Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33392e31302e302f32342d3234203d3e20313437323038.roa
File: 3139332e33392e31302e302f32342d3234203d3e20313437323038.roa (raw, json)
Hash identifier: PMBudh6Lm3q548B4f5mvH9Iqtzb/o0R3+quKIkohZ3w=
Subject key identifier: 57:3A:74:4E:EF:C1:90:EC:11:DC:2E:39:23:F9:86:D7:E5:D4:C1:A6
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 07235BF5CA8C4E1EEF45EA28013BB98E4B575507
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33392e31302e302f32342d3234203d3e20313437323038.roa
Signing time: Mon 13 Jul 2026 03:14:08 +0000
ROA not before: Mon 13 Jul 2026 03:09:08 +0000
ROA not after: Mon 12 Jul 2027 03:14:08 +0000
asID: 147208
IP address blocks: 193.39.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 06:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:23:5b:f5:ca:8c:4e:1e:ef:45:ea:28:01:3b:b9:8e:4b:57:55:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jul 13 03:09:08 2026 GMT
Not After : Jul 12 03:14:08 2027 GMT
Subject: CN=573A744EEFC190EC11DC2E3923F986D7E5D4C1A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:74:17:fe:d0:3e:e3:d4:6f:ed:5d:c2:1f:
50:f7:79:11:59:fe:21:05:b3:55:dc:77:35:3a:85:
6f:fd:20:f6:3d:82:da:96:0f:81:16:ff:db:e9:83:
39:34:98:b5:0b:80:25:fc:9c:02:42:fd:17:30:f3:
c8:49:51:71:4f:6e:d7:f4:9d:be:5f:9a:2b:e5:a0:
5b:c0:c7:47:70:7b:b4:82:42:ec:34:68:e6:cf:a9:
b3:b7:4f:69:5a:8c:20:83:5f:5a:27:60:22:bb:f2:
88:12:04:28:92:ea:7c:d4:52:3e:19:ad:c3:7a:2e:
d7:99:e4:c2:3d:2e:4f:e8:09:97:e6:b0:45:d7:57:
e5:50:99:7d:89:04:38:b8:82:d1:ae:c6:93:18:5c:
dc:3e:0c:be:d4:8e:c3:72:f5:32:14:46:96:37:05:
22:7f:67:ca:18:f6:da:1d:3b:fc:27:33:9c:6e:8c:
b2:15:dc:d9:cd:27:1a:ac:31:2e:ae:a2:9e:a9:90:
4b:87:e0:37:f9:cd:c8:ad:73:5a:cd:a3:42:12:95:
41:f5:cf:24:f2:b5:1d:00:ad:17:6a:c3:00:7c:2e:
1a:53:74:9b:ba:c6:4f:a1:94:7a:19:30:25:b2:1f:
31:7f:da:26:2e:c6:fc:fa:f4:8e:9b:59:26:54:ed:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3A:74:4E:EF:C1:90:EC:11:DC:2E:39:23:F9:86:D7:E5:D4:C1:A6
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33392e31302e302f32342d3234203d3e20313437323038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:b3:26:6b:6e:88:b2:45:3b:2f:7e:b8:35:d0:bc:21:55:57:
2f:7e:21:f9:b2:86:86:75:a2:84:84:ef:3b:52:b9:63:86:dd:
b2:68:39:76:39:c8:11:a8:22:1b:1e:12:96:22:55:c2:a5:4a:
7e:53:c7:ba:4c:30:df:8f:d2:47:d2:a0:31:61:2e:10:cb:f0:
ba:bb:e4:3d:72:e3:72:0b:72:3f:f2:3c:27:23:4b:6c:dc:3d:
ea:7a:fd:8d:0d:95:32:05:bc:89:72:bd:d3:a6:9d:27:6e:e0:
ca:de:1f:ea:d4:e2:80:cb:a0:15:07:0d:3f:5c:74:59:10:4c:
ce:fe:6c:d5:04:2e:6c:ea:ff:f5:9c:46:1e:b9:1c:c2:4c:0c:
31:bb:da:1b:54:27:94:c0:ce:b3:88:6a:b1:7f:5f:33:30:c8:
96:06:43:a7:1f:39:c2:57:46:53:2c:ba:82:01:02:1c:56:00:
c4:1c:7b:22:a1:59:5d:b5:00:2a:79:4a:9f:12:cd:73:7c:bb:
8e:1f:f5:12:95:39:15:cb:b7:2f:a7:a3:5d:30:f3:ec:58:27:
0e:a8:2a:e3:33:00:2d:06:36:dc:7e:3e:ef:e1:1a:f9:27:80:
6c:ab:f6:83:88:46:25:80:82:a9:9b:06:57:4a:24:84:e8:f4:
37:0b:6c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:48:11 2026 by rpki-client