Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137372e302f32342d3234203d3e20323134363737.roa
File: 352e3138312e3137372e302f32342d3234203d3e20323134363737.roa (raw, json)
Hash identifier: N+uDopEIkug3jW4ZX6l6vMBPHpittmjZuktzNljP5lI=
Subject key identifier: 02:C0:89:07:B4:4F:A7:17:1A:27:C1:6E:4F:1D:F4:B5:FF:9F:4F:5C
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 78DF5AC4B82B06D9321F82E08A4D87BE8E97AB6A
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137372e302f32342d3234203d3e20323134363737.roa
Signing time: Sat 05 Sep 2026 12:49:33 +0000
ROA not before: Sat 05 Sep 2026 12:44:33 +0000
ROA not after: Sat 04 Sep 2027 12:49:33 +0000
asID: 214677
IP address blocks: 5.181.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:df:5a:c4:b8:2b:06:d9:32:1f:82:e0:8a:4d:87:be:8e:97:ab:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Sep 5 12:44:33 2026 GMT
Not After : Sep 4 12:49:33 2027 GMT
Subject: CN=02C08907B44FA7171A27C16E4F1DF4B5FF9F4F5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:79:af:53:e8:07:3c:44:38:c3:4d:ab:0d:
20:a4:7a:66:f9:87:f4:44:72:4d:e1:4b:85:66:f6:
cb:6a:84:e9:9a:ed:6f:cc:53:f6:e4:3c:31:1b:a9:
13:1c:b3:cc:4b:22:c0:22:91:96:e2:49:7b:72:3f:
b6:e3:66:7f:7e:75:03:22:b5:c6:3b:99:44:1e:a4:
d6:28:17:69:2c:0d:c8:ad:a7:93:c4:4d:d6:f8:ac:
8b:82:59:ed:fe:9f:40:ab:ba:3a:d4:fb:de:67:a3:
1c:a7:56:47:5f:9f:ac:b3:c6:38:c7:f9:c4:46:6b:
1f:9a:26:67:cb:64:57:71:48:50:a7:e5:18:8e:19:
a4:19:fb:9f:3e:2b:06:8d:45:7f:17:12:b1:b0:1c:
10:a3:79:43:e4:19:33:fe:fc:fa:02:ce:cd:a9:d5:
12:55:00:81:ba:c8:12:77:e3:05:0f:3a:0d:e4:9f:
45:60:38:67:c3:5a:c6:7c:88:7d:1a:aa:81:53:7c:
25:45:65:42:81:12:09:1c:dc:94:27:97:86:be:26:
d3:3c:bf:3a:a4:55:f2:a6:56:fb:48:bd:27:fa:3f:
71:37:0e:c0:4a:d8:25:97:b7:2d:24:d3:d1:e0:f7:
eb:ce:a3:49:29:bb:60:42:29:d6:81:71:26:12:76:
d6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C0:89:07:B4:4F:A7:17:1A:27:C1:6E:4F:1D:F4:B5:FF:9F:4F:5C
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137372e302f32342d3234203d3e20323134363737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.177.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:32:72:7a:7f:b8:51:44:c7:5b:57:25:a2:2d:11:46:13:9a:
e6:99:0c:34:24:3c:01:4a:12:df:ac:40:0b:76:31:44:c2:36:
d9:37:b8:43:be:71:fa:49:ac:92:32:41:60:43:05:2e:e7:be:
2f:5d:fd:37:26:17:4f:40:f5:f3:84:aa:bd:2b:64:56:ce:d2:
08:c8:75:e6:57:ed:e7:b0:01:48:a9:31:88:7f:d6:03:77:6d:
d9:00:17:73:11:a5:9d:4d:d4:c0:d0:70:72:6f:43:9a:63:f5:
0a:c2:46:ed:48:9d:8b:5b:43:6c:f4:47:ef:3b:f7:fb:5e:f7:
9d:cd:33:35:4c:f4:66:ae:b5:39:64:2a:aa:18:79:ae:99:bd:
8a:bc:a8:3d:cb:c3:77:47:2e:06:45:8b:16:c3:8d:96:3d:77:
af:08:22:2c:d5:05:cd:0e:12:65:25:c0:f9:1c:16:9c:a8:27:
52:a5:b4:36:63:f1:a0:e0:c9:00:cc:06:0b:5d:8c:71:eb:ce:
a7:77:11:9c:1d:ba:cc:e8:2f:b7:f3:cc:f3:20:61:30:7d:c4:
63:4e:31:9d:17:dd:af:00:40:c0:72:3e:7b:0f:c1:70:8d:b1:
d4:b3:8b:16:b8:17:4e:a2:11:02:40:9b:68:c3:c5:ef:d6:dd:
5d:1c:94:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:52:36 2026 by rpki-client