Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38332e302f32342d3234203d3e20313938323530.roa
File: 34352e31322e38332e302f32342d3234203d3e20313938323530.roa (raw, json)
Hash identifier: dAgkyQWcIIFqI5v1xFeUcHpydGYhZgHtHnLKYqfAWmM=
Subject key identifier: 18:9F:89:2C:77:D6:89:F6:FB:C9:FC:7C:D3:E3:04:00:76:A1:49:98
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 54E03FFED0D96E776DB9C53E1F7A0B67E0BC5238
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38332e302f32342d3234203d3e20313938323530.roa
Signing time: Mon 11 May 2026 18:42:20 +0000
ROA not before: Mon 11 May 2026 18:37:20 +0000
ROA not after: Mon 10 May 2027 18:42:20 +0000
asID: 198250
IP address blocks: 45.12.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e0:3f:fe:d0:d9:6e:77:6d:b9:c5:3e:1f:7a:0b:67:e0:bc:52:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: May 11 18:37:20 2026 GMT
Not After : May 10 18:42:20 2027 GMT
Subject: CN=189F892C77D689F6FBC9FC7CD3E3040076A14998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d1:4b:ba:1b:3a:14:65:d0:18:f5:71:31:cd:
71:94:eb:f4:3b:4c:75:5e:65:32:47:df:d3:a5:d0:
14:b9:79:39:ce:0d:f2:54:45:d1:c4:df:f7:4d:e7:
e6:0f:df:40:4a:bf:6c:1c:89:4c:fd:6b:8a:4d:91:
2f:2b:79:3b:e5:2f:d6:4e:2d:fb:e2:53:17:64:53:
40:08:1d:73:cf:cc:60:7d:df:86:2a:97:fe:8b:c1:
46:ef:cf:ee:b0:39:4f:1e:d8:8a:43:a2:a9:e6:90:
4d:58:f9:8a:2a:b5:bc:48:0e:0a:05:50:b6:08:c9:
14:56:35:16:1e:2a:d8:c1:d5:57:7f:77:3a:dd:28:
a2:39:36:6f:14:f6:ed:3f:9f:99:12:7c:a6:6f:08:
d2:32:9b:65:0f:78:91:83:ee:90:fc:57:07:72:c6:
f6:b3:b4:18:8a:e7:45:6d:8f:f3:0d:d2:fd:70:1a:
f4:da:9e:b1:22:b5:60:b5:57:fd:b5:ee:56:6e:87:
41:f6:43:12:80:ac:6a:f5:4d:08:40:52:e2:75:50:
2e:f1:96:bc:71:8e:32:50:c1:83:63:83:59:da:7f:
6a:04:ef:b4:ec:75:69:99:f0:e2:93:b0:f6:d1:68:
3f:d2:15:60:69:0c:c4:e2:c3:de:1c:df:47:e9:77:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9F:89:2C:77:D6:89:F6:FB:C9:FC:7C:D3:E3:04:00:76:A1:49:98
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38332e302f32342d3234203d3e20313938323530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.83.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:a3:7e:0b:9c:9f:c9:4b:e1:cd:d3:92:d6:68:17:0c:b6:5a:
87:ea:50:86:d9:9a:cd:b1:32:fc:32:27:ab:76:2a:d2:a4:a4:
f0:f7:43:57:e6:4f:b9:ee:90:45:d5:52:32:4f:11:8e:69:ac:
21:7e:3a:f1:b5:0b:d1:f2:ba:d1:c3:8b:82:ab:a6:26:fa:10:
18:d7:42:f6:4f:19:31:cc:9a:01:4a:90:c0:5c:58:d9:91:72:
59:94:f5:c8:50:d2:ec:21:6e:25:1e:61:8f:87:b0:72:dd:a6:
33:95:c4:71:1c:3e:06:f7:23:21:1d:c7:fc:4c:b8:3f:68:82:
68:cb:d9:26:24:63:11:32:9c:60:56:d4:f5:fd:c8:cd:59:28:
ab:62:61:36:ea:1d:21:ba:37:f2:55:18:56:71:9b:f5:f0:40:
3c:8f:9f:b7:75:71:2a:b8:4e:ff:fd:b1:c2:28:0e:26:75:38:
f4:1f:25:8b:32:c4:e8:07:77:a5:53:ca:83:4b:05:88:ba:2e:
d1:12:d1:7c:10:e4:6d:ce:b0:47:a6:c4:e7:2a:95:41:91:27:
95:49:0e:d0:b7:5d:d4:60:41:1f:6f:e2:6d:28:12:d9:0c:79:
a9:c6:c8:7c:ad:02:e2:5f:f8:7c:79:be:30:0e:b1:67:95:45:
5b:b3:50:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:09 2026 by rpki-client