Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133392e302f32342d3234203d3e2038373936.roa
File: 34352e39312e3133392e302f32342d3234203d3e2038373936.roa (raw, json)
Hash identifier: AQp4IY3+JWwU0AIke4E/KY8kW9R1Ux2CaA5ctf+QLVg=
Subject key identifier: 70:B3:C4:9E:42:CE:A1:E8:62:F2:11:71:E9:A0:E6:DB:DA:F3:C4:D0
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 07062CFDEBBD1CB2103F2F2267B5F3E96C04A6A8
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133392e302f32342d3234203d3e2038373936.roa
Signing time: Tue 09 Jun 2026 08:49:21 +0000
ROA not before: Tue 09 Jun 2026 08:44:21 +0000
ROA not after: Tue 08 Jun 2027 08:49:21 +0000
asID: 8796
IP address blocks: 45.91.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:06:2c:fd:eb:bd:1c:b2:10:3f:2f:22:67:b5:f3:e9:6c:04:a6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jun 9 08:44:21 2026 GMT
Not After : Jun 8 08:49:21 2027 GMT
Subject: CN=70B3C49E42CEA1E862F21171E9A0E6DBDAF3C4D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:51:ee:d2:21:46:df:93:a5:6b:7d:cf:4b:5f:
81:bb:c6:84:ef:ee:27:c0:2a:01:70:ab:c3:6a:b8:
dd:a1:54:87:cd:17:52:cb:42:f1:0e:5d:19:22:0a:
5b:20:d8:fd:ca:06:e6:64:d8:7b:d2:56:0b:2e:d4:
50:a4:f8:c0:c8:f4:26:ce:ee:09:c6:59:5b:fd:bc:
ca:c5:d7:d2:77:bd:45:cb:5d:77:32:78:f9:f3:8f:
19:fa:31:46:b5:9b:4b:b3:86:cb:0a:6c:17:c7:04:
eb:eb:44:16:38:73:0d:be:0b:57:6e:8f:8f:3d:9a:
db:91:69:b3:82:0a:5d:ef:4c:4b:86:a0:f3:81:c9:
69:d5:5d:54:23:36:79:8f:fd:97:ef:06:fd:41:8a:
c0:a6:bb:47:f9:1d:ee:1f:0e:0e:7c:89:49:38:f8:
02:7c:79:69:00:de:cb:d7:1d:7d:6b:43:59:b8:74:
a0:98:82:80:f6:2d:cd:e9:78:08:60:54:06:16:f4:
cd:f6:75:6b:a5:5c:6a:5c:8e:36:6e:83:7f:67:7f:
43:89:00:58:f8:57:f8:b2:ab:41:6c:9a:fe:58:01:
0d:72:14:9a:dc:91:9a:fe:45:38:e1:32:f8:e4:cd:
4f:c8:d7:4b:09:78:06:e0:ec:92:3d:50:83:6b:30:
38:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B3:C4:9E:42:CE:A1:E8:62:F2:11:71:E9:A0:E6:DB:DA:F3:C4:D0
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133392e302f32342d3234203d3e2038373936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.139.0/24
Signature Algorithm: sha256WithRSAEncryption
22:98:0f:70:d1:7b:cf:a5:9c:25:d2:c5:65:56:b9:75:34:f3:
44:57:c1:54:e6:b1:78:06:cd:fb:ba:0f:bc:15:d1:ab:5c:24:
9a:0a:84:78:9f:ed:30:71:23:df:c8:10:c6:d8:8d:bd:b4:dc:
7d:ae:31:60:1c:f6:fb:af:d3:88:ae:53:1a:b0:99:77:8b:13:
ce:97:6c:48:7c:80:ed:17:bb:d6:2b:29:43:bb:6d:02:13:d7:
95:34:3c:ce:0e:52:87:e3:31:98:52:b0:0c:b1:1a:53:82:b2:
bb:2f:1f:0f:37:bc:3c:0d:ab:55:80:18:20:6e:d5:af:7c:fd:
68:93:fc:a7:27:0a:e2:22:90:23:58:71:1d:58:07:55:1b:a4:
9e:8d:0f:99:6e:0a:e7:25:81:a6:02:d2:10:85:a6:2d:36:df:
fa:f2:84:ca:04:60:2b:4a:8a:8d:1b:93:11:e7:41:69:c7:4a:
ff:0f:35:57:c1:37:ca:a6:55:db:a9:c1:ad:60:e4:41:67:3b:
a5:3f:50:bb:10:5d:a0:a0:ba:3c:b0:2c:0b:d6:3a:af:a2:e1:
19:7f:70:41:34:93:3f:1d:1e:83:a2:42:58:d8:2c:99:cf:08:
dd:7a:2f:cf:82:fc:6f:f8:74:f9:2d:53:6e:77:66:32:72:df:
c0:a5:e8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:28 2026 by rpki-client