Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e20313437323831.roa
File: 3139332e33372e3233392e302f32342d3234203d3e20313437323831.roa (raw, json)
Hash identifier: F5aObOrOX2pqGAG5yv07UWkK0EDF1EJEImpEdXP4Qyg=
Subject key identifier: A1:15:EF:06:F9:E5:8D:8D:F5:4F:69:A5:89:B2:64:0D:FC:FC:91:D1
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 28022F5A6A8D0D9EDC10ED26F74BE73971C35454
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e20313437323831.roa
Signing time: Mon 14 Sep 2026 02:35:45 +0000
ROA not before: Mon 14 Sep 2026 02:30:45 +0000
ROA not after: Mon 13 Sep 2027 02:35:45 +0000
asID: 147281
IP address blocks: 193.37.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:02:2f:5a:6a:8d:0d:9e:dc:10:ed:26:f7:4b:e7:39:71:c3:54:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Sep 14 02:30:45 2026 GMT
Not After : Sep 13 02:35:45 2027 GMT
Subject: CN=A115EF06F9E58D8DF54F69A589B2640DFCFC91D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:85:1e:19:ce:e4:2e:7a:9a:0e:17:2f:94:
41:05:e1:3b:d6:47:73:62:27:01:ad:2b:ef:19:e7:
6e:a6:36:1f:1a:4b:55:38:45:aa:52:51:b2:28:92:
a3:d8:b3:53:ad:d4:8d:05:c2:d6:ab:b8:56:50:59:
b2:bf:64:32:69:35:02:6a:99:73:ec:e8:e4:67:07:
6b:ee:7c:95:d1:d2:3d:ad:ea:7b:f5:4b:73:22:48:
c1:91:5d:1c:75:4e:65:e3:ff:2e:0f:dc:59:68:c1:
65:59:61:78:8d:81:84:c6:84:69:cb:aa:3a:c7:9c:
6a:4d:f5:ec:51:80:8d:d5:00:66:f2:0e:ad:3f:b5:
65:05:a7:d6:e6:6a:ac:f9:dd:e6:a6:1b:a0:c5:80:
85:5c:59:2d:fc:c2:e4:14:e2:e0:c4:af:e7:d6:4c:
ad:da:02:fc:e8:a6:b5:68:af:88:f3:99:cd:6e:44:
22:3c:b3:16:08:42:11:97:fc:08:20:a1:84:f1:f7:
ac:ad:29:8e:04:89:83:be:aa:5f:06:e7:ed:3d:13:
eb:fd:80:f6:7e:80:13:79:e7:34:d5:0c:16:16:ab:
53:f8:93:2d:20:04:ed:82:b7:50:0c:e7:58:1f:ef:
91:fa:24:cf:d2:46:b7:68:73:8c:d9:ff:64:af:30:
17:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:15:EF:06:F9:E5:8D:8D:F5:4F:69:A5:89:B2:64:0D:FC:FC:91:D1
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e20313437323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.239.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:af:d7:ee:bb:4e:c0:da:eb:df:65:cf:e2:a7:72:36:f6:8e:
30:a1:0c:c5:4b:f3:99:15:62:51:6c:85:3c:ee:5f:3e:d5:4f:
9d:75:da:d9:9b:64:77:81:cc:c5:8d:a8:f3:1c:6f:43:7e:c5:
70:13:20:16:17:d7:6b:29:02:dd:10:b3:86:9d:2f:cc:b7:5b:
75:19:cb:d5:26:1b:c6:95:05:07:0a:2b:1d:49:90:f9:a2:97:
19:97:a2:07:b2:ee:e7:ca:5e:d2:ee:5e:31:f2:bc:af:ba:7c:
54:32:98:71:af:cb:d7:a7:12:b1:cf:db:a3:5b:8b:3c:77:83:
04:8e:35:83:5f:27:37:41:ab:60:ed:98:bf:8c:cf:a3:56:33:
7c:1a:60:01:d0:6b:16:7d:4f:94:ea:12:f6:c7:b7:cb:ac:0a:
7c:8e:63:35:82:02:c8:13:21:4d:25:90:9e:0c:f0:24:72:e0:
3f:9e:3d:ff:f5:b6:cc:aa:60:37:9c:78:0b:fa:cd:7d:ec:b0:
87:00:66:4f:75:54:7e:16:03:33:1d:e1:50:e6:6a:a9:a0:d8:
e5:69:4b:36:84:5c:5b:b5:1f:0a:12:49:45:fa:4c:c0:b6:24:
41:d7:b8:01:87:05:83:6b:58:98:cd:50:8b:c6:80:74:17:55:
c9:94:47:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:21:28 2026 by rpki-client