Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136382e302f32322d3232203d3e2030.roa
File: 3132382e36352e3136382e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: LMDgr7gMIM6nTmp/G5CjVNDfB1BvSS+cOx8wkSunyD0=
Subject key identifier: 65:9C:F1:9D:90:40:B7:32:A2:A2:1A:71:E4:9E:31:46:84:BD:F9:80
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 755F04395419AA0C82F7D593DE0DB92CF66B741C
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136382e302f32322d3232203d3e2030.roa
Signing time: Thu 02 Jul 2026 07:12:12 +0000
ROA not before: Thu 02 Jul 2026 07:07:12 +0000
ROA not after: Thu 01 Jul 2027 07:12:12 +0000
asID: 0
IP address blocks: 128.65.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 21:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:5f:04:39:54:19:aa:0c:82:f7:d5:93:de:0d:b9:2c:f6:6b:74:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Jul 2 07:07:12 2026 GMT
Not After : Jul 1 07:12:12 2027 GMT
Subject: CN=659CF19D9040B732A2A21A71E49E314684BDF980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:75:48:25:36:38:a0:a8:a4:3e:95:8d:e0:
9a:9b:7c:af:85:83:d5:28:4f:2d:7a:4e:7b:9e:a3:
c6:77:fb:b9:64:b8:5f:84:1e:f5:87:27:40:92:78:
1f:13:6c:6a:19:73:87:0b:77:e8:87:a9:e4:2f:22:
53:fb:1f:ce:df:e8:19:55:b9:9a:7e:03:33:45:d0:
6f:42:25:91:38:90:ff:e2:62:ae:45:55:93:d8:2c:
b7:0c:29:a6:a2:ec:03:ad:0a:fd:35:de:c7:62:54:
1d:1a:c4:84:f5:a4:05:d1:c4:bc:07:25:8d:ab:91:
69:51:4e:05:57:2b:44:d9:9b:17:73:14:e0:67:d0:
85:c4:e7:f2:6a:ad:96:ca:b5:16:20:e6:40:aa:86:
5e:11:f2:22:ad:b2:2d:a8:76:24:bd:37:02:dd:a2:
60:e8:a9:9a:81:6c:82:a8:a9:3c:7b:c6:85:12:5f:
2e:12:aa:13:5f:1a:02:43:a3:ec:0a:23:49:ac:1e:
fd:6c:06:69:23:8e:e2:c2:00:c3:bf:96:ea:8d:2a:
0c:67:11:dd:8c:29:2d:93:21:a7:4f:de:b6:fe:84:
ca:a6:d7:10:90:d2:fa:4e:58:64:16:56:7c:5d:2b:
38:a2:55:09:f1:43:4c:77:20:ee:3f:ff:51:21:39:
88:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9C:F1:9D:90:40:B7:32:A2:A2:1A:71:E4:9E:31:46:84:BD:F9:80
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136382e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.168.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:44:d8:eb:08:95:39:f4:f5:b0:b2:a6:53:9f:11:71:ce:26:
96:1f:14:76:23:c6:98:39:cc:b6:ac:e4:0b:a0:7a:08:bd:f0:
4a:8f:fe:93:2a:f2:ec:75:d4:20:c7:5a:93:e0:62:43:b6:b2:
5e:ad:72:3e:49:a3:4e:74:62:67:10:f0:e9:f5:3e:c5:67:9b:
73:b8:b6:10:79:11:c5:cc:93:23:de:7f:18:74:fc:c0:e9:54:
cd:c8:3a:fa:6f:c6:33:cb:9e:71:a5:be:24:07:3b:fc:50:57:
ac:0e:98:c5:88:61:11:20:c8:b8:94:89:a2:99:ef:6b:a4:43:
d3:b2:a7:15:bd:dc:7e:dc:73:87:ba:c4:c7:f3:cf:67:c7:6b:
ee:22:e2:7b:1e:fe:ef:23:79:cb:e0:b0:6f:de:aa:f4:cf:bd:
55:94:a7:97:71:5d:87:56:f9:f3:f1:02:16:ad:e5:7e:92:68:
95:56:5c:72:1d:af:50:3f:0a:7b:af:d5:0a:02:87:17:2b:5a:
cf:35:83:98:fa:99:f6:b4:e8:52:40:aa:28:7f:fc:71:d8:6f:
26:33:64:3a:c1:ea:9d:d3:4c:82:8f:a3:a3:27:9c:54:5c:9e:
0a:e1:d8:97:e4:0d:15:63:2b:88:6c:d1:40:4e:82:6b:34:c8:
0d:8c:85:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:27 2026 by rpki-client