Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136322e302f32342d3234203d3e20313336383039.roa
File: 3132382e36352e3136322e302f32342d3234203d3e20313336383039.roa (raw, json)
Hash identifier: soLGmX03Exb7hU+XoROGbNC+uLsxhvtPCvpT5TuzWvg=
Subject key identifier: B9:BE:DA:9E:C1:F6:DF:C6:43:16:FA:3B:E1:9C:A9:6F:E6:A5:1D:C4
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 2485817A866AAD6A5C97AE04305E0D0E897E97AA
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136322e302f32342d3234203d3e20313336383039.roa
Signing time: Tue 20 Oct 2026 07:09:17 +0000
ROA not before: Tue 20 Oct 2026 07:04:17 +0000
ROA not after: Tue 19 Oct 2027 07:09:17 +0000
asID: 136809
IP address blocks: 128.65.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:85:81:7a:86:6a:ad:6a:5c:97:ae:04:30:5e:0d:0e:89:7e:97:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Oct 20 07:04:17 2026 GMT
Not After : Oct 19 07:09:17 2027 GMT
Subject: CN=B9BEDA9EC1F6DFC64316FA3BE19CA96FE6A51DC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:01:e0:33:c5:cd:0e:2c:76:da:41:84:5e:51:
dd:c1:15:c7:28:6e:a7:e1:cd:ed:8b:63:c8:67:cb:
57:68:78:27:2f:04:67:ef:7e:8c:b8:ff:f2:75:2e:
a0:b3:d1:f1:b2:31:59:11:28:bc:ce:79:17:24:a3:
e1:72:c1:a6:43:8a:24:e7:c2:41:16:13:7a:67:57:
a6:1e:bf:38:9c:03:7a:22:6a:b9:4c:90:ba:02:59:
48:e8:b6:12:46:4b:4c:eb:ca:bc:07:54:8f:3b:6c:
7b:e4:48:73:a4:54:d8:3c:83:02:a5:58:c8:8a:11:
82:27:a5:a4:d9:a7:39:9b:5e:b3:43:9e:25:50:28:
4b:98:82:a8:e6:d0:66:9c:b9:61:aa:94:3e:87:6d:
b2:9d:10:e8:e0:e2:40:66:46:20:44:17:8f:48:bd:
d4:fb:07:99:a0:eb:c0:8c:9d:3e:66:25:71:a9:c5:
c9:bd:ad:5a:6d:c4:db:e0:64:11:2f:fa:83:ef:00:
f8:15:6b:56:9b:37:7e:be:7a:11:9d:99:4f:7c:2f:
79:b1:92:57:8a:12:06:0a:7c:92:ad:56:c6:01:13:
8c:d9:0d:bc:52:e2:78:3e:f6:16:0c:6e:6f:b3:42:
e0:48:f0:90:b5:8f:0e:64:40:38:4c:f6:58:1e:3e:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BE:DA:9E:C1:F6:DF:C6:43:16:FA:3B:E1:9C:A9:6F:E6:A5:1D:C4
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136322e302f32342d3234203d3e20313336383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.162.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:50:fd:ce:14:a7:5c:da:bc:68:0f:60:b1:74:7e:2b:3f:2f:
b1:18:ac:78:05:bc:0a:2b:15:75:07:03:c7:03:24:6e:67:2e:
5c:31:73:c1:4a:2a:ce:a2:c1:e0:0c:07:27:f0:3a:dd:6d:45:
0a:43:6b:5b:6b:d5:48:24:b0:b2:9b:13:f0:b9:4e:ed:b3:33:
9d:99:6b:0f:86:55:c3:21:40:ff:df:9a:f6:7e:32:40:c2:72:
f7:b6:4d:fe:d2:e9:8b:a4:42:67:44:4a:f3:82:5c:61:b8:cb:
78:a6:3b:cc:10:f3:bb:58:4d:1c:81:de:c7:e3:32:26:80:2f:
cf:d8:9c:29:92:1b:f2:9c:23:b8:7d:cb:5f:29:97:ee:53:75:
34:f6:ca:72:37:23:a4:6d:a3:78:e0:a0:96:a8:63:6d:cf:e9:
8d:9c:b0:09:49:b7:f0:e0:f5:80:5f:c3:83:f9:21:bf:73:24:
29:67:22:3b:81:44:30:81:4c:5d:e0:30:72:8e:1e:f8:83:1b:
96:23:0b:74:27:54:5b:27:a6:44:f7:ab:ce:b7:b8:cf:09:de:
f1:33:c8:fb:86:54:e6:44:c4:fc:90:4e:09:89:6e:af:3a:59:
fc:62:24:fa:10:78:4f:39:37:00:78:de:1c:d3:c1:7d:00:e1:
8c:67:ee:1b
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUJIWBeoZqrWpcl64EMF4NDol+l6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0
ZTQzYWUxYjAeFw0yNjEwMjAwNzA0MTdaFw0yNzEwMTkwNzA5MTdaMDMxMTAvBgNV
BAMTKEI5QkVEQTlFQzFGNkRGQzY0MzE2RkEzQkUxOUNBOTZGRTZBNTFEQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdAeAzxc0OLHbaQYReUd3BFcco
bqfhze2LY8hny1doeCcvBGfvfoy4//J1LqCz0fGyMVkRKLzOeRcko+FywaZDiiTn
wkEWE3pnV6YevzicA3oiarlMkLoCWUjothJGS0zryrwHVI87bHvkSHOkVNg8gwKl
WMiKEYInpaTZpzmbXrNDniVQKEuYgqjm0GacuWGqlD6HbbKdEOjg4kBmRiBEF49I
vdT7B5mg68CMnT5mJXGpxcm9rVptxNvgZBEv+oPvAPgVa1abN36+ehGdmU98L3mx
kleKEgYKfJKtVsYBE4zZDbxS4ng+9hYMbm+zQuBI8JC1jw5kQDhM9lgePgeFAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUub7ansH238ZDFvo74Zypb+alHcQwHwYDVR0j
BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy
NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1
RHJocy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTMzYjJmZDct
MzFjMS00NTFjLTgyODgtYzFhYTBhYTEyNzUwLzAvMzEzMjM4MmUzNjM1MmUzMTM2
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODMwMzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACAQaIwDQYJKoZIhvcNAQELBQADggEBAC9Q/c4Up1zavGgPYLF0fis/L7EYrHgF
vAorFXUHA8cDJG5nLlwxc8FKKs6iweAMByfwOt1tRQpDa1tr1UgksLKbE/C5Tu2z
M52Zaw+GVcMhQP/fmvZ+MkDCcve2Tf7S6YukQmdESvOCXGG4y3imO8wQ87tYTRyB
3sfjMiaAL8/YnCmSG/KcI7h9y18pl+5TdTT2ynI3I6Rto3jgoJaoY23P6Y2csAlJ
t/Dg9YBfw4P5Ib9zJClnIjuBRDCBTF3gMHKOHviDG5YjC3QnVFsnpkT3q863uM8J
3vEzyPuGVOZExPyQTgmJbq86WfxiJPoQeE85NwB43hzTwX0A4Yxn7hs=
-----END CERTIFICATE-----
Generated at Mon Oct 26 06:23:08 2026 by rpki-client