Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e322e302f32342d3234203d3e20343032323336.roa
File: 3139342e32362e322e302f32342d3234203d3e20343032323336.roa (raw, json)
Hash identifier: Svrr+wgr/nQThaTFfhRBjAYu9J8WfdukPNEs2F7UKRs=
Subject key identifier: 9D:AA:0A:41:68:A0:7D:85:E7:74:A6:85:75:01:7C:90:2E:83:6F:B4
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 482A0A2DE7034242A7E283DAEBA5DC8C50EF9138
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e322e302f32342d3234203d3e20343032323336.roa
Signing time: Mon 06 Jul 2026 18:22:19 +0000
ROA not before: Mon 06 Jul 2026 18:17:19 +0000
ROA not after: Mon 05 Jul 2027 18:22:19 +0000
asID: 402236
IP address blocks: 194.26.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:2a:0a:2d:e7:03:42:42:a7:e2:83:da:eb:a5:dc:8c:50:ef:91:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Jul 6 18:17:19 2026 GMT
Not After : Jul 5 18:22:19 2027 GMT
Subject: CN=9DAA0A4168A07D85E774A68575017C902E836FB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:5b:20:c1:95:03:4e:c8:5f:5c:e0:fe:e2:
1e:38:e5:ed:4f:9b:ad:56:94:3c:25:ae:40:94:2d:
d5:3e:ca:8b:bf:30:b0:58:c4:4a:8a:2a:d4:f7:ec:
62:08:d7:dc:2f:8c:13:cd:0a:ad:18:fe:7a:66:3c:
c1:7f:da:3a:05:25:ac:29:79:d0:b8:aa:dc:f8:6f:
29:0b:91:75:f4:f2:aa:ab:1c:a7:b4:dc:b2:bf:3f:
5f:2c:59:27:66:c3:dd:dd:3b:75:9e:6c:cd:07:98:
a8:41:9f:a5:81:ae:af:d5:3d:1e:bc:50:5b:ac:d0:
3b:ee:b9:16:20:60:2f:37:4f:2d:5c:a4:0e:c0:d1:
c1:a7:fa:6c:94:b8:12:b7:26:9e:da:ca:a1:ae:fe:
bc:e5:eb:52:72:03:75:5d:98:d2:21:2a:df:bd:68:
88:ac:1a:60:e5:63:42:14:be:c2:ea:a5:d0:8d:80:
ae:22:02:28:46:40:f8:1a:23:50:af:95:4b:cd:bf:
e3:6a:d4:db:40:b1:6d:4b:43:c7:c2:06:3f:2a:d9:
89:91:41:2f:f9:21:85:a3:10:47:ba:9f:d1:b9:57:
d1:1b:c7:8a:8a:2a:af:01:42:f7:01:be:ff:d5:ff:
48:39:4d:cb:3e:7e:8a:d6:a1:b2:b9:cc:c5:89:5f:
03:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AA:0A:41:68:A0:7D:85:E7:74:A6:85:75:01:7C:90:2E:83:6F:B4
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e322e302f32342d3234203d3e20343032323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.2.0/24
Signature Algorithm: sha256WithRSAEncryption
75:9e:bc:fd:bf:7f:e8:ca:aa:54:24:6b:96:b3:17:39:57:fc:
c0:68:73:93:80:d6:44:f8:57:da:e3:ac:1b:32:45:1c:7f:1c:
f4:51:30:99:55:d4:d3:07:d5:d6:f9:ed:36:ef:9a:f7:54:82:
36:91:d8:44:28:0b:0c:f1:39:3f:42:1a:39:9f:b3:36:bf:cd:
1a:5c:9d:50:89:5b:ce:66:71:6a:9c:bc:ed:45:70:e5:2c:58:
0f:39:9c:c2:ff:67:73:de:d9:cf:34:b3:8b:f9:74:eb:c9:66:
9a:2f:b2:31:81:d7:9b:f0:d8:c6:1e:35:c1:ff:65:db:62:54:
22:11:31:85:8e:33:2e:44:15:c7:2b:36:7c:a4:84:e9:08:d5:
c8:8e:61:78:d9:e8:b5:6b:03:2f:1c:34:21:4f:7c:c0:de:a3:
d2:b1:ec:5f:6b:b6:d0:ae:d5:9b:de:f7:0f:cb:6b:c5:aa:26:
b5:dd:e4:b9:db:c7:61:02:b2:a8:13:63:4c:00:1d:08:ae:0f:
20:8c:97:43:7f:c8:69:5f:3a:bb:4f:ea:52:94:93:3a:63:67:
47:2f:1f:00:c0:e0:49:3a:f1:1e:4e:9b:95:b0:49:ec:cc:ec:
f6:87:7a:62:9a:42:e2:d3:05:85:71:fa:11:ff:be:25:e0:b4:
5e:c4:a2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:22:55 2026 by rpki-client