:3c:
e1:c4:00:ca:fe:6b:66:8d:c8:29:83:64:a7:70:09:
61:06:9b:e1:f3:8a:e7:ed:d2:92:43:90:3d:b3:dc:
79:43:64:9a:1b:a7:40:a2:e9:7b:54:b7:3e:e7:b1:
9a:58:74:c4:30:ad:ad:47:3f:e3:fa:5a:9a:b5:08:
b8:07:b5:22:64:b4:45:65:f8:c0:58:9f:ef:f7:73:
9b:ca:5c:f4:b3:ee:d5:80:f3:dd:ad:1a:ac:5b:1e:
81:df:fc:2f:08:b3:d6:42:54:f1:93:7f:22:1c:6b:
36:9b:81:03:19:13:fb:f0:d7:b0:0a:0e:8d:cd:49:
db:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A6:61:BC:FF:88:82:06:12:4C:CC:18:4B:60:76:C0:56:9F:F9:48
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.175.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c3:d0:2f:bf:e5:d3:c2:6a:95:31:50:71:8d:94:74:76:65:
ff:83:ab:32:02:5e:a2:88:82:2b:f3:c5:dd:40:d0:13:c4:7f:
69:13:4f:2d:40:9d:c4:27:a1:21:0f:23:60:d0:ab:ec:90:33:
ec:b9:ab:ce:69:c6:7e:f9:b0:57:a2:07:66:b8:3b:10:ac:b8:
4e:23:7a:66:6d:98:01:e9:13:88:24:68:81:4a:3c:7a:fe:b7:
a8:58:13:be:08:50:cc:54:8d:de:17:41:bd:05:6b:c3:13:af:
fb:68:1e:8b:97:9b:1b:2d:93:a1:54:5c:b5:e5:a8:1d:29:d7:
c3:ba:29:54:13:52:92:ef:5a:03:e2:fc:62:ad:36:41:a2:bb:
d2:ba:26:fd:0d:3d:ee:c3:4d:9a:a2:e1:1b:89:19:67:73:f1:
57:0a:df:31:e9:fb:fb:e9:b0:29:db:04:a1:d6:b8:88:49:84:
59:72:e7:7f:33:f2:4f:51:ba:5a:bb:e4:b2:5a:98:10:b9:09:
ff:09:ea:c5:67:4d:cd:ae:aa:59:40:05:36:19:3d:b5:ec:8a:
66:11:55:b8:51:e0:db:c0:4e:66:30:39:57:2b:ad:42:4c:71:
8d:60:6e:01:bd:5d:92:bf:4a:e9:9c:58:0f:1e:3f:95:ee:4b:
a5:e3:4b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:44:03 2026 by rpki-client