Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32302e302f32342d3234203d3e20323132323338.roa
File: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: YP/VU7Ddy/RINA1ejeDsmhFrZUIqFHueTf4iQvV7+Jw=
Subject key identifier: BD:4D:B1:5D:31:6B:B9:9D:11:22:25:E8:13:80:40:98:70:E2:4F:0B
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 20545DA7462CBA9ED076499E85D0A96DE4A2EAB9
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32302e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 08 Jul 2025 10:05:19 +0000
ROA not before: Tue 08 Jul 2025 10:00:19 +0000
ROA not after: Tue 07 Jul 2026 10:05:19 +0000
asID: 212238
IP address blocks: 194.26.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 02:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:54:5d:a7:46:2c:ba:9e:d0:76:49:9e:85:d0:a9:6d:e4:a2:ea:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Jul 8 10:00:19 2025 GMT
Not After : Jul 7 10:05:19 2026 GMT
Subject: CN=BD4DB15D316BB99D112225E81380409870E24F0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:74:00:a9:61:fb:5e:b5:09:3c:41:d0:f0:ae:
f2:13:dc:a3:fa:56:05:53:9a:79:2e:91:cb:d8:c9:
46:b5:ce:1a:99:f6:cd:23:9a:64:6d:99:83:0b:1f:
f0:05:07:86:83:7b:a1:41:fd:37:f8:10:e1:25:06:
2a:14:5b:cf:7b:cf:a8:85:0e:f9:a0:9a:9a:59:e9:
1f:3f:18:a6:65:0b:58:9e:6e:f3:df:9c:f6:06:42:
df:f4:78:9d:c8:ea:84:15:40:d3:30:c1:33:02:c8:
a5:95:50:42:9e:7f:de:74:81:6d:d1:9e:e5:86:3a:
e5:79:a6:19:7f:56:ba:6b:c8:fc:ed:78:9b:e9:ce:
a9:13:a4:d8:36:4b:9e:71:fb:e5:76:4f:fe:66:c1:
1e:33:08:f8:9a:77:1f:eb:1d:5a:3e:c4:dc:5d:c3:
1d:c4:29:e7:c0:38:2d:c3:cc:73:32:b7:32:29:ff:
1b:8c:2a:21:e4:ed:bd:ad:24:21:cc:27:2c:40:c1:
44:4f:06:67:5f:1a:bf:10:cd:43:65:ef:c0:28:2f:
56:6a:2d:b0:de:2f:99:70:61:e9:89:f5:d5:91:e4:
a7:f0:f4:2b:01:53:79:dd:35:fd:a4:9e:de:b0:58:
f7:b5:40:ab:b7:ff:86:c6:5c:93:24:84:de:4a:dc:
6c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4D:B1:5D:31:6B:B9:9D:11:22:25:E8:13:80:40:98:70:E2:4F:0B
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32302e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.20.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f1:a5:f7:f0:37:7c:23:2c:ba:19:40:81:8e:57:ae:9f:2e:
f5:49:a9:01:3b:d2:65:05:a5:1f:0b:d3:76:8b:0e:8d:f3:a3:
d9:6b:31:5a:04:a3:6a:cf:99:12:c5:72:8c:ed:88:2b:3e:0e:
64:cc:10:91:90:1f:11:09:72:9e:46:40:0b:1a:ff:0d:b5:8c:
1b:03:49:9d:e7:88:b7:3c:36:d2:6e:4b:67:20:9b:44:28:f4:
e0:db:c3:90:f1:53:ae:b0:59:91:12:65:b8:63:7e:7b:88:cb:
a0:dd:51:75:bc:1e:0f:30:8d:c4:fa:f1:25:a1:5f:d1:cd:c6:
6f:d6:d8:1b:1c:ab:ee:42:b1:e1:00:dd:93:d0:64:2e:6e:7c:
5c:f6:3d:ec:fa:54:dd:0a:15:ee:bf:f8:e2:6c:fd:97:8d:5c:
33:89:46:c6:56:2f:bc:ed:bd:75:7b:91:26:93:1d:ba:4c:67:
79:87:13:db:79:68:cd:62:b1:c0:a5:3d:b4:c6:7e:f1:fe:63:
3d:4e:31:74:dd:6d:43:bb:e1:7c:f1:40:b0:0a:da:05:15:75:
60:0e:51:71:09:fa:58:57:61:45:5c:e1:d6:c7:30:43:9c:52:
66:24:67:61:8a:97:5f:c2:37:1b:a5:47:1b:49:d1:24:68:09:
3a:52:af:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:24:41 2025 by rpki-client