Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137342e302f32342d3234203d3e20323134303030.roa
File: 34352e38372e3137342e302f32342d3234203d3e20323134303030.roa (raw, json)
Hash identifier: sVSrLQNPzUIDvjxMl4J/XG15OBXFYEHILRkz9zMgqII=
Subject key identifier: 46:28:AB:91:2E:38:DA:7C:4F:A5:74:05:CE:7B:1B:A9:53:24:4F:BA
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 283E227EAAAB4BFE2467B7E8BEAF6D7675B4306E
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137342e302f32342d3234203d3e20323134303030.roa
Signing time: Wed 15 Oct 2025 07:55:08 +0000
ROA not before: Wed 15 Oct 2025 07:50:08 +0000
ROA not after: Wed 14 Oct 2026 07:55:08 +0000
asID: 214000
IP address blocks: 45.87.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:3e:22:7e:aa:ab:4b:fe:24:67:b7:e8:be:af:6d:76:75:b4:30:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Oct 15 07:50:08 2025 GMT
Not After : Oct 14 07:55:08 2026 GMT
Subject: CN=4628AB912E38DA7C4FA57405CE7B1BA953244FBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:6a:2c:71:a2:1b:cc:02:6d:12:31:59:80:
c2:74:42:59:93:e0:fe:6d:21:03:d7:58:6a:e5:f3:
e7:d3:23:77:97:57:95:2b:d8:a7:51:79:30:9c:f8:
41:a3:fe:bd:45:c9:a0:a5:73:b8:82:50:0f:41:55:
09:90:2f:35:bc:e4:85:53:d9:7c:2b:b7:95:04:b6:
6b:14:36:c5:53:21:90:36:e6:1f:5d:a1:ad:6b:39:
fb:20:2c:a6:fc:f8:63:7f:ea:90:c8:91:a9:55:52:
32:2c:07:f0:15:fd:2c:91:93:ec:7b:28:b6:e4:32:
c9:cb:c1:36:3f:b9:c6:b2:31:c0:40:e4:c6:fa:14:
0e:23:03:ec:14:cc:66:81:7f:41:ff:64:f8:32:d7:
c8:cd:dd:58:08:7e:1c:5e:4b:94:55:ed:f8:af:41:
18:1c:0e:b3:0b:9c:b9:ef:0d:8f:11:43:19:9e:a4:
2e:c9:42:19:48:d5:9b:34:e8:0b:f7:c1:72:b5:9e:
07:72:b9:c5:66:2e:5b:fd:b8:f0:94:84:43:09:cf:
2e:69:8b:f0:49:0a:9f:59:ad:3f:fe:46:b5:89:35:
5a:64:3a:c1:7f:7d:c8:18:e9:fb:97:a0:9d:e3:f9:
11:1c:80:2f:df:8f:7f:e5:ab:47:e3:3a:ff:e2:f8:
41:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:28:AB:91:2E:38:DA:7C:4F:A5:74:05:CE:7B:1B:A9:53:24:4F:BA
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137342e302f32342d3234203d3e20323134303030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.174.0/24
Signature Algorithm: sha256WithRSAEncryption
50:b4:97:e8:71:ff:2d:44:f3:fc:ac:04:0f:4f:1c:74:77:30:
59:74:a5:d1:9e:b4:78:e5:5b:46:3b:1a:46:b2:21:61:87:c6:
4a:5e:5a:67:d3:be:c5:31:03:da:39:2c:22:1f:42:de:59:d5:
5c:5d:cf:92:0e:87:e7:83:99:30:a0:3b:eb:da:a7:6c:8c:76:
f3:bb:0f:0d:30:4c:2c:d5:e4:93:39:53:5e:1d:57:e6:f2:75:
23:87:c0:c3:2d:7c:9e:ce:f9:8d:f3:61:f2:33:12:a5:b2:14:
96:5d:a9:47:15:4f:a2:2b:c2:e7:1e:1b:62:b0:36:62:73:fd:
0d:f9:49:43:ed:b3:90:e4:5e:56:a7:8a:b4:1b:ba:6c:61:fc:
78:15:56:90:86:9b:c5:63:01:bf:42:63:7b:f2:8a:eb:99:c7:
0b:b4:ee:3e:6a:8f:e0:24:71:9f:ee:1d:ff:75:36:5d:e3:0a:
4f:e1:5a:6f:fa:e2:f2:85:ac:5d:db:2f:a9:d6:75:49:43:1f:
c5:74:3f:78:51:8e:c6:66:3e:34:c1:b5:64:b4:01:8f:4c:4e:
b1:b5:3b:1b:60:25:26:76:49:7f:4e:02:35:c2:fd:e5:d2:28:
c1:3a:12:ca:bb:f7:52:69:27:1b:a2:df:04:e7:ab:64:89:88:
5c:53:5d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:25 2025 by rpki-client