Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137392e302f32342d3234203d3e20343030303339.roa
File: 352e3138312e3137392e302f32342d3234203d3e20343030303339.roa (raw, json)
Hash identifier: l04YjqlLhiUhjH9CRLl0ESBOCV7wF7kMRATJa9/eZ84=
Subject key identifier: 35:1B:E6:37:5C:D2:22:44:02:88:C6:6F:57:3F:C1:BD:98:88:27:8F
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 193455BC90015257D5242853A1032228B7450D7B
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137392e302f32342d3234203d3e20343030303339.roa
Signing time: Wed 01 Apr 2026 07:29:04 +0000
ROA not before: Wed 01 Apr 2026 07:24:04 +0000
ROA not after: Wed 31 Mar 2027 07:29:04 +0000
asID: 400039
IP address blocks: 5.181.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:34:55:bc:90:01:52:57:d5:24:28:53:a1:03:22:28:b7:45:0d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Apr 1 07:24:04 2026 GMT
Not After : Mar 31 07:29:04 2027 GMT
Subject: CN=351BE6375CD222440288C66F573FC1BD9888278F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:35:47:af:29:fc:cc:22:32:f1:05:de:82:79:
e1:3c:91:08:67:a1:33:6a:f8:16:64:f5:ab:6f:64:
cf:7d:7d:c0:49:be:93:e9:ed:61:ce:57:e8:9e:e4:
df:cf:a7:a3:e8:d5:4f:f2:17:c2:46:e6:f9:79:8c:
e5:12:2c:28:83:22:a1:a8:df:20:c9:64:17:b6:e5:
48:0a:ef:8d:c0:cf:3d:8f:7c:b4:50:c6:69:d7:86:
9e:97:76:07:4f:5d:b4:bb:5f:e7:4b:0c:e4:24:48:
e6:b0:d4:01:7f:87:03:4c:b9:d2:48:4d:1c:82:ae:
ec:94:12:15:c4:bf:f1:9c:4e:97:32:28:13:88:eb:
cb:d8:13:20:67:2e:aa:6d:a2:d8:e1:c8:67:5b:c4:
13:b1:c8:45:6f:b7:11:86:64:ee:0c:90:18:8f:0a:
2d:1d:73:6d:ba:8f:00:16:5b:b9:0b:87:e1:a7:b2:
20:87:94:bb:20:15:08:02:45:e6:db:99:e9:98:a9:
8d:f0:32:d7:f9:b3:52:e0:f1:ff:43:5a:93:45:f2:
33:37:16:60:bf:bd:8a:18:bc:14:ce:60:0d:5f:f5:
df:4a:12:80:39:97:a4:7f:4d:85:39:e9:27:20:9b:
f6:8d:68:83:55:6a:17:39:34:a4:53:f0:64:ff:17:
d8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1B:E6:37:5C:D2:22:44:02:88:C6:6F:57:3F:C1:BD:98:88:27:8F
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137392e302f32342d3234203d3e20343030303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.179.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:11:37:cf:dd:33:35:8d:dd:2b:10:2c:92:7b:11:e1:0a:25:
7e:a7:fd:44:07:91:81:59:18:a5:3a:f9:1d:ec:5e:84:ff:c7:
a2:46:3a:34:1c:aa:fc:cc:68:14:59:17:0d:b5:90:5b:7f:db:
c5:e1:48:e8:5e:5b:b4:e5:b4:df:58:fc:9e:6f:5f:16:2c:a8:
93:43:ec:0a:63:5e:05:11:f2:b0:fb:14:64:20:1d:58:80:b6:
52:45:e9:91:71:9f:9a:cc:59:c8:90:20:b2:7a:69:8c:ca:f3:
d3:fd:da:5e:16:87:64:34:83:d6:43:5f:ae:5a:fc:c3:32:be:
c4:ce:fe:51:c1:eb:94:13:1c:12:eb:11:6e:49:91:e8:00:c5:
b2:70:e6:a9:08:be:f6:0e:2a:fb:9e:11:50:f1:13:9e:7d:c2:
c2:97:3e:f6:62:8d:c2:cf:75:89:8f:b9:3b:44:5a:f8:63:f6:
75:de:5d:44:89:24:6b:a1:e6:d9:1f:8c:1c:e2:94:fd:04:72:
c5:e0:73:9c:aa:89:2d:e0:1b:4b:18:71:e9:2a:49:6d:fe:a1:
db:b8:a8:d7:2c:c7:64:00:8a:0f:61:42:75:29:83:51:d9:6f:
45:b9:a6:9f:c4:7b:db:68:5f:72:8a:2c:62:b4:31:6c:3f:2a:
7d:a3:20:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:25:33 2026 by rpki-client