Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32312e302f32342d3234203d3e20343032323336.roa
File: 3139342e32362e32312e302f32342d3234203d3e20343032323336.roa (raw, json)
Hash identifier: pUa1ndniCOYV9ES6BNwWdFcD47r2QhLmtLoNdmF7rhw=
Subject key identifier: 9C:A1:19:B8:E9:E1:FC:9B:44:51:7C:DF:B0:43:51:BB:98:DA:C9:37
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 2E487EC3B26360314AE4A6ADCD4F0BDD57883C1E
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32312e302f32342d3234203d3e20343032323336.roa
Signing time: Mon 06 Jul 2026 18:22:18 +0000
ROA not before: Mon 06 Jul 2026 18:17:18 +0000
ROA not after: Mon 05 Jul 2027 18:22:18 +0000
asID: 402236
IP address blocks: 194.26.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:48:7e:c3:b2:63:60:31:4a:e4:a6:ad:cd:4f:0b:dd:57:88:3c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Jul 6 18:17:18 2026 GMT
Not After : Jul 5 18:22:18 2027 GMT
Subject: CN=9CA119B8E9E1FC9B44517CDFB04351BB98DAC937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:03:25:ce:aa:39:fe:28:d7:08:5c:03:9b:
1d:81:ec:67:fd:28:ba:3e:ff:44:6a:da:89:4c:98:
d2:c2:49:16:8a:34:76:9c:83:6e:ad:58:79:a9:2c:
26:60:0d:e2:33:a4:55:f1:87:22:85:c3:e1:96:61:
6f:98:e9:3f:ef:29:b2:34:45:b1:38:f0:97:55:1e:
f8:b1:b3:75:9f:c3:27:cd:8f:ec:2f:f2:95:c5:7a:
bb:58:cf:fa:a7:47:e8:0d:36:6c:b0:ac:dc:c2:21:
5b:ff:c8:60:c6:e4:7d:a7:8e:fd:31:b7:57:b4:02:
97:a6:fb:30:6e:e0:fe:d5:2f:c8:ff:b9:f8:1d:3d:
f8:14:59:45:d0:30:88:21:a9:89:23:aa:ff:ff:7c:
e1:b7:3b:ba:76:2b:66:61:28:2d:c7:f0:11:ed:93:
12:d7:02:9f:7a:8a:fa:b2:80:5d:f1:0e:f2:98:fe:
3d:0f:94:a0:67:68:b8:67:50:56:65:27:33:1b:ab:
96:a5:c0:e2:93:00:71:cf:42:d8:24:d0:40:7f:c8:
9c:17:74:e2:b4:68:05:d8:02:0c:4a:2f:6e:9e:77:
81:b2:44:4e:45:c7:ca:8a:31:e4:7d:7d:a9:46:19:
04:25:c1:80:03:23:b8:64:13:a9:99:77:da:b6:d1:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A1:19:B8:E9:E1:FC:9B:44:51:7C:DF:B0:43:51:BB:98:DA:C9:37
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32312e302f32342d3234203d3e20343032323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.21.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:81:cd:8a:75:d3:44:36:b4:18:b5:3e:65:da:d9:93:15:6e:
af:f1:50:4f:c0:ed:54:7b:f2:4f:05:e8:2b:37:6b:2f:9d:92:
ff:05:3e:71:01:61:72:c7:50:eb:43:75:ff:73:7d:d0:ec:4c:
1e:5d:e9:65:be:89:ca:46:60:b6:ed:e0:1e:65:c4:78:d5:57:
1d:f5:91:af:d3:e7:a0:a3:7e:3f:a2:6d:d0:ae:c8:48:e6:e4:
61:5d:f3:7a:13:c6:a3:e3:1c:60:a2:06:82:65:0c:d8:9d:e9:
5d:8f:f7:55:70:80:3d:64:0a:82:31:d0:f5:ca:0a:80:10:93:
58:f0:46:9b:ac:07:13:a5:71:e0:f4:54:3f:d7:3f:34:8e:f2:
a1:02:b0:8f:74:d4:81:a7:fa:a5:02:bb:30:13:14:08:86:4f:
09:cd:1f:26:fe:ab:dd:66:e7:c0:ff:62:39:84:65:dd:8b:8c:
31:ad:b2:da:16:e2:d6:e9:50:92:fc:65:db:31:e7:03:79:80:
54:c6:f0:73:17:9d:75:3b:b9:0e:84:c8:f1:bf:96:75:cf:48:
42:56:5c:37:96:ce:c9:e9:ab:45:67:2c:04:63:fe:bf:36:c5:
bd:e1:67:6a:25:8e:a3:ae:01:83:e2:79:f0:f1:de:a1:56:af:
da:9d:07:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:22:54 2026 by rpki-client