Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e322e302f32342d3234203d3e20313532363036.roa
File: 3139342e32362e322e302f32342d3234203d3e20313532363036.roa (raw, json)
Hash identifier: eqZBf/Kthrhj6d5hUFfVX4Q8O8f60CabneFHuJYT6QU=
Subject key identifier: F7:2E:CC:4C:F6:E8:7E:3E:75:21:6A:03:3C:2A:85:05:D1:9E:8B:56
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 5C659A05C5FAD1FE7B1FC82449964AE35BE26521
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e322e302f32342d3234203d3e20313532363036.roa
Signing time: Wed 28 Oct 2026 11:11:30 +0000
ROA not before: Wed 28 Oct 2026 11:06:30 +0000
ROA not after: Wed 27 Oct 2027 11:11:30 +0000
asID: 152606
IP address blocks: 194.26.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 00:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:65:9a:05:c5:fa:d1:fe:7b:1f:c8:24:49:96:4a:e3:5b:e2:65:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Oct 28 11:06:30 2026 GMT
Not After : Oct 27 11:11:30 2027 GMT
Subject: CN=F72ECC4CF6E87E3E75216A033C2A8505D19E8B56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:c6:04:53:04:9b:28:25:1d:90:1b:a4:b2:
03:13:8e:61:95:e4:0b:42:f4:b3:31:2d:57:b0:dd:
0b:7a:3c:30:77:5d:b6:9f:f8:f4:67:38:d9:19:a3:
48:79:1c:7f:42:8c:9c:87:f8:d5:be:47:6c:cc:19:
63:b2:f0:58:26:67:4c:60:1c:b8:20:20:16:cc:88:
86:c2:59:71:cd:c2:e4:a1:68:b4:5e:fa:4f:d2:ba:
e8:20:15:ae:80:bc:48:d5:c4:87:02:42:24:5d:c8:
69:3e:13:cb:43:22:a9:3c:79:1b:97:15:2c:3a:29:
6a:46:35:f2:c9:f7:c8:b6:3d:3e:ee:7a:8c:9b:cd:
76:ef:a0:83:2e:42:18:df:d2:0a:6f:f6:f3:fc:f8:
61:24:1e:5d:d4:b2:06:49:08:e2:a2:29:0c:96:04:
6d:89:ab:3e:e3:ec:f0:9d:df:67:a8:87:94:dd:24:
0b:72:70:24:3c:0e:8a:b2:6a:f8:b6:7d:b9:fe:c7:
a1:6f:7f:17:05:fb:9a:e4:68:14:16:35:3b:6f:a4:
14:c6:bf:70:03:b9:fd:78:d6:6e:61:98:8e:4b:77:
9c:e0:56:dc:1a:0d:eb:c4:ec:c3:db:40:f8:d8:ed:
10:c0:82:e8:9a:c9:51:e9:47:05:58:59:de:20:85:
4c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2E:CC:4C:F6:E8:7E:3E:75:21:6A:03:3C:2A:85:05:D1:9E:8B:56
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e322e302f32342d3234203d3e20313532363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.2.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b2:29:b0:7c:d9:c1:28:21:24:15:12:85:41:88:50:5c:d8:
ee:bf:ab:2e:d5:72:62:af:4a:ef:ce:36:bc:4f:59:37:47:75:
e8:3a:a6:d1:41:fb:a4:70:76:0d:f5:da:f0:7f:20:2c:24:36:
9e:08:16:1b:1b:d1:8c:a2:ae:40:90:96:8e:56:22:cf:bb:33:
24:65:b3:87:13:a9:bb:85:ad:66:fe:8c:86:11:ef:01:95:60:
1a:a4:ef:b4:e2:4f:02:81:10:ff:af:70:2d:15:af:f1:ea:65:
fb:c7:f5:dc:e5:36:37:84:d7:e1:86:e9:12:5b:d5:c5:46:19:
52:5b:3b:95:73:9b:b9:13:43:65:b0:54:e4:f2:7c:7b:90:e2:
89:9d:96:4c:bd:c4:c8:06:3c:04:69:c5:45:94:bf:e2:50:99:
50:2f:7e:5d:a8:3e:23:53:6f:c0:be:36:2e:cf:7d:d0:4d:d9:
85:5d:5a:3e:2e:36:d7:9d:9a:3b:88:90:89:b1:f5:c1:fb:10:
50:84:93:f8:cd:fd:02:8d:a4:09:54:1d:12:03:d6:a2:5b:8e:
49:22:b2:09:e0:b9:6d:b4:01:55:34:0d:d0:d4:4e:32:23:dd:
33:1a:a9:61:fa:80:63:01:80:42:c1:c1:37:68:f4:02:63:3f:
7a:27:9e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:37:41 2026 by rpki-client