Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136312e302f32342d3234203d3e2036343735.roa
File: 3132382e36352e3136312e302f32342d3234203d3e2036343735.roa (raw, json)
Hash identifier: w9M2BBTop13WU8kUevL0gA67VApSWNrUSzG6rTYYLtE=
Subject key identifier: AF:B0:7C:64:E1:30:3B:73:62:2A:D4:63:53:B9:E5:46:83:BB:98:8E
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 6CFA9B6D26AE1154EBEE9D099C9E8C9FC4F9928E
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136312e302f32342d3234203d3e2036343735.roa
Signing time: Wed 21 Oct 2026 02:44:58 +0000
ROA not before: Wed 21 Oct 2026 02:39:58 +0000
ROA not after: Wed 20 Oct 2027 02:44:58 +0000
asID: 6475
IP address blocks: 128.65.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:fa:9b:6d:26:ae:11:54:eb:ee:9d:09:9c:9e:8c:9f:c4:f9:92:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Oct 21 02:39:58 2026 GMT
Not After : Oct 20 02:44:58 2027 GMT
Subject: CN=AFB07C64E1303B73622AD46353B9E54683BB988E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1a:2c:b4:72:a5:53:4a:df:3b:0e:35:7f:34:
34:69:7e:37:8e:b8:73:76:5c:85:66:b0:25:84:a6:
a4:6e:a7:00:9b:71:70:b8:b6:0d:7e:c5:17:7b:d1:
6a:85:eb:d6:79:c3:24:dd:5c:e8:fc:c6:b9:a0:ee:
5f:e2:32:2f:50:b9:2b:97:64:46:b7:c5:eb:94:50:
65:ba:e0:4f:bc:14:92:81:1f:2c:c5:ce:f3:51:9f:
ec:15:e8:cc:46:f7:02:c1:7d:ed:e2:03:ae:b4:8c:
fe:6a:fb:dd:cb:9d:8f:2f:a2:c7:f7:3c:ed:6c:7b:
a5:61:6b:ff:5c:d1:49:99:ff:a2:d4:bc:91:13:f9:
90:25:34:e6:78:02:d2:26:d1:6e:84:57:c2:71:bc:
af:9f:83:00:ec:b0:8f:6d:b8:25:c4:40:98:25:cf:
74:bd:82:0d:07:3c:5f:2a:b3:aa:2d:cd:01:02:2a:
1f:8f:76:85:b7:0c:18:6f:dc:c4:5a:ad:2e:78:f6:
c7:9f:11:5c:b1:0d:7e:ea:b5:9e:b4:37:db:58:02:
9d:e8:7a:e8:a5:63:b4:77:84:9e:e0:e1:a4:01:92:
af:85:1a:db:ce:65:1a:da:64:dc:99:3a:5e:a4:e2:
83:a2:23:d9:54:2f:62:56:f4:50:1f:0d:8e:77:ea:
ac:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B0:7C:64:E1:30:3B:73:62:2A:D4:63:53:B9:E5:46:83:BB:98:8E
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136312e302f32342d3234203d3e2036343735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.161.0/24
Signature Algorithm: sha256WithRSAEncryption
39:92:f9:65:e3:47:e5:86:c0:43:77:05:d0:d1:af:7c:e5:99:
5f:01:1c:22:0d:88:b3:c2:7f:77:fc:39:c1:fb:b4:10:cb:e9:
03:cd:a9:6d:cd:05:e2:37:21:3e:17:12:b2:8d:27:86:15:3b:
ff:c5:d5:a6:0a:7b:d7:f5:dd:ce:9c:14:30:0b:ff:b3:bb:eb:
cd:53:17:2f:38:b9:26:99:29:2d:6f:f6:c6:fc:38:5d:70:57:
d5:ad:8d:3c:2c:c0:ab:0e:21:bc:3f:f0:8f:ec:c5:10:7d:c6:
f9:50:6d:35:31:63:6b:d6:66:d9:8c:2d:b0:09:e6:8b:bb:bc:
f9:f1:de:af:40:65:c2:d5:e7:de:0d:77:b6:b3:81:05:da:5f:
30:cd:92:d5:4c:e5:0d:1c:9a:b9:14:dc:ac:c8:e8:cc:cd:b0:
b2:f2:c8:f9:05:fb:4f:5e:fb:49:03:28:5b:2f:9d:d3:16:90:
3d:5d:94:05:53:93:66:2e:87:0a:d7:74:98:03:94:25:0d:0b:
8f:9e:dd:d4:26:72:a7:02:cc:20:49:40:8f:45:d0:d4:47:06:
e0:66:59:9d:52:82:c0:c6:d7:ab:f6:0f:bd:9e:a9:4f:3c:ec:
6f:2f:56:89:16:6a:2f:c9:4c:fe:ae:a8:13:80:f9:e2:48:a5:
ff:0f:4b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:28:36 2026 by rpki-client