Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e20323131343037.roa
File: 352e3138312e3137382e302f32342d3234203d3e20323131343037.roa (raw, json)
Hash identifier: HEdDLgD9y7evjDTPc2g3P+O1soJj94evXiRaa1hItAw=
Subject key identifier: 1B:19:EC:02:D6:DF:A6:1E:C5:92:0E:7E:F3:CD:F2:52:FB:22:59:D3
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 07427F526C4B9D4CB834157B297CBA749787F629
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e20323131343037.roa
Signing time: Fri 23 Oct 2026 12:49:38 +0000
ROA not before: Fri 23 Oct 2026 12:44:38 +0000
ROA not after: Fri 22 Oct 2027 12:49:38 +0000
asID: 211407
IP address blocks: 5.181.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 06:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:42:7f:52:6c:4b:9d:4c:b8:34:15:7b:29:7c:ba:74:97:87:f6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Oct 23 12:44:38 2026 GMT
Not After : Oct 22 12:49:38 2027 GMT
Subject: CN=1B19EC02D6DFA61EC5920E7EF3CDF252FB2259D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:39:82:4b:fe:73:d6:7a:23:2a:66:fa:b0:
5d:59:56:ef:ae:aa:e6:12:f6:31:b1:24:ef:8b:78:
c2:88:94:6a:5a:89:a7:ac:1b:c8:44:e7:a4:f1:1f:
0b:8b:76:5b:5a:66:48:eb:7d:69:e6:32:6c:82:2a:
df:36:d5:67:dd:76:ae:67:8b:d3:72:07:e6:33:9e:
45:30:06:6b:e4:41:aa:7a:95:31:7a:b4:d2:60:8f:
7e:36:de:18:f5:a9:df:b2:6c:ad:e5:1e:cb:e6:37:
30:25:8a:0b:44:ac:62:ae:90:ae:b6:a3:ef:55:64:
50:47:e8:36:b7:ac:94:ae:fb:f8:f9:fa:76:f0:4f:
d5:f1:6b:c8:b5:fa:c0:3e:18:35:32:c0:f0:af:d5:
7d:13:3c:21:5a:1c:0a:19:d0:b4:3e:0d:7d:b8:4a:
0b:ed:d5:e2:4e:50:f7:26:aa:90:48:f4:98:58:26:
75:9b:82:35:b4:a3:84:c1:b7:ff:0f:ed:b9:bf:21:
68:19:60:05:5b:82:6c:5c:92:c9:a2:21:e3:14:51:
f2:23:55:b5:8f:f3:c5:ad:6f:55:25:55:4c:c1:87:
dc:8c:34:06:31:e5:5c:bf:cb:ce:c6:3a:0a:47:37:
6f:71:f1:c2:ab:f6:9d:6d:98:65:08:52:1b:65:f9:
99:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:19:EC:02:D6:DF:A6:1E:C5:92:0E:7E:F3:CD:F2:52:FB:22:59:D3
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e20323131343037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.178.0/24
Signature Algorithm: sha256WithRSAEncryption
66:39:d2:f4:00:24:4d:2b:ef:b5:54:04:18:5b:42:b8:d9:f2:
f5:60:0b:a5:68:19:3e:ef:3f:f1:8a:71:af:0e:44:62:e2:20:
b3:90:71:8a:87:f7:e9:88:28:0c:9a:ce:42:a0:cb:76:a1:65:
46:4b:a2:08:ce:78:0d:cf:90:1a:47:f6:0a:91:d5:1a:36:5c:
3d:58:69:ea:fb:81:bd:af:45:d0:87:c2:a5:84:ec:77:c2:b1:
9e:ec:2b:34:96:a2:7d:d2:1f:9f:92:ff:65:30:a8:c0:65:65:
61:e4:08:75:0b:d0:64:7d:14:8e:36:7a:39:a5:68:f3:42:3b:
9c:b2:a2:d0:20:f1:3a:07:ba:7c:be:fd:d9:43:84:d9:63:a7:
77:a0:f8:5f:35:bf:c2:67:d1:9a:3c:37:87:96:ea:6c:02:21:
2d:d0:24:7d:f7:80:4c:be:66:64:c0:39:e1:80:2d:00:0b:82:
37:1b:83:be:0e:da:a3:2c:59:89:dc:09:37:b1:a9:82:40:3d:
ef:88:e5:ae:1a:e7:1c:e8:a7:0c:3b:6b:fe:9e:85:07:e3:62:
6f:71:1b:ce:d1:94:55:1b:ba:9d:d1:36:47:46:6e:d2:dc:ea:
46:86:f7:e9:65:7f:3e:a1:c0:1d:27:cc:c5:fe:5c:31:e3:c2:
2c:05:70:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:36:32 2026 by rpki-client