Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37362e302f32342d3234203d3e20383334.roa
File: 3137312e32322e37362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: +ful93gKhrze9R/EeTArUsWquEvoPPtiPOxtJEmojkE=
Subject key identifier: 93:5E:F0:45:B2:1F:23:46:F3:95:76:51:BA:AD:06:EA:65:C0:E3:99
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 5119A27AD01812AD37F833B7F8681E175FA07C1F
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37362e302f32342d3234203d3e20383334.roa
Signing time: Fri 25 Sep 2026 11:36:29 +0000
ROA not before: Fri 25 Sep 2026 11:31:29 +0000
ROA not after: Fri 24 Sep 2027 11:36:29 +0000
asID: 834
IP address blocks: 171.22.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:19:a2:7a:d0:18:12:ad:37:f8:33:b7:f8:68:1e:17:5f:a0:7c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Sep 25 11:31:29 2026 GMT
Not After : Sep 24 11:36:29 2027 GMT
Subject: CN=935EF045B21F2346F3957651BAAD06EA65C0E399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:de:5b:a8:0d:4b:6a:b2:e2:9d:4b:22:73:
50:59:6c:e6:c8:74:98:5f:5c:ba:05:3a:f1:dd:35:
4b:47:ba:8d:85:20:0d:11:f7:f1:d5:11:92:c2:c6:
04:b4:e8:d7:01:f3:f2:60:79:ef:17:75:1f:0e:ed:
ab:ed:79:d8:50:d3:30:bf:6d:bd:dc:e0:11:d3:16:
8c:61:a3:09:89:63:f7:27:95:ba:2e:a3:fc:6f:59:
a4:7b:04:f3:2e:1f:84:f3:24:8f:d9:e7:c4:77:2d:
b7:84:70:d5:cf:6d:84:47:3f:4c:97:54:1a:4c:ee:
92:5e:dd:fe:ce:ea:08:7a:c6:2a:2d:ed:d4:92:f5:
78:b7:27:02:1d:11:6c:5c:52:28:7e:03:17:ad:9e:
f3:a6:d7:2c:28:fe:71:49:45:df:8b:39:32:e5:74:
c3:f5:d6:9f:f5:b7:6c:9b:a1:9c:55:54:c1:3c:ad:
f1:4b:2a:8a:8d:ab:27:03:57:55:fd:df:17:5e:2c:
eb:b4:9c:e1:e0:ea:65:29:36:e6:22:79:5f:ad:0c:
7c:03:0a:70:77:59:6f:39:e1:fb:d4:45:98:47:f7:
8d:1e:a6:34:b9:a7:7e:a3:39:d0:ea:be:9c:bf:a3:
12:d3:d9:25:97:5d:85:32:ec:3f:48:e8:64:00:b0:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5E:F0:45:B2:1F:23:46:F3:95:76:51:BA:AD:06:EA:65:C0:E3:99
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.76.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e5:4c:ab:f8:25:c2:3b:b0:ea:17:24:4e:22:f5:fc:06:79:
ff:8d:09:7f:29:8c:d5:ad:18:31:e9:54:a4:57:7b:a9:ad:6a:
8e:c0:d7:1a:1c:28:05:39:f5:98:6a:8e:3e:54:b3:7c:fd:55:
d6:90:51:e7:70:70:3d:02:fa:f1:3d:60:f2:ce:d1:ff:8a:4d:
4c:13:01:8f:4e:c3:81:f6:7a:0e:1d:af:fa:95:fd:e1:7b:78:
d9:1b:0c:3f:c2:eb:7a:67:dc:86:81:2f:9f:78:df:fb:7c:9b:
e8:78:15:b0:05:78:82:29:51:ca:d0:91:a8:62:3a:46:33:90:
45:bd:7c:25:22:1c:c3:dd:47:6a:98:d4:38:d8:35:33:bb:ec:
85:36:42:50:1b:3e:48:b6:29:b7:23:5d:58:7e:f1:19:fd:f3:
17:f0:c8:b6:52:67:0d:74:be:70:e3:55:80:a6:8e:65:82:92:
6a:e6:06:91:90:a3:72:eb:77:9f:e0:21:a3:f4:8a:2f:67:d1:
31:a3:10:7d:60:23:fb:ab:c7:5d:61:45:6b:c8:b8:9b:af:cc:
7c:87:d2:a8:f0:66:b7:b1:d9:b1:e5:3e:ef:20:74:21:b2:23:
0c:3d:15:19:54:ee:04:b7:08:e9:5a:92:9a:06:38:1c:65:5e:
c1:3a:25:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:29:12 2026 by rpki-client