Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3134362e31392e32332e302f32342d3234203d3e203235333639.roa
File: 3134362e31392e32332e302f32342d3234203d3e203235333639.roa (raw, json)
Hash identifier: GKli1zMxFr+Vh+DFrX05uLsY82psqBfXCscaa1R4VjQ=
Subject key identifier: 72:55:99:54:96:3F:09:13:E5:E3:4B:A0:CD:54:77:DB:FB:D1:07:E3
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 2C0F42A83BBFD4BD80594071B094C93F8E624EFA
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3134362e31392e32332e302f32342d3234203d3e203235333639.roa
Signing time: Fri 24 Jul 2026 22:49:14 +0000
ROA not before: Fri 24 Jul 2026 22:44:14 +0000
ROA not after: Fri 23 Jul 2027 22:49:14 +0000
asID: 25369
IP address blocks: 146.19.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:0f:42:a8:3b:bf:d4:bd:80:59:40:71:b0:94:c9:3f:8e:62:4e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jul 24 22:44:14 2026 GMT
Not After : Jul 23 22:49:14 2027 GMT
Subject: CN=72559954963F0913E5E34BA0CD5477DBFBD107E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:bf:c9:be:9d:c6:25:f0:e9:38:ec:2f:c3:
8a:fd:4c:6c:3f:d1:63:5f:7d:ca:2d:03:aa:64:ae:
f1:fa:1c:68:eb:df:ce:e6:a4:ef:33:c1:e2:92:c2:
a5:ff:0f:04:c7:83:51:1d:07:21:6f:39:99:29:2e:
47:d9:c6:b3:55:e3:98:ee:84:f3:47:ee:06:56:e8:
65:b9:17:55:e4:f4:b6:13:90:b3:ef:d3:5d:1b:75:
9b:14:9f:43:08:03:01:06:0d:27:99:1a:e6:e9:e1:
11:10:db:44:6d:97:54:2d:5d:86:61:3f:08:12:20:
dd:81:44:4b:51:dd:a8:d1:fd:9e:89:6b:ac:07:fe:
b4:e9:c6:22:24:4b:14:06:41:57:7f:91:e4:6c:0b:
4f:4c:ec:4e:37:eb:3f:df:72:4b:73:0a:7c:77:83:
9b:32:33:11:96:fa:bb:fc:33:bf:8d:09:c3:2b:ad:
0e:34:71:35:c6:79:79:15:49:e8:4d:da:54:40:7a:
d2:2b:52:f0:5c:c4:80:6b:78:f7:f9:38:d0:c4:1c:
dc:c6:7e:80:74:f6:1d:33:7b:c0:38:c1:c1:ba:f1:
9e:8c:8a:04:c1:38:a8:c2:ff:c0:06:c5:67:57:27:
4d:94:aa:10:2c:00:6c:75:c8:96:31:cf:1d:ed:1f:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:55:99:54:96:3F:09:13:E5:E3:4B:A0:CD:54:77:DB:FB:D1:07:E3
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3134362e31392e32332e302f32342d3234203d3e203235333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.23.0/24
Signature Algorithm: sha256WithRSAEncryption
60:34:93:f5:c4:ff:e3:32:4d:b0:9e:b7:b0:d8:70:c9:42:b9:
ad:2a:9c:05:f4:1d:32:d3:f2:bf:23:38:3b:7b:a4:f6:ee:5d:
18:1c:ce:3a:be:fb:74:01:cb:57:fd:5d:ea:6f:2e:7a:56:c7:
59:1d:70:e7:2b:26:9e:a0:ff:7d:80:16:33:09:df:9a:5b:b8:
9d:d7:6d:0d:65:5d:d4:7e:b9:4a:f3:45:38:86:d8:6c:ea:00:
fc:16:62:02:13:af:0a:26:fc:64:d0:75:b1:f7:4a:7f:d8:1b:
8f:ce:46:e7:5e:d6:68:a6:09:e5:f0:c8:e2:65:a0:bc:02:40:
c1:50:d5:b4:22:c2:8c:2d:8c:bc:d5:2c:d3:97:ac:7d:b9:33:
19:db:a2:fd:75:f4:94:eb:e9:04:7d:53:45:f8:bd:21:21:bd:
fa:d6:cf:7d:cf:5e:b2:7d:d4:48:45:33:8e:54:9f:62:8d:33:
4c:94:d9:83:93:2d:2c:ce:4f:a4:be:c7:5e:6c:18:fb:d4:5e:
77:38:08:0d:ab:01:f6:25:3a:c2:a9:33:c9:5d:8b:d5:f2:6f:
5a:55:97:f1:9f:00:15:0e:52:4a:47:68:44:65:e3:7a:a6:3a:
cf:2c:90:90:d2:34:a8:05:53:31:e3:9d:fa:d6:08:29:11:29:
f9:36:41:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:48:36 2026 by rpki-client