Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133372e302f32342d3234203d3e20313337323335.roa
File: 34352e39312e3133372e302f32342d3234203d3e20313337323335.roa (raw, json)
Hash identifier: FJffnOL9KXxzhZJs+R16DnPP8iLRBq+0jo83DxUX8xo=
Subject key identifier: 69:9C:A2:F0:A9:C4:F1:6F:9E:F0:E2:A4:68:7A:A7:67:72:10:18:59
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 7872B899F38EF45CA4463B09D4CC23D1CE6AD3CD
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133372e302f32342d3234203d3e20313337323335.roa
Signing time: Fri 08 May 2026 01:47:11 +0000
ROA not before: Fri 08 May 2026 01:42:11 +0000
ROA not after: Fri 07 May 2027 01:47:11 +0000
asID: 137235
IP address blocks: 45.91.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:72:b8:99:f3:8e:f4:5c:a4:46:3b:09:d4:cc:23:d1:ce:6a:d3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: May 8 01:42:11 2026 GMT
Not After : May 7 01:47:11 2027 GMT
Subject: CN=699CA2F0A9C4F16F9EF0E2A4687AA76772101859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:df:96:4c:a2:2c:f0:63:d4:9f:23:1e:ff:e8:
85:21:b4:28:cb:c4:57:25:fe:a6:2f:75:61:c7:a4:
9e:2b:96:67:c9:9d:c9:01:5e:2f:49:0e:d3:0d:8d:
55:63:e8:56:0f:0b:08:3a:4b:bf:62:90:a0:53:af:
64:f3:ad:66:89:bf:d5:86:90:8d:78:0b:ae:24:c1:
3b:97:c1:28:72:d2:c7:38:16:88:a3:1b:87:de:46:
5c:2d:4e:ac:a0:b0:83:9f:02:2c:b0:ef:03:cf:b9:
a8:66:37:a5:7f:f3:f5:72:02:9e:30:87:fa:f1:de:
38:83:f8:0d:46:41:51:e5:d7:6e:b4:cf:bb:3c:38:
57:39:fa:25:5c:8d:3c:24:d7:bc:06:4b:6b:b2:33:
4b:2a:11:9f:8c:d9:fa:74:04:87:6d:d7:98:b4:e9:
6f:a7:ea:fd:db:4b:29:13:72:3c:34:f3:c2:be:b4:
c5:8f:00:fc:9a:40:94:45:22:40:8c:88:bd:4e:00:
62:fc:b7:84:50:89:c0:e7:59:11:f7:37:9c:7f:f4:
61:fa:8b:20:c6:76:86:18:06:f0:24:e3:f9:f2:dc:
11:f0:f6:e1:0e:67:9e:8b:0b:cd:ad:1c:df:f5:47:
8b:e9:f3:83:a9:2f:30:2d:45:1a:67:84:5d:e8:40:
36:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9C:A2:F0:A9:C4:F1:6F:9E:F0:E2:A4:68:7A:A7:67:72:10:18:59
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133372e302f32342d3234203d3e20313337323335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.137.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e1:01:39:f2:0a:07:ea:90:69:e8:38:fd:12:50:3a:7f:92:
aa:ba:ae:60:c6:b8:7f:cf:0c:78:73:61:90:42:ab:cb:35:93:
a4:61:b9:57:1a:c6:ac:dd:3d:41:75:85:86:02:ed:84:03:8c:
bb:56:61:52:bd:d6:77:3a:8f:0f:3a:fb:b1:92:96:5c:b6:93:
10:78:2f:6b:e3:c7:24:6c:49:2d:d4:10:dd:c2:b9:b4:d3:e7:
41:51:75:ce:78:b6:91:8b:d7:3a:c7:1d:00:9d:c9:ef:11:3c:
67:9d:07:5b:8e:58:51:9d:c9:8c:88:7b:a5:76:91:ca:71:b0:
b0:b8:3a:3d:75:de:58:27:e5:37:fc:c5:ff:52:ac:7d:7b:ee:
5c:ae:19:c4:5e:02:cb:8f:e3:ea:c7:03:2b:0e:1e:71:0c:83:
28:6c:90:15:80:f8:5e:ee:f2:be:7d:f2:84:de:8b:d8:93:be:
f6:0d:80:6a:dc:f0:fd:6f:f1:9b:0c:42:dc:2a:8a:91:76:03:
6a:95:2c:d2:76:da:04:42:da:ae:03:5a:b0:cb:c3:b3:7a:12:
86:e7:1b:6c:b8:2b:c3:4d:c8:42:1b:68:14:30:1e:4b:a2:d3:
0e:61:31:c8:52:76:25:c3:09:ff:3f:18:29:0d:4b:56:fd:bf:
7d:17:76:dd
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUeHK4mfOO9FykRjsJ1Mwj0c5q080wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNjA1MDgwMTQyMTFaFw0yNzA1MDcwMTQ3MTFaMDMxMTAvBgNV
BAMTKDY5OUNBMkYwQTlDNEYxNkY5RUYwRTJBNDY4N0FBNzY3NzIxMDE4NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD235ZMoizwY9SfIx7/6IUhtCjL
xFcl/qYvdWHHpJ4rlmfJnckBXi9JDtMNjVVj6FYPCwg6S79ikKBTr2TzrWaJv9WG
kI14C64kwTuXwShy0sc4FoijG4feRlwtTqygsIOfAiyw7wPPuahmN6V/8/VyAp4w
h/rx3jiD+A1GQVHl1260z7s8OFc5+iVcjTwk17wGS2uyM0sqEZ+M2fp0BIdt15i0
6W+n6v3bSykTcjw088K+tMWPAPyaQJRFIkCMiL1OAGL8t4RQicDnWRH3N5x/9GH6
iyDGdoYYBvAk4/ny3BHw9uEOZ56LC82tHN/1R4vp84OpLzAtRRpnhF3oQDbJAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUaZyi8KnE8W+e8OKkaHqnZ3IQGFkwHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzQzNTJlMzkzMTJlMzEzMzM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM3MzIzMzM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LVuJMA0GCSqGSIb3DQEBCwUAA4IBAQCd4QE58goH6pBp6Dj9ElA6f5Kquq5gxrh/
zwx4c2GQQqvLNZOkYblXGsas3T1BdYWGAu2EA4y7VmFSvdZ3Oo8POvuxkpZctpMQ
eC9r48ckbEkt1BDdwrm00+dBUXXOeLaRi9c6xx0AncnvETxnnQdbjlhRncmMiHul
dpHKcbCwuDo9dd5YJ+U3/MX/Uqx9e+5crhnEXgLLj+PqxwMrDh5xDIMobJAVgPhe
7vK+ffKE3ovYk772DYBq3PD9b/GbDELcKoqRdgNqlSzSdtoEQtquA1qwy8OzehKG
5xtsuCvDTchCG2gUMB5LotMOYTHIUnYlwwn/PxgpDUtW/b99F3bd
-----END CERTIFICATE-----
Generated at Wed May 13 06:23:29 2026 by rpki-client