Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139332e3234362e3136352e302f32342d3234203d3e20343031323935.roa
File: 3139332e3234362e3136352e302f32342d3234203d3e20343031323935.roa (raw, json)
Hash identifier: L44J+BEkrVdft9AVRNXbl2gKqXXH8VsPAtFPRC3L9uU=
Subject key identifier: A1:55:3C:0B:DD:F5:62:19:DC:7A:A2:E9:93:12:42:41:CE:36:75:27
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 72E5BD5C26264E6A1363FFC36DAD394F693AA17E
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139332e3234362e3136352e302f32342d3234203d3e20343031323935.roa
Signing time: Mon 17 Aug 2026 22:29:42 +0000
ROA not before: Mon 17 Aug 2026 22:24:42 +0000
ROA not after: Mon 16 Aug 2027 22:29:42 +0000
asID: 401295
IP address blocks: 193.246.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:e5:bd:5c:26:26:4e:6a:13:63:ff:c3:6d:ad:39:4f:69:3a:a1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Aug 17 22:24:42 2026 GMT
Not After : Aug 16 22:29:42 2027 GMT
Subject: CN=A1553C0BDDF56219DC7AA2E993124241CE367527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:33:94:a0:14:3d:1e:22:c2:b2:af:2c:9f:
92:a8:69:cd:18:25:91:63:b9:45:79:18:91:1e:c5:
95:83:f9:c1:83:e8:eb:e1:58:0e:2e:12:56:24:2f:
49:7c:19:99:b1:8e:d2:94:76:2b:3e:7c:56:ad:ef:
a6:85:20:b1:0f:4a:73:21:ce:73:c9:d2:e0:2d:ec:
10:52:0f:ef:a0:d2:aa:92:a2:af:f0:2e:31:83:ba:
d3:a6:e3:40:01:4a:f4:bf:06:cc:00:77:64:32:f6:
c7:dc:32:ea:44:d3:91:6b:5d:f7:22:76:cf:f1:d7:
5e:72:6b:d6:50:6c:f6:be:3f:73:b4:c4:85:e6:5c:
57:7a:a9:25:ed:79:1d:7d:3a:82:47:7b:1c:93:fe:
00:1b:93:91:d3:4f:90:37:7c:e7:80:65:cf:f9:e8:
6c:f8:9b:09:bf:10:40:b1:ef:f8:27:8f:0b:78:64:
ff:7b:28:98:4d:35:2b:5e:11:4b:de:35:2c:db:2a:
d3:7e:1b:f9:05:cc:b1:3e:b4:2a:be:e0:bb:a3:45:
51:50:94:c8:c3:63:6b:75:10:0b:a7:91:33:6c:54:
a3:63:c2:a9:9b:17:a1:83:7e:8b:53:9f:86:c8:9c:
3a:3e:07:7e:7d:51:67:e3:09:48:a8:7a:67:b9:14:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:55:3C:0B:DD:F5:62:19:DC:7A:A2:E9:93:12:42:41:CE:36:75:27
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139332e3234362e3136352e302f32342d3234203d3e20343031323935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.165.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:78:e5:2a:ab:8b:57:81:59:a0:b1:1c:b1:52:7c:ec:fe:05:
53:07:ed:df:bd:71:48:cf:9a:c3:5e:a6:11:d0:1b:68:03:6a:
81:d8:ed:95:78:84:39:ab:54:d6:34:c5:1c:ea:5f:9d:a4:3d:
2e:ed:3d:b2:4a:af:ab:7c:33:86:25:59:7a:e1:f0:a5:48:11:
78:67:3b:9c:8b:cf:12:05:ad:05:af:f1:56:83:01:83:cd:26:
a1:46:86:e8:04:62:6d:51:3f:5b:90:98:b1:5e:1e:f4:49:37:
c6:a6:21:ab:02:25:5f:c0:ea:3f:e3:6d:89:5b:5a:3d:87:43:
ba:71:49:e2:20:55:ee:a5:c9:ad:dc:83:fd:80:1d:3d:d7:db:
dc:f6:99:1f:44:0a:84:5f:80:5e:c8:a4:cf:fd:53:7d:5b:ad:
72:f5:1a:2a:40:8c:49:1b:75:3f:84:83:33:5f:32:35:e1:54:
46:ed:b5:4f:88:9c:0c:71:6d:84:5e:83:ea:7f:1f:90:03:fa:
1a:42:03:08:84:e6:57:cd:4c:5d:db:a7:39:f3:96:21:f3:54:
2e:23:12:c4:86:59:8d:db:ba:60:27:6e:75:02:29:aa:29:92:
e9:0a:2c:47:af:35:75:32:48:5a:9f:6a:fd:87:12:17:3b:51:
a4:ad:06:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:19:13 2026 by rpki-client