Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133392e302f32342d3234203d3e2037343838.roa
File: 34352e39312e3133392e302f32342d3234203d3e2037343838.roa (raw, json)
Hash identifier: gOpwje9Qy8SmaNP6cerzV6iD9+gJUA7LJN9/mi4qu3I=
Subject key identifier: 51:BE:F7:90:9D:76:82:63:B0:6F:7B:B8:CF:F8:56:7D:90:1F:E3:81
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 7CC1F2FB161E58CF246E4A0C1E8E32B9030327F6
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133392e302f32342d3234203d3e2037343838.roa
Signing time: Tue 10 Mar 2026 07:32:33 +0000
ROA not before: Tue 10 Mar 2026 07:27:33 +0000
ROA not after: Tue 09 Mar 2027 07:32:33 +0000
asID: 7488
IP address blocks: 45.91.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 06:32:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:c1:f2:fb:16:1e:58:cf:24:6e:4a:0c:1e:8e:32:b9:03:03:27:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Mar 10 07:27:33 2026 GMT
Not After : Mar 9 07:32:33 2027 GMT
Subject: CN=51BEF7909D768263B06F7BB8CFF8567D901FE381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:8f:a7:73:3e:52:10:c2:4a:8e:4d:a7:e4:
ff:5a:61:06:f7:f0:63:0d:9b:b1:c8:10:a9:e8:ef:
9e:2a:f0:d3:44:5e:8e:ea:87:07:f0:84:a7:48:d4:
0f:bd:19:dd:be:72:56:3a:e8:9f:42:b2:12:48:00:
34:74:9b:54:35:2e:e8:ad:c8:b7:a5:42:3d:46:7f:
32:31:78:7c:2a:dd:32:45:35:aa:ce:a5:0f:f0:56:
8e:82:b5:eb:e0:26:2e:b3:09:a0:78:64:e8:45:bc:
25:3c:38:5b:c9:08:40:dd:78:5d:fc:d1:c0:4c:0c:
5c:a3:d6:da:d7:4f:47:49:d2:63:77:3d:c6:39:2f:
b6:b5:20:68:4f:3b:54:21:c6:83:b3:8a:af:39:ba:
0b:7c:87:a4:1f:d2:55:46:e9:da:11:0f:3f:26:b4:
e3:33:6d:4e:72:50:b5:e1:43:ac:8c:a5:05:56:f2:
57:f6:4c:69:81:1b:f1:aa:db:78:02:85:83:5f:d5:
f7:37:a9:29:05:00:a7:46:be:f0:25:6b:f7:09:35:
4f:e5:b6:48:c9:69:39:11:a1:85:b2:af:ba:5a:ab:
56:98:60:c5:2b:1c:71:55:f0:e6:ee:99:95:0c:3a:
93:35:1f:49:be:4a:40:68:6b:bf:01:7d:eb:be:27:
c7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BE:F7:90:9D:76:82:63:B0:6F:7B:B8:CF:F8:56:7D:90:1F:E3:81
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133392e302f32342d3234203d3e2037343838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.139.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:7b:14:72:1d:e2:24:e0:a0:bb:5a:5c:56:41:bb:27:c5:aa:
1d:80:d9:f0:cf:ee:41:96:b8:1c:07:94:ee:ef:60:fc:48:b6:
7a:28:1d:c9:5a:6d:e1:cf:ec:69:fd:e4:b8:85:38:68:24:ae:
86:15:be:5c:90:97:f7:c7:89:73:e4:7a:b9:7b:87:1c:7d:05:
1c:5c:a9:f9:22:ae:48:7f:32:e8:fb:60:40:d2:7c:3d:a3:e2:
f3:a8:8d:4c:8d:86:86:63:4f:b2:38:7c:b9:a5:7e:54:50:54:
dc:4e:1f:72:6d:8c:4d:4e:27:e8:18:25:73:1e:51:30:9e:b2:
31:79:51:20:47:4c:6b:b1:75:69:3c:b4:d6:f7:44:84:a7:2c:
6d:27:47:c4:09:6c:84:f7:86:e2:68:c4:66:10:8d:ab:31:47:
bb:10:a2:a1:6a:1d:d9:fb:44:30:5d:bb:20:c4:7e:7d:62:b7:
21:84:5e:0d:e5:62:aa:c7:34:25:9d:26:bd:f6:01:5a:72:45:
ef:b4:7b:ca:d9:19:9b:65:33:ad:28:97:16:8f:ef:10:e9:c6:
94:0c:26:e8:6c:58:11:5c:e2:bc:10:cc:04:01:c6:ba:e3:64:
6f:41:75:1e:59:9c:a2:b4:84:2e:d1:5a:7b:52:c8:a5:77:75:
78:51:3b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:16:31 2026 by rpki-client