Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33382e35332e302f32342d3234203d3e20323131343430.roa
File: 3139332e33382e35332e302f32342d3234203d3e20323131343430.roa (raw, json)
Hash identifier: AZRPRn7T0SLcbuLoGe3gZUnHARGN+YMp0GwZ5Rq9/Sw=
Subject key identifier: A6:98:4A:C2:AA:51:EE:46:17:14:09:BF:82:93:DC:CC:68:DB:C4:D8
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 53288E447420C305B9B764799ED292D054BE486B
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33382e35332e302f32342d3234203d3e20323131343430.roa
Signing time: Fri 18 Sep 2026 15:49:35 +0000
ROA not before: Fri 18 Sep 2026 15:44:35 +0000
ROA not after: Fri 17 Sep 2027 15:49:35 +0000
asID: 211440
IP address blocks: 193.38.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:28:8e:44:74:20:c3:05:b9:b7:64:79:9e:d2:92:d0:54:be:48:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Sep 18 15:44:35 2026 GMT
Not After : Sep 17 15:49:35 2027 GMT
Subject: CN=A6984AC2AA51EE46171409BF8293DCCC68DBC4D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:11:74:e8:5a:2e:79:9f:f5:59:bb:11:cb:
a7:f2:d9:f2:f5:08:f1:a1:de:b3:99:3f:ca:f0:8d:
77:08:c7:72:63:f3:0a:71:62:c8:f7:8c:39:69:19:
41:77:03:93:85:a4:6e:41:96:70:86:91:d7:38:49:
6b:94:a4:5d:24:44:f1:78:b6:15:16:2a:f1:86:54:
59:6a:61:aa:3d:3c:ce:ce:d5:be:f5:1d:92:bc:7b:
1d:40:de:90:63:26:6f:0a:fd:e3:c3:4b:70:b7:66:
90:26:92:2e:fd:d2:51:f3:64:f4:58:b3:5e:9b:c6:
5e:03:5e:9a:ea:ac:9c:ff:16:31:4b:53:9f:9d:7d:
49:a4:e8:5a:10:2e:51:e1:d7:62:03:6a:56:30:4c:
13:07:8b:80:a5:51:a4:9e:76:47:1a:c1:61:12:fd:
62:4d:a3:2b:d0:6b:45:48:ef:ef:73:4c:d4:14:31:
f5:c8:8e:a5:83:0e:33:84:e1:ab:85:b8:8e:3a:c0:
5e:e8:f3:40:b0:74:5f:85:87:14:46:0b:60:51:08:
ef:10:f1:8d:f7:83:98:8d:9f:e9:3b:92:8a:f5:e9:
d9:a4:c8:af:64:78:cd:61:f7:29:7c:88:96:9e:38:
e6:9f:25:dd:57:bd:19:f6:3e:93:f7:88:08:d3:61:
e5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:98:4A:C2:AA:51:EE:46:17:14:09:BF:82:93:DC:CC:68:DB:C4:D8
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33382e35332e302f32342d3234203d3e20323131343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.53.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7e:ea:02:66:6c:95:d2:98:9c:8b:95:8f:02:f4:21:e7:c1:
3f:d8:aa:ae:16:dd:cf:bc:41:65:bb:45:2d:37:c0:ff:42:91:
b3:ed:96:93:a0:e1:03:94:39:06:52:95:51:f5:88:d2:33:3c:
9b:b9:71:98:f0:de:4a:88:06:ae:cb:cb:13:49:e1:b6:7d:dd:
ef:fb:3c:82:cd:4c:fe:8c:21:92:91:aa:56:0f:0e:75:1b:8d:
f1:a4:69:55:d8:99:bd:53:9b:18:20:dc:16:b2:87:cc:60:19:
ea:05:3c:d0:48:78:1b:7d:f2:28:b6:3e:93:a7:72:61:04:69:
35:89:90:11:3e:15:81:be:8e:21:13:35:56:d6:c3:18:c3:4b:
85:d8:bc:48:d1:3a:9b:dd:c2:24:a1:71:75:e9:79:1e:56:c4:
fa:2e:c3:80:dc:06:3c:13:07:95:93:7e:e5:94:b1:ea:cd:78:
22:ca:a0:25:7e:a4:fa:0d:2c:46:c2:8e:65:12:d1:ff:79:b0:
15:34:2b:e1:11:8a:ae:a3:fa:7a:31:3e:b5:49:ab:c5:eb:4c:
0e:93:1f:21:fe:a2:55:cb:6a:8d:2e:a8:73:06:82:ce:78:b9:
d7:47:cd:dd:19:53:f7:bb:a1:34:a9:10:fd:7c:c4:0c:32:eb:
db:98:85:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:29:43 2026 by rpki-client