Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38322e302f32342d3234203d3e20383334.roa
File: 34352e31322e38322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: pDreGthyTGB33JFUv31QMBF4jrqyXFmD3jm5llUJMH4=
Subject key identifier: A5:30:41:C9:58:EA:AD:B4:17:AE:46:74:16:AB:89:92:FD:6F:E7:D5
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 79E43DAFA2D232E168CE891A305A7046B856CA2B
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38322e302f32342d3234203d3e20383334.roa
Signing time: Sun 29 Jun 2025 10:20:27 +0000
ROA not before: Sun 29 Jun 2025 10:15:27 +0000
ROA not after: Sun 28 Jun 2026 10:20:27 +0000
asID: 834
IP address blocks: 45.12.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 12:33:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:e4:3d:af:a2:d2:32:e1:68:ce:89:1a:30:5a:70:46:b8:56:ca:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jun 29 10:15:27 2025 GMT
Not After : Jun 28 10:20:27 2026 GMT
Subject: CN=A53041C958EAADB417AE467416AB8992FD6FE7D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:04:8f:13:ef:58:1c:68:98:40:64:a4:db:
df:bd:18:13:8f:9d:e0:fd:8e:a4:a1:99:b3:3d:e7:
45:12:9b:d3:46:6a:6b:4e:e3:6a:06:b7:f0:74:18:
a7:dd:99:cd:e5:ad:fa:05:e3:96:13:14:78:cc:62:
b8:3d:8a:c9:79:4b:bc:5b:14:09:94:42:c8:2c:9c:
fa:0f:db:a8:39:0a:25:11:13:0d:76:70:f9:e2:8b:
61:85:6b:77:84:86:00:e1:6a:e7:86:a6:21:1a:91:
a5:44:a6:2b:2d:1c:b7:b2:4f:76:dc:18:e7:fc:62:
8a:0b:4f:0e:8b:0a:1d:b9:ec:69:ee:1f:54:4f:5e:
3f:95:88:cf:3a:ed:31:1c:cf:44:2a:14:d3:0a:f7:
56:b4:d6:25:9c:8b:13:76:69:25:85:d2:94:77:83:
12:e0:83:c7:5c:21:62:1e:1d:db:b1:3c:44:a2:68:
36:d2:90:fe:37:9e:85:a9:9e:3c:c3:92:8c:54:8f:
1c:4e:b7:24:97:4d:25:c4:ef:c2:34:55:cf:75:28:
35:65:f9:24:5e:49:a7:ce:aa:b0:78:77:e9:23:8d:
06:71:36:f0:7d:b0:85:36:9b:f4:85:b3:09:55:b0:
25:60:cf:27:f2:50:4d:7c:ce:e6:69:12:bc:de:45:
86:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:30:41:C9:58:EA:AD:B4:17:AE:46:74:16:AB:89:92:FD:6F:E7:D5
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.82.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:dc:01:71:30:97:14:36:78:d1:58:98:7c:c5:7d:5c:4d:8b:
6c:08:81:6e:27:86:11:37:84:3d:0d:99:f4:dd:6e:c6:05:bf:
b4:af:58:21:88:ae:4a:61:16:dd:31:8b:84:c4:18:98:64:e3:
4d:df:88:6e:ad:ff:61:bc:0d:21:16:b9:21:65:0d:dd:2b:77:
b9:e8:a2:63:63:61:ff:9e:2a:d4:f2:c5:df:29:e3:36:d9:cb:
ec:10:e9:e4:37:e0:ab:8c:72:89:e8:5e:b4:c8:6d:0d:f2:a8:
34:03:dc:df:d5:5c:c7:6b:03:4e:78:cd:68:1f:84:cc:33:a9:
dc:a3:e7:32:63:5f:c3:88:42:10:54:aa:c8:ac:38:d2:d0:01:
f4:b9:88:0f:6c:4b:e4:81:3d:74:cf:60:de:52:e0:c2:97:50:
09:a6:d4:c1:02:f9:c6:90:a4:a7:50:85:5e:dc:dd:ac:17:c2:
ab:2e:34:a6:1e:bc:f5:53:9e:8b:68:04:93:71:a7:58:47:af:
92:9f:3d:b0:24:21:df:90:c4:49:86:7a:b8:11:9e:5c:47:85:
67:20:cc:30:08:6d:0c:9e:1e:e8:e6:ec:62:b7:33:1a:8d:04:
23:43:b3:3c:74:1b:d9:71:27:ce:08:42:7f:a4:18:1d:b8:2a:
70:f4:fd:69
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUeeQ9r6LSMuFozokaMFpwRrhWyiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNTA2MjkxMDE1MjdaFw0yNjA2MjgxMDIwMjdaMDMxMTAvBgNV
BAMTKEE1MzA0MUM5NThFQUFEQjQxN0FFNDY3NDE2QUI4OTkyRkQ2RkU3RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIvASPE+9YHGiYQGSk29+9GBOP
neD9jqShmbM950USm9NGamtO42oGt/B0GKfdmc3lrfoF45YTFHjMYrg9isl5S7xb
FAmUQsgsnPoP26g5CiUREw12cPnii2GFa3eEhgDhaueGpiEakaVEpistHLeyT3bc
GOf8YooLTw6LCh257GnuH1RPXj+ViM867TEcz0QqFNMK91a01iWcixN2aSWF0pR3
gxLgg8dcIWIeHduxPESiaDbSkP43noWpnjzDkoxUjxxOtySXTSXE78I0Vc91KDVl
+SReSafOqrB4d+kjjQZxNvB9sIU2m/SFswlVsCVgzyfyUE18zuZpErzeRYbFAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUpTBByVjqrbQXrkZ0FquJkv1v59UwHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzQzNTJlMzEzMjJlMzgzMjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0MUjANBgkq
hkiG9w0BAQsFAAOCAQEAK9wBcTCXFDZ40ViYfMV9XE2LbAiBbieGETeEPQ2Z9N1u
xgW/tK9YIYiuSmEW3TGLhMQYmGTjTd+Ibq3/YbwNIRa5IWUN3St3ueiiY2Nh/54q
1PLF3ynjNtnL7BDp5Dfgq4xyiehetMhtDfKoNAPc39Vcx2sDTnjNaB+EzDOp3KPn
MmNfw4hCEFSqyKw40tAB9LmID2xL5IE9dM9g3lLgwpdQCabUwQL5xpCkp1CFXtzd
rBfCqy40ph689VOei2gEk3GnWEevkp89sCQh35DESYZ6uBGeXEeFZyDMMAhtDJ4e
6ObsYrczGo0EI0OzPHQb2XEnzghCf6QYHbgqcPT9aQ==
-----END CERTIFICATE-----
Generated at Mon Jun 30 05:40:57 2025 by rpki-client