Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e322e302f32342d3234203d3e2036303739.roa
File: 3139342e32362e322e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier: eXWT+PlyOnJLCf8fJSBgFCoZbaqBMmvm3nL9Np0p08s=
Subject key identifier: 25:51:07:C2:C1:55:9D:E8:00:F6:EF:5A:2D:C6:DB:00:63:84:53:55
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 077B8F1DDA6A8F1A23AC4C60D7CC17472CEF3736
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e322e302f32342d3234203d3e2036303739.roa
Signing time: Mon 06 Jul 2026 18:22:19 +0000
ROA not before: Mon 06 Jul 2026 18:17:19 +0000
ROA not after: Mon 05 Jul 2027 18:22:19 +0000
asID: 6079
IP address blocks: 194.26.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 12:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:7b:8f:1d:da:6a:8f:1a:23:ac:4c:60:d7:cc:17:47:2c:ef:37:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Jul 6 18:17:19 2026 GMT
Not After : Jul 5 18:22:19 2027 GMT
Subject: CN=255107C2C1559DE800F6EF5A2DC6DB0063845355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:82:17:98:eb:51:1a:4d:57:90:5a:24:ea:30:
a2:27:87:d8:ed:d4:a7:84:7c:e2:3b:ae:28:a7:14:
11:ab:70:a7:4d:36:ad:7f:28:c3:2d:b7:a9:b5:06:
27:5f:1d:38:7a:c4:fd:36:15:16:b7:89:c6:48:75:
8b:fd:83:de:27:99:47:76:00:89:51:84:e8:cc:a8:
d0:6f:72:fe:2a:a0:d2:72:64:81:ad:06:61:28:fb:
f2:4f:8d:0e:e5:a0:78:44:38:8c:35:06:f6:22:c6:
4d:2e:55:2c:25:b6:c9:71:e9:2c:80:fd:84:33:6b:
7f:ce:85:08:db:3e:19:9a:69:6d:da:f6:f4:1e:b3:
ab:37:2a:5a:ad:f8:a5:3d:14:9a:78:d9:ab:10:f4:
6e:77:e0:ec:61:5b:e4:7a:da:45:fa:09:33:98:3c:
09:5b:69:eb:5f:4a:ac:d1:4b:83:63:0b:59:5c:5d:
75:58:48:81:0e:ca:d7:e0:b2:9f:0f:36:09:02:b7:
b3:b3:c9:54:87:89:da:ad:f8:c1:d4:b3:bd:38:d8:
7a:50:b9:3f:30:c5:9d:31:89:db:b3:9b:c4:23:a2:
40:81:71:8f:93:42:e0:3b:4c:6a:90:4a:fe:0c:27:
52:ff:62:df:6c:b1:f5:5e:f6:f6:dd:cc:49:a4:83:
44:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:51:07:C2:C1:55:9D:E8:00:F6:EF:5A:2D:C6:DB:00:63:84:53:55
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e322e302f32342d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.2.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:66:70:d3:dd:9e:58:b0:fa:87:37:e1:b1:29:fc:98:09:68:
c1:83:aa:f9:8b:b6:48:f2:1e:87:7f:81:90:c9:35:88:05:44:
54:8f:80:4e:73:31:ff:8c:09:4c:92:8d:11:37:d9:31:ca:be:
93:52:a2:5e:3c:2f:70:3f:ab:20:cb:54:8f:57:04:5b:5d:6e:
60:bc:95:81:c4:69:53:e8:eb:43:19:11:21:08:5e:5f:37:2a:
1f:e4:d6:a1:95:4d:ec:8d:e4:7a:30:8d:b1:b9:f1:39:d5:04:
63:8d:d6:01:f8:2e:88:d8:08:c6:67:88:2c:4d:6a:df:52:58:
6e:be:69:d7:0a:17:90:9c:e7:e5:18:2f:1b:7f:e5:d0:2c:15:
d4:e1:f0:18:82:2c:83:d6:3a:2d:fd:34:04:d5:b0:4a:06:2c:
f9:7f:70:87:99:ea:c5:df:67:68:dc:8a:3c:38:46:9d:5f:1e:
49:43:6f:a8:cc:d9:7d:f4:ee:53:8e:0d:f7:86:08:02:cd:81:
54:d4:30:e0:86:21:e4:40:dd:dd:bf:e9:43:12:99:de:20:76:
ee:04:51:ad:99:f6:7f:0d:ac:27:45:9b:c9:70:27:1b:f8:57:
1d:1f:03:59:63:3d:84:12:70:67:fc:88:69:a1:d9:98:a1:b0:
c3:28:f6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:09 2026 by rpki-client