Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136332e302f32342d3234203d3e20323033313536.roa
File: 3132382e36352e3136332e302f32342d3234203d3e20323033313536.roa (raw, json)
Hash identifier: je556DLLJkr4a6qPLiCYL8vf7xRTor1lYBCu4rtrxvI=
Subject key identifier: 06:CF:7C:63:75:48:BF:09:4D:17:54:15:88:26:4B:5A:89:54:0A:D4
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 646B16A5A52C87F861530C0CBAB6E7BE77AA3778
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136332e302f32342d3234203d3e20323033313536.roa
Signing time: Mon 19 Oct 2026 19:41:07 +0000
ROA not before: Mon 19 Oct 2026 19:36:07 +0000
ROA not after: Mon 18 Oct 2027 19:41:07 +0000
asID: 203156
IP address blocks: 128.65.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 00:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:6b:16:a5:a5:2c:87:f8:61:53:0c:0c:ba:b6:e7:be:77:aa:37:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Oct 19 19:36:07 2026 GMT
Not After : Oct 18 19:41:07 2027 GMT
Subject: CN=06CF7C637548BF094D17541588264B5A89540AD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:06:b1:c7:c1:85:3a:8e:3d:91:58:bb:4d:
58:cc:e9:02:6a:92:b3:c5:f3:b1:09:cb:fd:ea:54:
a2:5e:92:dd:28:b5:fc:82:ff:57:8f:09:04:2b:8a:
28:e3:f4:7b:5f:88:36:9c:74:57:c4:ef:50:1b:a8:
86:6a:7f:c5:4b:6f:25:32:62:f7:80:33:ae:d4:f5:
69:60:0e:d9:78:e7:34:14:b7:6f:2d:d6:2d:14:01:
af:4a:2f:c5:af:5d:29:83:03:bb:5b:25:93:aa:33:
72:4a:d3:d5:ad:19:e2:64:d7:0d:bc:e5:7a:64:af:
1f:8c:e0:f5:3a:f1:ab:a7:bc:0b:6e:1a:6e:0c:bd:
22:47:b3:99:c3:f6:d3:1e:4f:d7:80:a3:14:be:da:
30:54:fd:1f:96:25:91:13:ff:a4:d1:86:32:fe:69:
3c:66:a7:40:7f:d1:26:bf:d4:26:06:4f:48:3c:ad:
d0:8c:98:50:9b:fe:dd:3a:13:a3:78:54:2b:42:62:
b8:c9:e3:db:d2:e5:d6:93:30:78:69:33:0b:ee:e1:
cf:f4:6e:76:f6:f9:d4:f4:bc:dc:e5:17:8a:c9:53:
e7:0b:ae:90:a0:e3:59:68:11:03:f6:fe:bc:5d:e4:
68:a9:1b:d3:7b:8a:d9:b3:6a:5b:22:d9:7f:66:e2:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CF:7C:63:75:48:BF:09:4D:17:54:15:88:26:4B:5A:89:54:0A:D4
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136332e302f32342d3234203d3e20323033313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:84:1a:1e:ad:4e:7a:52:9d:04:bf:b1:6e:a1:83:22:9d:71:
5a:39:ea:92:9b:86:0c:57:a2:06:a9:7f:ad:f8:58:00:b6:08:
52:44:a0:53:f8:ab:b9:6e:e8:c9:60:0c:0a:29:03:2a:41:11:
fc:2b:27:98:86:0b:85:53:89:83:b8:fe:42:1c:c4:e1:be:8f:
d2:9e:6a:ca:bb:6a:f6:98:93:23:93:f9:1d:f8:e4:50:b7:58:
f0:ef:b7:23:2c:58:2c:ff:3d:4f:21:54:f9:a9:31:ed:49:6a:
9f:10:ba:3a:c9:12:b1:a1:e6:65:42:a6:ad:06:65:26:dc:69:
0b:42:7a:1b:2b:6f:ed:dc:03:37:19:fd:7e:81:c1:f6:22:a6:
42:52:5e:bf:be:0a:79:31:50:a9:14:52:1c:38:ca:4e:1c:8d:
9c:ae:81:b4:a3:8f:b1:2d:60:e3:b0:bd:57:49:83:8b:de:06:
39:bb:e7:18:8a:f8:b4:3e:ed:dd:3b:f1:6f:08:fd:98:cf:a8:
0b:9d:f4:cf:d2:7c:ca:b2:ab:bf:55:e9:63:71:cf:91:99:b0:
19:2c:55:04:1c:26:4b:cc:65:fa:e2:65:8d:a5:2a:ca:5c:df:
c3:e0:47:63:d8:59:d2:80:96:77:5d:24:97:7d:88:8d:8c:9c:
a5:df:d9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:46:31 2026 by rpki-client