Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37392e302f32342d3234203d3e203633343733.roa
File: 3137312e32322e37392e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: pf/39XNRWdhYCK8H09xRkzlFxRx7/aFFexgKDJdWy3w=
Subject key identifier: 34:8F:95:8A:46:77:63:84:F8:73:7C:33:2C:E4:21:40:FF:F2:B5:C7
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 2A7FBEAF4C19B84280D053BFF9E0D728F75C2ACE
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37392e302f32342d3234203d3e203633343733.roa
Signing time: Sun 21 Jun 2026 09:47:47 +0000
ROA not before: Sun 21 Jun 2026 09:42:47 +0000
ROA not after: Sun 20 Jun 2027 09:47:47 +0000
asID: 63473
IP address blocks: 171.22.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:7f:be:af:4c:19:b8:42:80:d0:53:bf:f9:e0:d7:28:f7:5c:2a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jun 21 09:42:47 2026 GMT
Not After : Jun 20 09:47:47 2027 GMT
Subject: CN=348F958A46776384F8737C332CE42140FFF2B5C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2c:ba:43:78:0b:54:55:b3:b3:a8:88:e8:5b:
fd:76:56:ac:dc:90:6f:f9:09:aa:a0:2e:5d:ea:f1:
2d:b1:da:14:fd:c7:68:0b:b4:3c:a8:bc:06:1b:a1:
14:6d:cc:ca:00:f5:0b:54:1b:a1:3c:6b:71:3c:0c:
f1:96:54:3c:8d:3e:2d:8f:8d:e6:ea:f1:15:29:88:
dd:b6:06:84:21:db:9a:7b:eb:e5:ca:fd:40:46:94:
1a:ad:32:09:e7:a1:cf:6c:9b:c3:54:12:cf:9a:fe:
f0:5b:09:60:bb:fb:15:0b:2b:0c:8b:bb:e9:03:d6:
67:27:30:5c:b8:6f:a7:6f:30:34:c6:59:2b:b0:c6:
97:51:38:41:70:7c:86:db:3e:0f:37:78:82:41:43:
cd:29:b9:40:1a:7b:ab:fb:bf:35:02:76:70:50:0c:
f2:6b:60:3d:f2:ac:42:22:79:9a:50:59:3d:de:33:
d1:0b:f7:a2:f2:03:97:5d:88:5e:b0:ec:ea:2c:96:
66:d4:20:cf:b0:73:bf:75:5d:ab:60:cf:a7:6a:8a:
b7:4e:16:ce:e2:f5:46:bf:15:1a:28:8e:32:f2:33:
88:bf:ac:90:65:98:1a:05:aa:4c:85:f5:38:1c:fb:
83:13:b0:75:ab:89:18:86:7f:30:aa:a4:97:4f:c2:
2a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8F:95:8A:46:77:63:84:F8:73:7C:33:2C:E4:21:40:FF:F2:B5:C7
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37392e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.79.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ac:f8:bc:81:88:1c:f1:23:89:c7:24:08:37:4a:e8:63:ef:
e8:4e:80:7d:e8:18:62:3e:7e:74:e5:4f:01:c9:b0:bc:da:aa:
5c:dd:b1:55:b7:7d:27:de:e7:b7:25:bc:94:4b:4c:ed:06:35:
39:b3:01:b7:1f:53:04:69:76:87:7a:8a:65:b1:74:d6:7a:f2:
df:f7:0c:a0:35:64:13:bc:46:85:5c:b3:86:09:de:36:93:08:
b1:54:5d:f5:6a:80:14:49:de:de:ac:b2:cf:c9:e6:e2:1a:6d:
4e:57:69:34:c6:c0:c4:af:7c:38:d0:8b:03:02:42:6d:4e:53:
b1:0a:bb:80:09:3d:bc:ed:c9:74:f3:a9:12:c5:c3:31:e1:5b:
0a:6b:9d:4f:23:c3:6e:a3:c4:8f:97:69:12:70:9a:91:1b:a5:
b3:02:df:2a:59:cc:17:02:3f:d3:66:04:a9:cc:14:b4:90:05:
fa:d0:82:ae:53:5b:a3:04:c0:84:9d:5d:e2:0a:56:a2:de:ed:
db:0f:b1:f8:32:b9:dd:45:84:72:a3:17:a8:50:d4:27:01:86:
e0:65:0a:c3:21:07:11:f0:6c:c4:c4:4c:07:9f:2e:b8:f4:8a:
8b:9a:73:33:55:be:b7:f7:e2:79:af:5b:b6:79:82:bf:ec:89:
33:26:d6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:44:03 2026 by rpki-client