Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33392e31302e302f32342d3234203d3e203239383032.roa
File: 3139332e33392e31302e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: qEfXPjSLtdonpDlLCm08MlZB4dumTXPRxCn5vYE0O5U=
Subject key identifier: 0D:84:E6:61:55:BB:CD:49:33:D3:3A:A9:6E:2F:13:AE:FE:5C:AF:4A
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 6451AC5C62E540BEC3D5F5883715E18ABB521380
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33392e31302e302f32342d3234203d3e203239383032.roa
Signing time: Wed 18 Feb 2026 15:46:12 +0000
ROA not before: Wed 18 Feb 2026 15:41:12 +0000
ROA not after: Wed 17 Feb 2027 15:46:12 +0000
asID: 29802
IP address blocks: 193.39.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:51:ac:5c:62:e5:40:be:c3:d5:f5:88:37:15:e1:8a:bb:52:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Feb 18 15:41:12 2026 GMT
Not After : Feb 17 15:46:12 2027 GMT
Subject: CN=0D84E66155BBCD4933D33AA96E2F13AEFE5CAF4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:04:22:34:7a:f5:5f:43:49:9f:45:da:40:
b2:00:9e:f3:b2:99:53:cb:c3:cb:d2:f8:35:2f:5f:
41:4f:1d:ea:33:3e:53:02:60:14:b5:9a:38:79:a3:
1b:5c:3e:2d:21:fa:c8:67:34:3f:b0:47:6b:c0:e6:
28:62:ef:64:67:c3:76:2f:a4:bd:42:3c:ec:f3:0d:
ff:6a:d0:65:bc:bf:15:b0:a1:a4:7b:68:3c:88:bb:
9f:1a:5f:09:cd:52:e6:55:8a:4d:64:2c:00:ab:42:
ce:23:b0:54:91:26:9e:10:3f:c7:60:5d:b0:39:f5:
a3:49:42:24:f4:10:3f:eb:56:f6:5b:7c:99:3b:0d:
f5:9d:8c:f4:96:42:94:81:62:e5:d1:5c:6e:1b:1b:
d3:ed:2c:3d:c4:25:0d:7c:97:9d:7e:22:e6:d2:93:
8c:90:f0:58:6e:5b:38:53:44:23:b8:a9:91:02:54:
f3:43:bc:1f:6b:22:06:d2:6e:fa:68:77:02:8a:5a:
45:60:a5:b4:14:f1:fd:a2:f3:88:30:77:0b:40:c5:
31:dd:f7:27:59:ff:48:8e:ba:54:a2:ee:03:8d:a7:
4b:0d:b1:4e:dd:9e:3d:4a:6b:81:ad:0c:12:3d:47:
52:c0:a7:1c:17:e2:4f:33:70:2d:b3:ce:ea:c8:84:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:84:E6:61:55:BB:CD:49:33:D3:3A:A9:6E:2F:13:AE:FE:5C:AF:4A
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33392e31302e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:e1:95:9c:e8:bd:37:b3:fc:c3:03:15:24:97:26:68:2c:4e:
c6:23:14:58:a7:dc:72:ea:b1:e9:a0:87:e5:76:2f:70:52:db:
1b:60:90:b0:df:f1:49:bf:4f:ab:77:fa:34:5a:a3:20:48:9d:
87:15:a2:7e:32:5a:65:73:51:bb:f0:21:ea:21:2a:85:8d:a7:
12:08:8f:89:84:9d:7e:57:3c:87:fb:07:02:35:72:4f:c6:9c:
8f:33:2f:6a:5e:c2:f7:a2:d3:1c:88:c6:87:b1:91:4d:a6:3f:
90:1d:a3:29:d6:c5:f3:62:7a:78:62:19:b9:9c:a9:bb:3a:51:
a5:a2:4a:c4:69:42:28:43:62:b5:18:17:55:6e:49:0a:68:38:
36:b2:d1:d1:89:e4:15:f1:70:84:2a:0b:95:3a:d7:c5:21:a1:
b9:2a:a9:c1:80:e1:83:47:3c:1d:13:66:a4:7a:c2:4d:aa:00:
6c:e4:ba:8b:b7:7a:c8:3a:da:8b:0a:40:83:b7:22:89:3a:cd:
0e:80:b1:33:7b:50:82:40:30:b6:8a:6e:1d:3e:9b:b3:0c:8c:
b1:9c:f7:2b:bb:16:73:61:65:bb:bf:8d:e9:49:fd:0c:64:7e:
d1:08:e0:70:6a:b1:5e:c0:d4:d7:90:0c:c3:5b:7a:0f:c8:90:
da:c0:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:14 2026 by rpki-client