Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31342e302f32342d3234203d3e20323131303537.roa
File: 39322e3131392e31342e302f32342d3234203d3e20323131303537.roa (raw, json)
Hash identifier: HOYEX9uEXmqFLI4eumlb2d/t0GQDWXhnMbqeN0YXHXI=
Subject key identifier: 46:BF:B6:F5:1F:8B:5F:BB:CD:C0:1A:19:05:21:4F:17:A3:AC:80:63
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 5F4AF7A8C8CE9396856E3DB94EE9E046BB83028A
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31342e302f32342d3234203d3e20323131303537.roa
Signing time: Wed 18 Feb 2026 08:04:24 +0000
ROA not before: Wed 18 Feb 2026 07:59:24 +0000
ROA not after: Wed 17 Feb 2027 08:04:24 +0000
asID: 211057
IP address blocks: 92.119.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:4a:f7:a8:c8:ce:93:96:85:6e:3d:b9:4e:e9:e0:46:bb:83:02:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Feb 18 07:59:24 2026 GMT
Not After : Feb 17 08:04:24 2027 GMT
Subject: CN=46BFB6F51F8B5FBBCDC01A1905214F17A3AC8063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8e:b3:84:a3:9d:7f:d3:02:c6:8a:45:0b:1c:
19:56:ab:7d:0a:21:7d:a0:1c:e6:ec:c1:c3:cd:9e:
88:0f:b6:dd:00:31:3d:82:df:f9:0a:2c:70:e5:a9:
24:89:a8:b9:48:9b:38:4a:96:b5:81:b2:b4:4a:b9:
9f:19:22:fa:f5:bc:c4:8a:8f:44:8a:42:d2:31:ef:
08:de:71:9d:f8:24:d5:00:78:ad:0e:66:a7:af:15:
64:cc:47:1b:03:e2:6a:52:a7:28:db:9e:d3:d5:3c:
46:f6:14:72:64:04:a5:de:14:97:e7:89:c3:0f:a0:
a9:60:e7:cf:34:fd:2d:cd:78:50:01:d0:22:e8:d9:
07:a0:56:c4:38:00:51:f9:06:8f:c0:9b:41:fe:46:
95:c2:95:3c:6a:d7:c0:47:98:52:05:3d:c8:33:a9:
48:5a:35:8f:62:7e:17:69:e0:fa:54:fe:7f:f0:02:
a3:0f:32:f7:63:42:51:d3:54:92:50:a3:c4:26:07:
ed:92:b0:5a:4c:a9:15:95:eb:b5:4c:49:c0:6f:ba:
7e:93:0e:a8:22:d0:01:17:9b:7f:1f:6d:1d:21:c8:
9b:40:33:40:5b:ec:4e:bf:73:5a:b2:57:64:cb:24:
df:4d:bd:fb:2b:e4:34:1b:07:7a:41:92:0e:16:86:
45:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BF:B6:F5:1F:8B:5F:BB:CD:C0:1A:19:05:21:4F:17:A3:AC:80:63
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31342e302f32342d3234203d3e20323131303537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.14.0/24
Signature Algorithm: sha256WithRSAEncryption
02:d7:44:43:c5:3d:64:96:e9:13:c5:04:b7:38:8a:b3:9e:d0:
70:77:3b:9c:23:09:7c:15:45:bc:f9:5d:5a:d1:bf:ac:e2:3d:
b0:33:a5:80:6c:78:f5:be:09:dd:aa:aa:f3:20:85:29:17:6d:
8f:fb:5e:f4:cf:de:d6:af:75:3c:7d:f4:36:22:ba:10:02:20:
8c:bc:84:9b:4b:0e:99:34:7e:c0:7c:97:61:a5:f9:61:76:e1:
32:d8:d8:f5:bb:18:9c:06:5f:75:47:30:8b:25:c7:60:1e:c2:
1f:c9:90:36:e0:57:5b:5b:7e:05:5d:7a:c7:99:eb:a1:d9:59:
74:69:f0:6b:38:e1:c1:71:08:a8:c8:c8:4b:1c:5e:af:29:63:
b3:fe:44:2f:d0:2f:5b:8b:39:46:89:59:11:98:1a:27:24:32:
cf:22:86:24:c9:13:86:27:58:9a:9e:c8:0c:19:eb:69:43:e9:
7f:99:ab:8f:52:7b:26:23:16:15:02:80:e5:f7:8d:bc:cc:5f:
12:d0:d2:9d:e0:3f:4e:04:14:0a:9b:ee:44:10:cb:2c:7c:25:
2f:8d:b3:3e:14:3e:75:eb:e7:d3:ca:60:f6:d2:96:24:0f:83:
4d:f7:0b:7c:52:9a:6c:53:12:c1:b1:c3:5d:0b:93:ad:b5:cd:
bd:dd:7e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:32:10 2026 by rpki-client