Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136322e302f32342d3234203d3e20343032333130.roa
File: 3132382e36352e3136322e302f32342d3234203d3e20343032333130.roa (raw, json)
Hash identifier: b9TZaVasBg7oOWZ8FDQH0/ungr/hONOiMrcd7u4G6Dk=
Subject key identifier: 94:61:93:19:F3:0F:43:7A:6F:3F:3D:0D:53:CC:CC:D4:44:18:2C:9B
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 732C80861183112DEC3C6B39A8324A38C2204070
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136322e302f32342d3234203d3e20343032333130.roa
Signing time: Tue 20 Oct 2026 07:02:16 +0000
ROA not before: Tue 20 Oct 2026 06:57:16 +0000
ROA not after: Tue 19 Oct 2027 07:02:16 +0000
asID: 402310
IP address blocks: 128.65.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 11:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:2c:80:86:11:83:11:2d:ec:3c:6b:39:a8:32:4a:38:c2:20:40:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Oct 20 06:57:16 2026 GMT
Not After : Oct 19 07:02:16 2027 GMT
Subject: CN=94619319F30F437A6F3F3D0D53CCCCD444182C9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:f2:4d:2e:7b:20:a6:90:06:62:c3:6c:6e:
3a:74:48:65:22:3b:5f:c5:4d:39:e5:19:20:ba:83:
91:10:5d:fd:df:4a:f7:22:d1:6d:63:89:e4:93:0d:
ae:1f:d6:ba:ff:bb:2f:70:ba:65:ca:51:49:00:8b:
ba:be:cd:71:dd:63:57:f9:ef:54:13:e9:95:06:6d:
e4:0b:48:13:f4:55:b5:61:fc:1f:a6:36:34:ca:bf:
15:09:af:48:37:e9:bc:5f:3b:c2:6b:bb:06:d9:1c:
1e:55:b9:b1:7a:a6:1f:75:e2:f4:24:51:67:7d:f0:
e8:2b:9e:ad:22:d4:e9:ca:13:d4:63:ce:0b:66:ab:
36:24:e8:ca:63:7f:9e:be:fa:c5:58:ea:16:91:86:
77:7d:00:c4:7e:24:ab:64:ce:30:1c:e4:75:c8:f1:
4c:29:19:ea:34:31:b9:16:86:f9:32:0b:95:47:e9:
39:75:65:78:31:2e:59:50:bc:f3:d6:61:74:a5:b4:
a7:28:ba:82:db:e8:d9:79:2d:02:a5:cd:76:39:a4:
77:3a:e7:e1:92:9f:47:58:ed:9b:6f:dd:59:8f:40:
97:a0:2f:84:30:0f:a0:74:78:8a:b9:80:39:1b:e2:
20:5d:11:3a:71:ae:b1:c2:c2:f4:c2:17:a9:a7:f0:
8d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:61:93:19:F3:0F:43:7A:6F:3F:3D:0D:53:CC:CC:D4:44:18:2C:9B
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136322e302f32342d3234203d3e20343032333130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.162.0/24
Signature Algorithm: sha256WithRSAEncryption
51:29:52:e1:ee:46:1f:91:4c:1d:7a:b6:51:12:2a:61:b2:31:
05:eb:cd:84:2a:c4:dd:9a:17:fe:66:c2:6b:93:3d:c4:a1:c0:
b4:ca:56:49:7c:e2:d4:57:12:4e:e5:c8:ef:b3:df:87:bc:e5:
92:08:83:c3:32:68:a9:07:cc:66:7b:2e:66:b0:ec:15:99:a7:
2a:a9:ae:f8:9f:68:51:a5:1b:d6:6d:59:2c:d0:e4:6d:17:89:
6f:89:62:02:d7:29:17:26:f2:bc:ff:95:3e:91:b1:16:a1:48:
dd:6e:d9:47:63:76:52:72:c5:38:76:cb:1d:41:2d:ac:f2:86:
fb:c1:cf:6f:93:32:1f:0a:12:88:a0:4a:19:c8:c3:b8:29:f5:
13:c1:f4:d9:e6:3d:76:8d:82:fd:e4:c0:4c:a9:1e:68:07:82:
0e:dc:ca:5c:61:1b:67:13:99:dc:cc:bc:92:f5:44:da:cc:c8:
96:96:40:1b:50:b1:03:e6:f4:ff:d5:44:f5:55:68:51:9b:94:
a1:ad:f6:9e:45:03:1a:84:e7:0c:f4:a9:f9:02:cc:09:8b:1a:
1a:58:04:45:3e:46:fe:ce:a0:78:0f:3c:50:96:6b:d8:3f:38:
4d:fc:f8:49:d4:e2:f3:6c:eb:ae:f3:6c:56:d5:4b:83:46:8c:
6f:26:82:56
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUcyyAhhGDES3sPGs5qDJKOMIgQHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0
ZTQzYWUxYjAeFw0yNjEwMjAwNjU3MTZaFw0yNzEwMTkwNzAyMTZaMDMxMTAvBgNV
BAMTKDk0NjE5MzE5RjMwRjQzN0E2RjNGM0QwRDUzQ0NDQ0Q0NDQxODJDOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGBvJNLnsgppAGYsNsbjp0SGUi
O1/FTTnlGSC6g5EQXf3fSvci0W1jieSTDa4f1rr/uy9wumXKUUkAi7q+zXHdY1f5
71QT6ZUGbeQLSBP0VbVh/B+mNjTKvxUJr0g36bxfO8JruwbZHB5VubF6ph914vQk
UWd98Ogrnq0i1OnKE9RjzgtmqzYk6Mpjf56++sVY6haRhnd9AMR+JKtkzjAc5HXI
8UwpGeo0MbkWhvkyC5VH6Tl1ZXgxLllQvPPWYXSltKcouoLb6Nl5LQKlzXY5pHc6
5+GSn0dY7Ztv3VmPQJegL4QwD6B0eIq5gDkb4iBdETpxrrHCwvTCF6mn8I1FAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUlGGTGfMPQ3pvPz0NU8zM1EQYLJswHwYDVR0j
BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy
NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1
RHJocy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTMzYjJmZDct
MzFjMS00NTFjLTgyODgtYzFhYTBhYTEyNzUwLzAvMzEzMjM4MmUzNjM1MmUzMTM2
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzIzMzMxMzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACAQaIwDQYJKoZIhvcNAQELBQADggEBAFEpUuHuRh+RTB16tlESKmGyMQXrzYQq
xN2aF/5mwmuTPcShwLTKVkl84tRXEk7lyO+z34e85ZIIg8MyaKkHzGZ7Lmaw7BWZ
pyqprvifaFGlG9ZtWSzQ5G0XiW+JYgLXKRcm8rz/lT6RsRahSN1u2UdjdlJyxTh2
yx1BLazyhvvBz2+TMh8KEoigShnIw7gp9RPB9NnmPXaNgv3kwEypHmgHgg7cylxh
G2cTmdzMvJL1RNrMyJaWQBtQsQPm9P/VRPVVaFGblKGt9p5FAxqE5wz0qfkCzAmL
GhpYBEU+Rv7OoHgPPFCWa9g/OE38+EnU4vNs667zbFbVS4NGjG8mglY=
-----END CERTIFICATE-----
Generated at Sun Oct 25 01:29:50 2026 by rpki-client