Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133362e302f32342d3234203d3e20323132333533.roa
File: 34352e39312e3133362e302f32342d3234203d3e20323132333533.roa (raw, json)
Hash identifier: GrC4SC+F/nWiGjhJptqbSoOfCe1VsuzPR23MJUQhkAg=
Subject key identifier: 8F:CF:77:99:58:5D:F6:61:C5:55:72:63:5C:33:5E:4E:55:A2:F9:0E
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 6F039CD73B807953E63F693F2FBB4EBA6430EF62
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133362e302f32342d3234203d3e20323132333533.roa
Signing time: Fri 12 Jun 2026 13:47:33 +0000
ROA not before: Fri 12 Jun 2026 13:42:33 +0000
ROA not after: Fri 11 Jun 2027 13:47:33 +0000
asID: 212353
IP address blocks: 45.91.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:03:9c:d7:3b:80:79:53:e6:3f:69:3f:2f:bb:4e:ba:64:30:ef:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jun 12 13:42:33 2026 GMT
Not After : Jun 11 13:47:33 2027 GMT
Subject: CN=8FCF7799585DF661C55572635C335E4E55A2F90E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:00:86:01:19:2c:31:06:77:ce:83:58:3f:
6f:c2:44:b8:d7:87:72:bb:81:d0:9f:54:08:35:f2:
87:ef:55:b5:4b:b2:46:2e:1f:89:0c:f1:77:4b:ac:
64:51:35:65:09:46:94:7a:f4:e7:26:97:ea:c4:66:
0a:96:bc:3a:53:42:39:57:40:08:a4:67:f7:90:b0:
1e:f5:3b:64:13:de:5f:11:d4:cb:91:32:40:fa:26:
5e:3c:8d:ac:a2:dd:f3:79:01:3c:16:7b:01:00:71:
9d:57:58:47:83:ea:de:a6:17:cd:f5:bc:e8:09:af:
6c:48:a0:23:40:5a:4f:cd:43:0e:1d:7f:60:0b:ad:
f9:1f:4c:d6:39:8a:b8:f3:be:88:d3:e8:a3:5e:78:
bb:d5:ff:c1:07:58:1b:fe:b1:10:20:6e:1b:c9:62:
70:0e:d8:03:e7:e6:dc:fe:98:ae:d7:d1:88:3e:61:
1b:70:92:ce:da:96:8e:2b:e0:a6:ed:b2:34:c4:db:
a5:92:48:3e:d6:77:59:57:7e:5f:0f:49:9e:8a:de:
a7:9b:ea:77:d1:cf:87:07:08:db:c0:78:01:5c:49:
07:25:56:bc:9b:59:36:98:c3:9d:83:d1:b2:46:bd:
cc:bb:d3:39:5d:b2:75:33:ac:df:69:dc:23:66:23:
fb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CF:77:99:58:5D:F6:61:C5:55:72:63:5C:33:5E:4E:55:A2:F9:0E
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133362e302f32342d3234203d3e20323132333533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.136.0/24
Signature Algorithm: sha256WithRSAEncryption
98:23:e3:ef:97:80:a1:7b:11:50:2b:23:e7:70:8d:7b:73:0f:
69:1f:d5:fb:f1:92:08:ed:91:49:29:b6:72:cd:b6:6f:78:67:
68:d8:57:26:94:97:d2:0b:b2:93:3c:bd:e3:c4:5b:bf:fb:81:
90:cc:cd:7c:a8:21:bd:44:38:47:53:66:7b:12:98:3a:16:29:
9a:a4:46:58:d4:3d:9d:7e:c7:b6:8b:22:f5:53:21:dc:e2:a1:
e5:d3:2a:aa:74:da:c7:5a:13:89:dd:32:16:49:4f:4e:8c:50:
fb:14:4a:06:3f:85:c2:9a:59:a9:8a:be:dc:93:31:12:e1:94:
25:1f:f8:fe:dd:15:da:c8:27:bd:82:e1:e7:9a:d9:cc:af:98:
e8:da:5d:bf:de:a8:ed:01:b3:d6:67:b9:23:b8:89:e8:84:ae:
ef:63:85:14:ad:b5:3e:1a:e9:c8:ce:43:bf:e4:d1:bf:8e:96:
a1:8e:90:d2:cf:a9:d2:7d:51:3a:26:5b:b2:21:d3:20:90:fa:
cb:39:dc:36:67:22:d3:63:91:34:e0:d7:5f:09:67:bf:dd:fc:
15:e7:ee:1c:75:4f:a8:62:8d:c2:6d:9e:04:a6:57:44:f6:d9:
d2:aa:ad:16:3e:84:62:c7:46:4e:e3:b6:d5:7d:9f:62:47:53:
ab:1d:f6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:00:26 2026 by rpki-client