Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133382e302f32342d3234203d3e20323032303531.roa
File: 34352e39312e3133382e302f32342d3234203d3e20323032303531.roa (raw, json)
Hash identifier: sT1dn9xSJZhhhZxEyP4cG4dkxadDGbXgvTQyikKSzbE=
Subject key identifier: 3B:A9:17:52:E9:B1:CA:54:20:E3:8F:E1:2C:6E:D1:9B:A4:9E:52:23
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 45E8BCB2D2DEFB4E9E9934C40D922C0AA9D067AA
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133382e302f32342d3234203d3e20323032303531.roa
Signing time: Sun 31 May 2026 07:52:25 +0000
ROA not before: Sun 31 May 2026 07:47:25 +0000
ROA not after: Sun 30 May 2027 07:52:25 +0000
asID: 202051
IP address blocks: 45.91.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:e8:bc:b2:d2:de:fb:4e:9e:99:34:c4:0d:92:2c:0a:a9:d0:67:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: May 31 07:47:25 2026 GMT
Not After : May 30 07:52:25 2027 GMT
Subject: CN=3BA91752E9B1CA5420E38FE12C6ED19BA49E5223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cb:39:46:1a:94:8c:c3:a1:38:e7:39:c3:ed:
d1:41:b5:81:cc:69:f0:9b:f2:a4:d8:ee:f7:d4:cb:
1c:06:cd:cd:8a:02:d4:45:84:c6:db:60:7b:35:a1:
e0:51:f0:19:ba:a9:59:9f:04:83:9f:a7:e4:d1:00:
ef:47:34:2a:b0:de:3f:1b:30:74:6d:80:47:e7:32:
77:f0:9b:3c:d0:fd:b8:34:48:91:1d:6c:70:44:20:
55:81:ca:46:aa:07:46:6a:73:45:40:9e:64:b5:38:
3d:65:a8:0b:2d:ac:01:22:20:e6:6a:71:17:e9:12:
2b:63:28:8e:80:9c:e8:92:51:55:c1:80:52:0f:db:
89:b1:dd:54:07:4f:23:d2:7a:31:8d:ee:f2:8c:a7:
84:56:1e:a2:82:4b:42:63:84:01:bb:a0:01:8f:fb:
17:0b:90:34:96:0a:70:d4:77:36:5f:12:89:9f:6f:
f6:1a:f7:ca:ee:7c:37:c2:8a:a3:b1:ce:08:05:37:
b6:61:50:57:fc:82:61:25:75:82:35:8e:32:5e:0f:
90:9b:5f:a8:bb:8d:61:5a:f6:2e:91:b4:43:c8:be:
57:72:43:5e:0b:7f:03:a9:e4:e6:8d:9a:a2:1e:26:
ed:af:71:37:c5:52:24:70:d1:61:5b:2b:25:c3:b2:
32:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A9:17:52:E9:B1:CA:54:20:E3:8F:E1:2C:6E:D1:9B:A4:9E:52:23
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133382e302f32342d3234203d3e20323032303531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.138.0/24
Signature Algorithm: sha256WithRSAEncryption
29:6c:7c:72:8f:64:a0:a4:b6:72:8e:a2:79:e6:9a:37:0e:4b:
23:b2:ef:16:ca:c7:96:5c:c3:11:4d:82:e6:e1:21:0e:33:05:
7e:75:0c:2f:16:03:21:ae:05:6c:d2:62:c3:15:14:db:18:9e:
20:a8:a0:7a:2a:be:e4:f4:4d:19:60:c5:f6:b9:e8:49:5b:c3:
ea:46:20:dd:59:99:1c:a6:e7:ae:84:bd:6e:a9:c2:ea:7f:45:
89:ab:d8:61:21:69:da:cf:7b:3e:c4:99:4e:94:df:4e:21:58:
a6:f3:69:c7:7d:54:85:a1:3c:63:86:2c:dd:f4:1f:1f:6e:cc:
84:95:a1:6c:a8:56:03:0d:6e:15:62:60:d8:43:dd:d8:5c:b4:
1d:42:85:3f:fc:9f:23:d1:b9:d2:be:55:88:10:fb:ee:19:4e:
6d:a2:5a:86:c1:dc:02:09:66:bf:b1:76:21:dc:c3:5e:66:7d:
f4:af:24:97:2f:f2:3d:ce:37:b8:48:ce:de:7a:de:eb:46:f2:
63:5c:d7:fd:16:89:4b:be:b7:4c:7a:b6:7c:a8:89:e6:87:c0:
a6:94:cc:4b:c5:42:31:c6:ee:1c:21:eb:ea:43:2d:33:91:95:
f5:c6:51:b8:1b:14:3a:49:18:b6:66:65:b1:1a:7a:25:bb:f8:
a7:24:65:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:31 2026 by rpki-client