Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS399073.roa
File: AS399073.roa (raw, json)
Hash identifier: mMFlcBnSXsshZuzSL+GVfRlPb/lS3zpzD9ZvEvHBu6s=
Subject key identifier: BC:00:C5:89:CF:C9:B8:3A:B3:0A:6C:0C:46:78:1D:A6:D3:18:E8:31
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 30997FC3B4365826D0DCD23939F0152508F257B6
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS399073.roa
Signing time: Sun 26 Jul 2026 15:49:14 +0000
ROA not before: Sun 26 Jul 2026 15:44:14 +0000
ROA not after: Sun 25 Jul 2027 15:49:14 +0000
asID: 399073
IP address blocks: 193.142.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:99:7f:c3:b4:36:58:26:d0:dc:d2:39:39:f0:15:25:08:f2:57:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 26 15:44:14 2026 GMT
Not After : Jul 25 15:49:14 2027 GMT
Subject: CN=BC00C589CFC9B83AB30A6C0C46781DA6D318E831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:93:74:72:e3:a3:ee:85:f7:ab:8f:aa:fd:
83:83:4d:8d:7f:bc:3d:e1:7f:7b:d9:9b:b9:ac:ad:
8d:2a:f5:a0:be:2f:b7:36:47:54:46:36:46:32:19:
48:8e:9c:c3:68:0a:7b:11:76:17:2e:78:f6:e6:d2:
e6:8d:4d:95:48:f3:e9:2a:31:27:f2:2c:7f:e9:3d:
95:67:08:dc:c9:1f:d5:d0:f1:a7:b8:9c:62:d4:ba:
b5:4e:0d:5f:ed:75:ef:60:e5:28:89:be:4e:73:bc:
32:33:72:fb:ae:32:c7:f9:2e:dd:92:55:59:cd:96:
23:2c:7a:37:f5:74:41:5b:52:4c:5f:52:c3:d5:51:
12:a3:fb:25:31:05:6c:1b:b3:c8:e3:63:04:92:9f:
76:36:6d:be:f8:69:e6:bb:3f:03:7a:69:66:71:fa:
07:68:53:a1:0f:25:49:df:9d:59:94:36:9e:87:8c:
31:68:d4:6c:6a:67:df:e2:5d:1b:d0:27:46:8d:e0:
ac:15:76:10:13:87:31:48:85:bf:76:ec:e3:f9:43:
6f:6b:7c:fd:0f:f3:c0:cc:64:99:78:8f:4f:6b:4b:
34:31:39:a1:59:8a:71:9d:2a:55:a2:e3:35:6e:ee:
64:7c:74:8b:96:8e:a9:c0:3c:f7:53:2a:65:68:78:
e5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:00:C5:89:CF:C9:B8:3A:B3:0A:6C:0C:46:78:1D:A6:D3:18:E8:31
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS399073.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.22.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:f2:59:60:4f:d8:75:c9:f1:18:48:8e:0f:40:c7:61:19:89:
4e:23:83:69:83:ce:e3:f5:06:b9:a8:15:59:cd:d9:81:d7:db:
8b:51:00:e7:0e:43:31:27:cb:ae:d4:6e:3a:20:e1:d3:1f:7d:
a2:6a:62:35:51:b2:5f:da:41:5a:3e:86:57:f9:cf:72:5c:62:
ff:c4:54:42:86:c1:c1:42:5a:dd:17:1e:3c:cc:e0:d8:f5:17:
e0:74:d7:3d:f0:b4:97:45:76:aa:97:88:fc:9a:ec:84:ff:13:
44:28:e2:b3:10:ec:45:dc:7f:87:07:23:26:0f:d1:57:a9:34:
55:37:55:35:d7:d6:81:16:56:c4:f6:62:e6:a8:40:11:cf:c9:
4c:b2:e5:7e:33:86:6e:96:f9:f2:d6:f5:68:d4:93:e4:15:a2:
26:77:7a:00:9c:96:0f:5d:e5:bb:f2:6b:21:87:e4:5a:27:40:
8b:7b:08:c2:a1:b0:6d:3e:0b:5f:b1:5a:e8:f8:19:a3:21:88:
b5:41:eb:c7:ef:b7:c4:16:f6:2a:53:78:c5:68:40:00:20:68:
6b:d3:f2:69:cc:61:ee:7c:18:71:24:9e:25:82:34:e1:bd:c2:
ed:72:a4:e5:7d:61:67:5f:26:7d:5e:81:ad:0e:f6:fd:2f:86:
fa:31:f2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:59:45 2026 by rpki-client