Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32312e302f32342d3234203d3e2036303739.roa
File: 3139342e32362e32312e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier: PXc6iwOgxftDj1gzf8ORi/W4+N4fkSzIW7L2p1ULJyk=
Subject key identifier: 1A:DE:88:39:ED:49:97:A2:EC:7E:80:38:08:54:8D:EF:40:78:CF:A9
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 652851FBA3A29726C88F5961F757F86713217062
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32312e302f32342d3234203d3e2036303739.roa
Signing time: Mon 06 Jul 2026 18:22:18 +0000
ROA not before: Mon 06 Jul 2026 18:17:18 +0000
ROA not after: Mon 05 Jul 2027 18:22:18 +0000
asID: 6079
IP address blocks: 194.26.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 12:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:28:51:fb:a3:a2:97:26:c8:8f:59:61:f7:57:f8:67:13:21:70:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Jul 6 18:17:18 2026 GMT
Not After : Jul 5 18:22:18 2027 GMT
Subject: CN=1ADE8839ED4997A2EC7E803808548DEF4078CFA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c3:a1:f3:1f:5d:f4:2d:95:0f:cf:7b:04:5b:
87:e4:1b:41:ad:d4:0d:e6:26:6d:f8:9d:22:b1:d1:
ef:b7:93:a9:5d:df:63:c7:4b:5c:bd:fd:07:f4:a5:
41:1a:12:2f:38:cc:bb:3a:0b:f2:3f:eb:e2:bb:cf:
e0:9e:77:6f:3d:60:90:94:a0:50:44:7f:69:48:bd:
e3:43:31:23:80:72:db:34:30:db:11:f3:a2:0b:6b:
ff:8d:c5:fb:4e:01:13:ca:5b:98:10:94:0e:2d:86:
b9:29:85:3b:f2:28:f7:92:a0:fb:55:20:ef:9d:f4:
15:8a:88:1f:de:15:83:c8:c6:76:f3:80:63:b6:70:
8f:9a:13:f2:79:0b:b4:b5:28:60:46:c8:6e:82:e3:
62:6d:64:0d:87:5e:d3:23:ed:46:28:7d:ed:72:0f:
d1:4a:f4:3f:ef:d7:9b:45:e8:05:30:9e:1d:09:9b:
45:21:eb:ea:f3:29:f0:5a:d1:a3:b6:dd:7a:6a:a0:
63:2f:4f:88:15:ae:62:95:79:96:9b:9f:82:03:e1:
e8:af:26:6a:af:21:e7:76:c2:f9:3c:22:46:03:56:
53:5e:06:80:79:b1:10:0a:03:4c:37:62:b8:59:57:
08:c5:29:34:d0:1b:ca:c2:fb:b4:29:f9:ff:1e:76:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DE:88:39:ED:49:97:A2:EC:7E:80:38:08:54:8D:EF:40:78:CF:A9
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32312e302f32342d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.21.0/24
Signature Algorithm: sha256WithRSAEncryption
75:67:ed:bc:b9:99:4d:d6:a5:f4:31:88:b3:24:82:17:d4:df:
06:fb:74:6b:50:86:da:df:14:5a:07:00:30:16:66:4e:07:aa:
68:27:08:c8:a8:f7:bf:a6:cf:6a:a7:96:cc:b4:df:f1:c5:5a:
2e:8c:e7:2e:dc:42:25:74:3c:3b:f1:e8:f8:3c:9d:2e:c6:36:
57:37:72:2a:9c:b6:47:67:30:f2:83:16:33:33:1c:0d:76:1b:
68:80:7d:70:14:b1:71:56:28:56:8c:a9:1d:9a:ee:03:a8:2e:
68:7d:b5:c5:5b:af:bc:fe:57:1a:84:f7:b2:14:ce:3f:1d:17:
4f:cd:90:78:a2:15:e5:8c:e9:ed:14:38:5a:96:ae:4b:38:49:
14:cc:43:6b:dc:8b:e3:4d:fe:00:e8:0f:0a:93:aa:3d:5e:b5:
65:d8:c1:db:b8:1b:6d:b2:da:57:f1:b8:26:4c:46:a1:42:00:
f9:0f:57:bd:9a:88:d9:b9:96:58:31:9b:3d:01:8d:3b:9e:96:
9c:de:5d:f3:ad:dc:ff:5b:e3:9c:ca:34:42:7f:91:c1:60:8e:
d3:5a:2b:c9:28:67:7d:d9:41:ac:d4:ec:3e:40:ed:48:97:81:
99:70:1b:bb:c5:da:6f:95:b0:b5:d3:77:f6:48:b4:91:26:94:
9f:01:b6:19
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUZShR+6OilybIj1lh91f4ZxMhcGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0
ZTQzYWUxYjAeFw0yNjA3MDYxODE3MThaFw0yNzA3MDUxODIyMThaMDMxMTAvBgNV
BAMTKDFBREU4ODM5RUQ0OTk3QTJFQzdFODAzODA4NTQ4REVGNDA3OENGQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnw6HzH130LZUPz3sEW4fkG0Gt
1A3mJm34nSKx0e+3k6ld32PHS1y9/Qf0pUEaEi84zLs6C/I/6+K7z+Ced289YJCU
oFBEf2lIveNDMSOActs0MNsR86ILa/+NxftOARPKW5gQlA4thrkphTvyKPeSoPtV
IO+d9BWKiB/eFYPIxnbzgGO2cI+aE/J5C7S1KGBGyG6C42JtZA2HXtMj7UYofe1y
D9FK9D/v15tF6AUwnh0Jm0Uh6+rzKfBa0aO23XpqoGMvT4gVrmKVeZabn4ID4eiv
JmqvIed2wvk8IkYDVlNeBoB5sRAKA0w3YrhZVwjFKTTQG8rC+7Qp+f8edij9AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUGt6IOe1Jl6LsfoA4CFSN70B4z6kwHwYDVR0j
BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy
NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1
RHJocy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTMzYjJmZDct
MzFjMS00NTFjLTgyODgtYzFhYTBhYTEyNzUwLzAvMzEzOTM0MmUzMjM2MmUzMjMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMDM3Mzkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCGhUw
DQYJKoZIhvcNAQELBQADggEBAHVn7by5mU3WpfQxiLMkghfU3wb7dGtQhtrfFFoH
ADAWZk4HqmgnCMio97+mz2qnlsy03/HFWi6M5y7cQiV0PDvx6Pg8nS7GNlc3ciqc
tkdnMPKDFjMzHA12G2iAfXAUsXFWKFaMqR2a7gOoLmh9tcVbr7z+VxqE97IUzj8d
F0/NkHiiFeWM6e0UOFqWrks4SRTMQ2vci+NN/gDoDwqTqj1etWXYwdu4G22y2lfx
uCZMRqFCAPkPV72aiNm5llgxmz0BjTuelpzeXfOt3P9b45zKNEJ/kcFgjtNaK8ko
Z33ZQazU7D5A7UiXgZlwG7vF2m+VsLXTd/ZItJEmlJ8Bthk=
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:08 2026 by rpki-client