Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS39753.roa
File: AS39753.roa (raw, json)
Hash identifier: +zC4hVx3rAuOIr8pBRwFJ5WDQVZyUDjXLgrxKaP3jfA=
Subject key identifier: 4A:9D:B3:C1:35:C2:BA:0F:59:0B:2F:7C:19:81:8B:DC:FF:92:B8:8D
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1B2429AD0E5559ACF831255B9746066E8E74761B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS39753.roa
Signing time: Fri 26 Jun 2026 08:08:44 +0000
ROA not before: Fri 26 Jun 2026 08:03:44 +0000
ROA not after: Fri 25 Jun 2027 08:08:44 +0000
asID: 39753
IP address blocks: 2a0f:85c1:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:24:29:ad:0e:55:59:ac:f8:31:25:5b:97:46:06:6e:8e:74:76:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:44 2026 GMT
Not After : Jun 25 08:08:44 2027 GMT
Subject: CN=4A9DB3C135C2BA0F590B2F7C19818BDCFF92B88D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:52:79:4d:86:92:f0:dc:30:62:16:cc:70:
a3:aa:c7:45:8e:cf:8d:df:84:84:59:69:e3:9c:33:
de:a4:50:ad:f0:15:3f:a5:cd:06:11:26:8d:a5:30:
f0:f2:77:b3:0a:b4:39:ca:45:56:28:e1:c7:59:f8:
f3:85:e7:36:6a:18:be:11:1d:5b:e8:1c:35:03:1b:
fd:54:ee:75:f2:a8:08:87:8d:71:aa:94:bd:6c:4f:
bc:ed:64:07:ae:12:73:94:93:cf:b8:3e:20:ec:11:
66:81:6c:a0:80:10:78:63:d1:0a:6f:83:89:a2:7f:
52:b4:71:5a:2f:16:42:b9:7c:6b:55:03:6f:43:eb:
ed:10:fe:5e:02:f4:0e:37:5d:86:1a:27:71:3d:60:
06:30:e4:5b:a4:81:50:96:c7:51:cb:02:d4:fe:64:
5b:f5:70:cc:bb:de:6a:67:4f:9d:0e:70:f6:ab:65:
60:8f:2c:21:31:b2:a7:02:e5:68:21:77:e6:b8:ec:
9d:95:36:78:06:5c:00:28:cd:9e:c2:75:bd:1e:fc:
71:14:4f:79:ce:26:b3:bc:bf:45:95:d9:87:14:f8:
41:72:75:66:36:76:3f:58:8b:98:97:6f:08:15:05:
66:e2:79:a0:41:f8:64:c4:a8:6a:e8:25:7e:c0:d8:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9D:B3:C1:35:C2:BA:0F:59:0B:2F:7C:19:81:8B:DC:FF:92:B8:8D
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS39753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:100::/40
Signature Algorithm: sha256WithRSAEncryption
1b:d1:09:42:2a:d8:e0:50:4b:df:6e:19:81:e4:c7:83:bd:ad:
16:c9:b4:c1:30:4d:7e:09:33:18:c8:f7:e7:78:dd:ad:63:da:
f5:13:d6:de:d1:0c:b4:01:09:01:98:c3:7d:86:78:b9:11:99:
a4:3b:3a:36:6a:2f:0d:79:23:42:bb:71:15:da:8a:e1:dd:a3:
23:2f:15:00:28:10:f5:aa:ad:f1:7c:6a:75:8f:67:40:8e:7e:
7a:35:95:3b:de:99:34:24:33:6b:4e:81:09:46:c7:4b:d1:58:
e0:08:05:7b:16:9d:30:1a:27:f3:02:c7:80:1c:d7:fe:61:72:
92:0c:aa:43:d2:f0:88:2e:be:52:61:b6:29:99:67:41:5f:40:
22:48:f4:49:5d:0f:a4:1d:05:b9:d9:e1:9e:aa:0c:62:82:8d:
9c:ad:2d:0e:de:a4:4c:6e:49:c9:e8:32:23:e0:bc:5b:43:6b:
9c:b4:1d:69:52:36:90:8b:93:6e:d2:d6:87:52:57:8c:95:84:
ad:0a:0c:39:3c:3c:49:d4:2b:1e:83:9e:1e:ee:2c:f7:2b:1d:
37:01:26:bb:91:dd:cf:86:22:37:54:73:e5:b1:6d:5b:37:e9:
63:a9:fa:5a:15:eb:e4:09:63:c2:55:8c:ed:e8:fe:58:62:27:
47:c3:fb:99
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUGyQprQ5VWaz4MSVbl0YGbo50dhswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA2MjYwODAzNDRaFw0yNzA2MjUwODA4NDRaMDMxMTAvBgNV
BAMTKDRBOURCM0MxMzVDMkJBMEY1OTBCMkY3QzE5ODE4QkRDRkY5MkI4OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqSVJ5TYaS8NwwYhbMcKOqx0WO
z43fhIRZaeOcM96kUK3wFT+lzQYRJo2lMPDyd7MKtDnKRVYo4cdZ+POF5zZqGL4R
HVvoHDUDG/1U7nXyqAiHjXGqlL1sT7ztZAeuEnOUk8+4PiDsEWaBbKCAEHhj0Qpv
g4mif1K0cVovFkK5fGtVA29D6+0Q/l4C9A43XYYaJ3E9YAYw5FukgVCWx1HLAtT+
ZFv1cMy73mpnT50OcParZWCPLCExsqcC5Wghd+a47J2VNngGXAAozZ7Cdb0e/HEU
T3nOJrO8v0WV2YcU+EFydWY2dj9Yi5iXbwgVBWbieaBB+GTEqGroJX7A2FbZAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUSp2zwTXCug9ZCy98GYGL3P+SuI0wHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMzk3NTMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqD4XB
ATANBgkqhkiG9w0BAQsFAAOCAQEAG9EJQirY4FBL324ZgeTHg72tFsm0wTBNfgkz
GMj353jdrWPa9RPW3tEMtAEJAZjDfYZ4uRGZpDs6NmovDXkjQrtxFdqK4d2jIy8V
ACgQ9aqt8XxqdY9nQI5+ejWVO96ZNCQza06BCUbHS9FY4AgFexadMBon8wLHgBzX
/mFykgyqQ9LwiC6+UmG2KZlnQV9AIkj0SV0PpB0FudnhnqoMYoKNnK0tDt6kTG5J
yegyI+C8W0NrnLQdaVI2kIuTbtLWh1JXjJWErQoMOTw8SdQrHoOeHu4s9ysdNwEm
u5Hdz4YiN1Rz5bFtWzfpY6n6WhXr5AljwlWM7ej+WGInR8P7mQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:46 2026 by rpki-client