Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e20383334.roa
File: 34352e38372e3137352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: qcC6twhvGNzIcp/DRmYtNKtVgHJbiNAEz5UBqrtr5AQ=
Subject key identifier: D5:2F:72:23:69:B8:B5:D9:F2:4F:C7:AF:74:74:02:50:96:CC:9D:0B
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 697041008E5BA76606E9EABD364A0478A2EF515C
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e20383334.roa
Signing time: Fri 25 Sep 2026 09:17:44 +0000
ROA not before: Fri 25 Sep 2026 09:12:44 +0000
ROA not after: Fri 24 Sep 2027 09:17:44 +0000
asID: 834
IP address blocks: 45.87.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:70:41:00:8e:5b:a7:66:06:e9:ea:bd:36:4a:04:78:a2:ef:51:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Sep 25 09:12:44 2026 GMT
Not After : Sep 24 09:17:44 2027 GMT
Subject: CN=D52F722369B8B5D9F24FC7AF7474025096CC9D0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:33:e7:a5:d8:eb:40:d9:b6:9c:af:b3:ec:
c6:79:af:12:26:2f:57:1f:85:ce:76:46:08:96:73:
93:35:35:cf:df:46:81:61:64:35:54:87:7e:f6:32:
bb:bc:3c:91:ea:b2:18:d4:8b:89:f2:91:dd:ae:0f:
c5:8f:a3:42:34:50:38:1e:5d:37:0c:96:5b:55:1f:
b4:54:27:25:8a:0e:1a:82:a7:3a:48:de:70:e7:8d:
79:7d:bf:de:ed:f1:28:ec:44:6c:ee:ea:14:d6:67:
36:59:a9:46:23:21:36:f5:62:ff:90:b6:66:29:6e:
d6:5c:1f:7a:0f:35:37:12:85:5d:2d:f9:4f:c5:0a:
28:76:a5:89:a8:77:37:db:99:f0:b3:c9:1f:fd:c8:
cc:5d:cc:5f:e4:76:c1:d5:3c:d0:b4:a2:29:98:92:
0f:b2:cb:e9:b4:75:1e:2e:a9:77:97:b7:85:78:68:
af:7e:e3:68:f6:1f:e7:1f:24:e6:04:2b:b9:c1:c4:
2c:a4:57:58:16:65:f3:1f:39:84:08:3c:9f:f2:f3:
17:08:30:dd:e1:16:2c:ce:29:af:90:ad:e9:89:e5:
21:de:20:22:11:54:02:2f:a8:88:cf:32:d5:5b:8b:
69:b4:11:9b:75:0d:68:ea:ea:d0:56:61:70:c9:93:
8c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2F:72:23:69:B8:B5:D9:F2:4F:C7:AF:74:74:02:50:96:CC:9D:0B
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.175.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:f5:01:de:d0:33:7b:ae:57:eb:27:f5:f8:ac:c1:02:cf:14:
54:31:64:63:22:ea:fb:21:e3:0f:5e:e6:b7:c6:f5:27:50:83:
8a:2c:46:71:a6:c0:e0:25:2d:b6:71:69:19:27:78:89:d1:bd:
2f:74:78:76:7d:1f:9b:22:ed:b4:b4:33:7a:9e:18:fa:68:52:
40:2f:21:0f:d5:71:e0:28:0b:b6:81:46:a1:22:b3:75:c7:32:
7f:be:de:0b:0d:3f:0a:84:8d:60:19:27:fe:0d:99:3d:fa:89:
60:fb:fb:2d:c6:05:67:52:75:40:ec:45:cd:88:d1:ec:e5:62:
5b:c5:62:1f:e3:0f:23:7a:91:ab:70:98:f3:08:ab:6d:ff:6a:
b2:42:ad:76:40:c8:d3:bf:de:6c:70:26:3f:df:57:7e:0f:6c:
01:35:a0:26:3b:44:94:65:57:c0:67:36:b4:42:4b:15:fd:a0:
4e:20:35:b1:fe:f9:b9:fe:a6:b6:ae:7c:57:0f:aa:df:d6:e9:
31:d9:96:e9:6c:2c:d6:7c:68:c2:1f:a5:fd:82:75:6a:7b:48:
10:23:10:51:3d:d6:43:a4:08:4d:fc:79:12:86:27:9b:53:c3:
59:e9:0c:df:b4:a8:f5:4d:5a:de:92:9a:f2:ed:72:83:8c:fe:
db:06:5a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:40:46 2026 by rpki-client