Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136302e302f32342d3234203d3e20323033313536.roa
File: 3132382e36352e3136302e302f32342d3234203d3e20323033313536.roa (raw, json)
Hash identifier: JUjaDwkT0/1fE2CRxDQCJMCmVqnnZ3+XKwAOWGj+wr0=
Subject key identifier: 7B:51:8B:4A:67:00:0B:4D:73:2B:6F:7D:58:77:B2:BF:E6:C4:2F:EB
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 4D0F3D0CE5205CA3A022D564EA329802EDC20998
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136302e302f32342d3234203d3e20323033313536.roa
Signing time: Mon 19 Oct 2026 19:41:06 +0000
ROA not before: Mon 19 Oct 2026 19:36:06 +0000
ROA not after: Mon 18 Oct 2027 19:41:06 +0000
asID: 203156
IP address blocks: 128.65.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 00:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:0f:3d:0c:e5:20:5c:a3:a0:22:d5:64:ea:32:98:02:ed:c2:09:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Oct 19 19:36:06 2026 GMT
Not After : Oct 18 19:41:06 2027 GMT
Subject: CN=7B518B4A67000B4D732B6F7D5877B2BFE6C42FEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:50:2f:5f:25:c3:03:0f:f6:93:dc:1e:33:86:
f8:3f:82:34:ee:89:93:76:81:51:0f:c2:cf:c3:f5:
36:08:16:a5:2f:b2:23:5b:58:45:06:da:3e:e6:b4:
dd:b0:43:4f:64:01:57:cd:a0:15:56:ff:ca:4c:d6:
70:d5:ef:3e:f2:69:ca:70:1d:cb:00:ab:56:88:42:
e6:94:96:1c:ff:6b:c0:88:c9:10:4c:ee:dc:53:7e:
1a:d5:0d:9b:e5:e6:31:a4:2a:a1:cd:9a:97:90:c1:
2c:e1:9a:29:fe:3d:63:49:c9:69:8a:92:d8:14:7d:
d5:38:04:68:85:37:d9:2c:fb:d1:d1:d4:d9:79:ff:
1f:2a:50:5e:d7:6f:b5:5c:3d:3a:bb:d0:e8:9a:51:
5e:52:e2:76:d5:4e:ca:31:0d:d3:5a:ed:ef:74:7a:
10:81:57:2a:2a:04:05:e2:65:26:43:21:53:7e:82:
1e:aa:2f:f7:37:13:95:42:9d:36:4a:16:a7:90:22:
55:b7:46:ce:e0:34:60:ca:b5:37:c9:a0:3d:ff:3c:
ac:93:b5:7a:bf:1e:a9:47:75:7e:41:fe:f5:1d:00:
30:8b:82:be:ed:bf:44:89:6f:83:98:fb:d1:ae:42:
d8:54:69:1f:9f:bf:4b:ff:36:a7:4c:99:23:d2:ca:
c4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:51:8B:4A:67:00:0B:4D:73:2B:6F:7D:58:77:B2:BF:E6:C4:2F:EB
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136302e302f32342d3234203d3e20323033313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.160.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:62:ed:60:fb:a6:9d:7b:c8:72:44:f8:f9:51:f2:1a:cd:2e:
46:f4:b5:54:26:4f:63:b9:4b:fc:0d:4d:91:26:ab:8e:bd:88:
3f:26:68:eb:b7:7b:ae:a4:8c:87:63:37:65:ea:c8:c2:4a:ce:
3f:1f:37:aa:22:79:9f:fa:8b:6a:30:64:42:db:89:28:83:8d:
a2:80:da:16:f3:9b:0b:23:9e:67:46:66:38:48:5a:d2:a7:7e:
ee:cc:3a:18:a0:10:6a:d8:15:53:b9:79:34:72:02:a3:22:e1:
28:36:4e:18:02:bb:8f:c6:c7:48:b8:52:37:57:fb:c0:50:4a:
35:10:70:1b:a4:3a:82:ee:99:aa:62:43:92:eb:2f:f4:fe:8f:
24:4e:9c:80:24:52:60:20:1f:9f:5f:01:6f:1d:99:05:40:47:
ef:c2:ee:21:3e:d3:48:77:af:7d:73:97:47:2e:d5:c5:0a:62:
22:9f:53:cd:53:b5:30:86:23:9e:5d:8e:df:53:4f:dd:01:27:
3d:e7:44:ba:d8:45:06:9c:ce:ab:43:a3:f9:28:86:00:f1:af:
f6:30:26:32:26:3b:b7:02:a1:3b:4d:c1:fd:66:81:a9:16:02:
09:67:c3:5f:0e:6e:39:45:bd:8e:79:03:63:a7:91:11:ca:6b:
df:06:c2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:38:20 2026 by rpki-client