Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3135382e35362e302f32342d3234203d3e20313533333933.roa
File: 34352e3135382e35362e302f32342d3234203d3e20313533333933.roa (raw, json)
Hash identifier: 8UvMlmCKio6NWzTevJOyUwmw1cZlYAolu9sJwLHy6BI=
Subject key identifier: 34:F3:5C:F0:8B:C1:E2:07:B5:68:54:95:52:49:D3:6A:83:C0:52:A6
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 0FB31C2C64B67E286507CC1802CAF1F910AE45ED
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3135382e35362e302f32342d3234203d3e20313533333933.roa
Signing time: Thu 12 Mar 2026 15:46:48 +0000
ROA not before: Thu 12 Mar 2026 15:41:48 +0000
ROA not after: Thu 11 Mar 2027 15:46:48 +0000
asID: 153393
IP address blocks: 45.158.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b3:1c:2c:64:b6:7e:28:65:07:cc:18:02:ca:f1:f9:10:ae:45:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Mar 12 15:41:48 2026 GMT
Not After : Mar 11 15:46:48 2027 GMT
Subject: CN=34F35CF08BC1E207B56854955249D36A83C052A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:99:fc:da:86:80:56:72:7c:c3:33:53:9f:
16:e9:2b:71:82:da:9b:d4:00:c4:42:27:58:03:de:
11:e6:90:10:ee:21:76:86:06:25:20:c6:23:a8:de:
fd:e1:c4:52:bf:6c:36:47:0a:e8:5e:e4:27:cb:46:
a8:e2:3f:db:11:72:aa:be:eb:f0:f0:44:9b:33:90:
fa:86:f1:f4:d5:56:1d:b4:e6:d8:ab:6e:c9:e9:ec:
74:85:dc:0d:b8:52:66:6e:d5:67:77:7b:3e:db:1e:
70:0e:93:83:e5:4c:ad:d6:40:08:91:a1:6e:7b:66:
ec:67:b7:a8:f5:a8:fa:2b:8d:be:ad:c7:12:35:09:
09:b7:7c:45:a1:95:75:e7:fd:fd:ee:70:1f:92:31:
cd:b8:d3:ca:af:1a:9d:f4:d5:2f:99:f9:00:3b:0e:
e2:26:a1:45:fa:28:22:6f:90:52:b8:77:7c:e2:a0:
3c:d8:90:b3:f1:ea:41:35:98:72:e0:2b:25:6f:3e:
53:5b:ef:11:69:23:30:76:87:17:79:da:9f:d4:e4:
87:55:85:7d:a7:47:2f:36:7c:31:74:32:f4:57:d3:
2c:99:8c:2c:da:f3:35:70:38:d8:75:1e:e0:53:a5:
fd:2c:7e:d1:e7:0e:39:70:ec:59:2b:45:ff:8f:50:
3d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F3:5C:F0:8B:C1:E2:07:B5:68:54:95:52:49:D3:6A:83:C0:52:A6
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3135382e35362e302f32342d3234203d3e20313533333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.56.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:47:32:26:c3:07:4a:1a:c2:12:8b:4f:33:d9:37:87:c1:03:
9a:fe:9b:f4:7e:99:34:fb:4e:6a:41:14:1f:d4:b8:e0:b4:fc:
d8:10:4e:c4:f0:41:04:25:ad:d2:cf:e1:c5:b6:47:23:83:c0:
2a:8b:2e:80:bc:6a:92:a3:ae:75:95:d6:fd:f7:72:15:bd:3f:
3b:b1:d9:d9:8e:30:e5:09:a0:c7:30:64:3e:d7:4a:d8:99:12:
e0:71:33:19:6a:0c:ce:ef:fc:15:21:1c:c9:e9:6c:91:65:8b:
d3:a2:f1:6b:eb:7e:f5:a4:aa:b7:51:93:63:ef:43:d6:68:c8:
74:f6:26:ec:d1:40:4d:e9:0f:8c:ae:fa:8e:ca:64:b2:2e:84:
de:35:af:49:cd:f3:f8:b0:e6:77:14:87:33:54:9e:a1:52:85:
2f:bf:da:6c:18:0f:2a:05:da:a1:6e:66:2b:c1:bf:82:ef:19:
0c:9b:84:6c:0b:48:c2:7f:9d:cd:7d:da:26:94:8a:39:3a:34:
11:be:c2:e3:1d:3a:60:7e:c1:92:b2:1c:fb:72:55:4d:c8:a0:
73:c9:cf:34:ef:75:52:8b:cb:d8:2d:21:f5:83:84:64:eb:92:
d6:46:ae:7e:64:ca:11:6e:46:5e:47:7f:dc:e4:c5:32:25:c3:
5b:cf:ee:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:30:16 2026 by rpki-client