Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133392e302f32342d3234203d3e2037343838.roa
File: 34352e39312e3133392e302f32342d3234203d3e2037343838.roa (raw, json)
Hash identifier: XeA6uEmQkwvOJ0Tpa13iWDf4omxWbLdLE4ptlpEpnjs=
Subject key identifier: 41:42:64:F7:19:96:9B:18:47:A8:BF:8B:BB:94:03:18:F8:38:ED:09
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 0CFE271F7DF98AC08D9C498B1C192D64F2DEFD89
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133392e302f32342d3234203d3e2037343838.roa
Signing time: Sat 08 Aug 2026 21:09:30 +0000
ROA not before: Sat 08 Aug 2026 21:04:30 +0000
ROA not after: Sat 07 Aug 2027 21:09:30 +0000
asID: 7488
IP address blocks: 45.91.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:fe:27:1f:7d:f9:8a:c0:8d:9c:49:8b:1c:19:2d:64:f2:de:fd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Aug 8 21:04:30 2026 GMT
Not After : Aug 7 21:09:30 2027 GMT
Subject: CN=414264F719969B1847A8BF8BBB940318F838ED09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cb:12:4e:df:3f:7a:f4:e3:ab:ee:63:5a:8a:
d4:53:87:99:c3:cf:12:ee:ac:36:dc:62:01:fd:67:
09:0e:39:5e:f1:bc:67:a7:d2:7f:cf:5f:e5:9e:85:
2d:84:7d:30:1b:1f:6d:b1:fd:a0:9a:77:5b:1c:2f:
71:aa:d6:e3:13:f5:84:c8:13:e0:0e:7e:8b:14:39:
de:bd:53:d4:05:6b:52:58:74:12:57:b1:0e:05:af:
3b:10:6a:30:44:db:87:6c:22:57:ac:86:2a:98:87:
e9:b8:6a:e3:21:0a:1c:56:e9:85:05:b6:23:30:ee:
0e:2f:9d:8f:05:23:19:c5:59:91:bc:6d:6e:a8:29:
64:59:38:80:25:70:a4:12:ec:e3:54:a1:d5:06:a6:
12:fb:5d:a1:05:7f:dd:e9:95:39:36:3e:7e:b1:db:
d7:22:8a:2d:14:21:19:f1:6c:59:5b:99:7c:dd:5d:
8b:14:12:bc:60:de:9e:14:0b:cd:c4:3b:11:81:5e:
bf:1c:5f:40:51:a4:1f:d3:39:64:df:2a:0f:eb:42:
9e:24:5c:0d:09:70:94:10:f4:95:49:13:91:b4:31:
0b:b6:69:44:4d:6d:18:1e:b0:84:4b:21:83:44:58:
15:ad:01:cf:87:ab:33:59:0e:0b:56:52:02:ae:07:
11:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:42:64:F7:19:96:9B:18:47:A8:BF:8B:BB:94:03:18:F8:38:ED:09
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133392e302f32342d3234203d3e2037343838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.139.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:45:ab:c7:75:0f:ab:67:47:b4:c5:e6:51:67:dd:c2:1d:94:
9a:4e:31:79:eb:bb:e3:df:47:c0:96:42:d1:72:98:36:6b:3b:
e8:52:f6:d3:8e:03:9f:a9:3f:da:38:96:ea:82:95:d7:33:df:
a6:7d:ab:ad:0c:40:66:a5:dd:b6:6d:ab:f1:8f:c5:4a:cc:3c:
ed:50:00:97:c9:3a:e6:18:b2:3d:cf:96:49:16:29:35:48:af:
5c:d1:6a:20:34:d5:de:86:1b:4b:b5:4f:86:fe:4e:aa:1d:02:
48:ef:67:b3:49:f9:66:e1:97:a0:98:bf:81:1f:99:71:a1:e5:
1f:13:b9:e3:36:ca:d0:50:9c:43:dc:86:08:7b:16:e3:81:4e:
a7:0b:d9:53:af:65:a7:19:83:4f:9c:02:02:e2:9d:ec:4d:04:
bf:53:2c:76:c3:91:e5:54:38:83:25:15:30:02:ba:f3:90:60:
9c:e4:f3:a3:4f:ef:f4:db:81:24:ef:db:26:84:61:fe:dd:2e:
b6:16:a7:c6:cf:e0:e7:7b:c6:66:13:63:72:1f:fc:1e:1f:08:
f9:7c:fd:7b:7f:a7:89:1c:76:6f:c2:cd:a5:99:ca:56:c0:ec:
31:fd:19:61:7f:6f:f8:a1:a3:a6:6e:b4:e0:7b:10:bb:30:f7:
4d:27:f8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:26 2026 by rpki-client