Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133392e302f32342d3234203d3e20323134303235.roa
File: 34352e39312e3133392e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier: XYX3Cix8X6plhvGyQyaKofSjaxxyxtVgVNRblE6kIgA=
Subject key identifier: CA:02:AC:40:B5:29:7B:9A:F2:33:D8:B1:E8:94:12:68:C1:14:C2:4C
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 2F0335A95F2E73DB648C300F3C09B07B3CADC614
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133392e302f32342d3234203d3e20323134303235.roa
Signing time: Wed 04 Mar 2026 11:49:00 +0000
ROA not before: Wed 04 Mar 2026 11:44:00 +0000
ROA not after: Wed 03 Mar 2027 11:49:00 +0000
asID: 214025
IP address blocks: 45.91.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:03:35:a9:5f:2e:73:db:64:8c:30:0f:3c:09:b0:7b:3c:ad:c6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Mar 4 11:44:00 2026 GMT
Not After : Mar 3 11:49:00 2027 GMT
Subject: CN=CA02AC40B5297B9AF233D8B1E8941268C114C24C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:c5:c9:fb:9c:71:7a:09:9a:07:f9:4f:d3:
78:03:c7:c6:b5:d5:ce:7a:18:57:9c:ef:19:cc:b6:
d4:f7:62:cb:98:31:19:75:d4:8f:0c:3c:ae:b6:bb:
f3:b1:1d:11:42:db:09:97:f5:af:f7:86:0c:72:41:
25:c0:6f:59:9f:ca:09:bb:d2:f4:8d:f9:a2:40:02:
98:db:b5:ec:bb:3f:eb:49:9c:64:20:1f:19:b8:02:
16:ab:49:58:96:8c:b8:db:c4:4c:30:09:73:e5:f6:
d6:9a:47:b7:2c:a1:14:46:b5:1e:62:5e:06:22:37:
22:0a:98:0d:28:79:d3:6a:f0:ef:3d:45:a5:8d:2b:
45:9d:cc:79:2d:36:06:07:21:e4:40:ef:a7:ae:9b:
35:dd:43:37:97:89:05:af:9e:67:6c:2c:ed:79:cb:
94:1b:62:08:43:f2:9f:af:24:dc:69:db:74:12:95:
bb:fb:de:c0:30:6f:93:10:d9:f2:45:d7:f1:1a:59:
1a:55:50:0e:f2:4b:95:f7:b5:89:f7:0c:b3:f4:3b:
63:1b:79:e0:7e:89:4f:b9:1c:af:f9:03:3c:40:45:
61:b1:c4:6b:20:72:b4:07:e1:54:c4:11:97:34:c4:
a1:75:ec:da:40:66:d9:30:02:d2:2c:96:b7:5c:75:
c1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:02:AC:40:B5:29:7B:9A:F2:33:D8:B1:E8:94:12:68:C1:14:C2:4C
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133392e302f32342d3234203d3e20323134303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.139.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e6:aa:2a:5b:a9:c3:5b:61:a0:86:74:1d:09:5d:4c:e7:0f:
19:a9:2f:96:2f:77:42:74:dc:20:9b:a6:4d:a1:d5:42:0b:30:
25:1a:dd:f3:7d:76:5f:33:f5:bd:d2:cb:01:2b:fb:5e:ca:96:
15:d7:27:6c:90:71:74:bf:96:36:08:c3:55:ab:2a:17:ea:df:
a1:e4:6a:17:8c:8d:7e:5d:87:b1:8d:6b:5e:40:4b:82:2d:c4:
c4:97:a3:72:f7:f2:c2:1a:69:d5:53:77:af:bc:fe:d1:70:c6:
53:6a:71:e3:87:60:0e:6d:97:6b:30:03:96:67:17:a8:41:b5:
e4:8f:aa:db:4e:e7:9b:c7:6d:3b:dc:d1:6a:23:32:09:15:d6:
df:d8:aa:a6:50:25:91:a7:4c:0e:89:f5:0b:b4:1e:6d:95:de:
1c:c5:70:be:49:db:b3:ff:f9:3b:e8:9d:91:07:05:ff:f4:fd:
8e:76:42:2c:8a:0e:a0:7a:c2:32:87:41:75:13:7a:ed:21:ac:
94:fd:49:91:50:ab:81:a4:5f:73:d3:3f:73:11:60:95:16:9e:
47:5a:0d:6d:80:2d:1e:8e:3d:34:f1:05:8f:45:9e:15:11:52:
22:0c:1e:95:ba:45:d2:98:ae:9b:ed:7e:ca:33:95:40:6a:f3:
11:d2:be:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 09:30:38 2026 by rpki-client