Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33392e31302e302f32342d3234203d3e20313337343039.roa
File: 3139332e33392e31302e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: HnNa5I6xxH9SAfBkMnFYKc7WxID+Ob38Wl3U6IevOeg=
Subject key identifier: BD:C8:E3:18:EA:83:1E:D9:ED:26:4A:D2:06:3E:85:D6:52:FD:AE:C3
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 59D4C1014ECB4FDE190ACC9E07440E916203109D
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33392e31302e302f32342d3234203d3e20313337343039.roa
Signing time: Tue 22 Sep 2026 05:10:24 +0000
ROA not before: Tue 22 Sep 2026 05:05:24 +0000
ROA not after: Tue 21 Sep 2027 05:10:24 +0000
asID: 137409
IP address blocks: 193.39.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d4:c1:01:4e:cb:4f:de:19:0a:cc:9e:07:44:0e:91:62:03:10:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Sep 22 05:05:24 2026 GMT
Not After : Sep 21 05:10:24 2027 GMT
Subject: CN=BDC8E318EA831ED9ED264AD2063E85D652FDAEC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ad:31:81:67:44:48:8e:76:99:b6:ca:24:a9:
54:fc:a4:27:1d:e7:1d:e6:39:68:0c:88:af:f3:b2:
ed:cb:c2:1b:9f:75:1c:67:d8:27:13:01:8d:b6:45:
c8:8b:d0:38:42:fa:3e:86:42:87:06:b2:c7:0f:30:
14:29:85:f6:11:99:fe:78:10:92:4d:77:ec:49:3d:
6f:8e:91:a6:d3:60:88:d8:d0:4e:50:91:6e:03:5b:
5b:a0:67:e7:f5:ed:b0:7e:80:a1:3a:7a:7a:19:b3:
46:9a:48:f2:ff:3c:a3:93:c2:d6:69:b3:8d:af:72:
00:91:db:8a:4c:fc:f7:9a:30:da:21:ad:3a:4a:9d:
3f:37:ba:c1:96:3a:b5:63:65:e0:b2:27:96:50:c3:
84:3b:85:ab:ee:74:d5:13:8a:26:bb:c6:ee:f6:4c:
2b:7a:ec:34:c0:17:84:e2:94:7e:c9:d3:08:3e:78:
6f:67:07:1d:70:fe:0a:6b:9b:4f:4a:7d:d9:cf:26:
52:c9:f8:66:0e:48:d0:1b:61:28:1f:86:05:35:49:
db:c0:82:de:de:63:4d:ba:4a:85:41:99:63:60:c0:
08:22:be:9b:84:58:f0:35:56:03:bf:10:ef:04:c2:
c1:8f:53:5d:45:cd:3c:04:db:e2:ca:1f:13:83:9f:
28:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C8:E3:18:EA:83:1E:D9:ED:26:4A:D2:06:3E:85:D6:52:FD:AE:C3
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33392e31302e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
49:55:ca:29:e8:8a:08:94:42:f3:17:f3:07:6a:3d:3f:7f:8e:
68:db:5e:eb:54:52:23:7a:6e:1f:77:91:4e:92:2b:ed:f2:23:
2f:f3:f4:bd:44:66:e6:02:ef:4b:d4:e7:40:bc:40:78:d5:fc:
49:38:1d:0c:52:5c:a3:bb:d3:9a:3f:ea:61:19:10:84:73:a9:
f2:dc:c2:50:90:76:70:9c:b2:24:40:70:7f:f1:44:63:ac:97:
8b:23:93:20:34:a2:0f:e5:52:ed:30:2f:89:fb:99:e2:f1:8f:
23:43:ad:19:a3:a4:0f:91:1a:aa:fb:4d:be:36:f3:ad:17:19:
ee:5c:4f:e0:07:d4:c7:34:82:c5:de:43:a7:1d:3b:c3:cf:65:
a4:4d:c0:28:bb:0b:78:11:d3:38:2e:ff:0b:9f:69:aa:55:50:
2c:bf:01:ef:39:ab:4c:15:8b:94:7a:09:4c:32:6c:a1:0b:a8:
bc:16:40:b0:6c:61:56:49:7e:4a:cd:0e:9f:59:8a:76:e1:81:
06:2f:e7:87:2a:c9:8b:1f:4a:7f:b0:5a:72:58:c5:b2:98:93:
11:1c:6b:93:05:79:de:4e:5b:ed:8d:83:a1:4d:3e:44:32:a8:
ed:7a:5e:47:f8:c0:f5:39:99:f7:98:13:d5:36:72:c2:71:60:
f0:47:25:57
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUWdTBAU7LT94ZCsyeB0QOkWIDEJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNjA5MjIwNTA1MjRaFw0yNzA5MjEwNTEwMjRaMDMxMTAvBgNV
BAMTKEJEQzhFMzE4RUE4MzFFRDlFRDI2NEFEMjA2M0U4NUQ2NTJGREFFQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZrTGBZ0RIjnaZtsokqVT8pCcd
5x3mOWgMiK/zsu3LwhufdRxn2CcTAY22RciL0DhC+j6GQocGsscPMBQphfYRmf54
EJJNd+xJPW+OkabTYIjY0E5QkW4DW1ugZ+f17bB+gKE6enoZs0aaSPL/PKOTwtZp
s42vcgCR24pM/PeaMNohrTpKnT83usGWOrVjZeCyJ5ZQw4Q7havudNUTiia7xu72
TCt67DTAF4TilH7J0wg+eG9nBx1w/gprm09KfdnPJlLJ+GYOSNAbYSgfhgU1SdvA
gt7eY026SoVBmWNgwAgivpuEWPA1VgO/EO8EwsGPU11FzTwE2+LKHxODnyhLAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUvcjjGOqDHtntJkrSBj6F1lL9rsMwHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzEzOTMzMmUzMzM5MmUzMTMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM3MzQzMDM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
wScKMA0GCSqGSIb3DQEBCwUAA4IBAQBJVcop6IoIlELzF/MHaj0/f45o217rVFIj
em4fd5FOkivt8iMv8/S9RGbmAu9L1OdAvEB41fxJOB0MUlyju9OaP+phGRCEc6ny
3MJQkHZwnLIkQHB/8URjrJeLI5MgNKIP5VLtMC+J+5ni8Y8jQ60Zo6QPkRqq+02+
NvOtFxnuXE/gB9THNILF3kOnHTvDz2WkTcAouwt4EdM4Lv8Ln2mqVVAsvwHvOatM
FYuUeglMMmyhC6i8FkCwbGFWSX5KzQ6fWYp24YEGL+eHKsmLH0p/sFpyWMWymJMR
HGuTBXneTlvtjYOhTT5EMqjtel5H+MD1OZn3mBPVNnLCcWDwRyVX
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:00:22 2026 by rpki-client