Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3137322e302f32322d3234203d3e203330303432.roa
File: 3132382e36352e3137322e302f32322d3234203d3e203330303432.roa (raw, json)
Hash identifier: DSlvyhOE27ifyw6VjV6XrUzDbR/BoOjnZsqvdmTDr1Q=
Subject key identifier: 1B:A2:CA:D5:15:8A:0D:48:06:7C:E3:38:5F:35:AF:87:C1:FC:28:02
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 51C966C43DBA9772E219DB92D8DB51EABE921F37
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3137322e302f32322d3234203d3e203330303432.roa
Signing time: Thu 08 Oct 2026 15:56:42 +0000
ROA not before: Thu 08 Oct 2026 15:51:42 +0000
ROA not after: Thu 07 Oct 2027 15:56:42 +0000
asID: 30042
IP address blocks: 128.65.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:c9:66:c4:3d:ba:97:72:e2:19:db:92:d8:db:51:ea:be:92:1f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Oct 8 15:51:42 2026 GMT
Not After : Oct 7 15:56:42 2027 GMT
Subject: CN=1BA2CAD5158A0D48067CE3385F35AF87C1FC2802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:7f:3d:d4:e5:d5:4e:46:f3:c8:ee:de:f3:
ef:df:5d:fc:7c:97:d5:49:40:00:c8:bd:0d:00:db:
fd:9c:63:7f:fd:60:73:8c:e1:60:54:36:ef:d8:e9:
22:4a:ea:c8:93:ed:dc:e6:52:ac:e9:ed:64:35:78:
57:14:bd:03:d6:d3:e1:47:01:85:af:7b:1d:1b:ba:
ba:1b:d5:8e:38:0c:c4:50:d4:ef:aa:a3:de:52:57:
a6:fd:ea:12:2a:54:86:06:b0:ef:60:db:e7:26:d8:
9c:a2:e4:8f:1b:27:e3:e4:9c:fa:30:c1:72:0d:d7:
cc:8e:dd:aa:63:72:d7:e7:8a:28:1b:cb:ce:d7:da:
29:1f:90:ab:d4:5e:77:f6:f4:d1:e9:5c:6d:51:cd:
6f:b1:7f:f4:ca:46:dd:85:89:9c:23:9e:26:47:b2:
88:48:4d:89:cf:4e:56:cf:e6:e7:91:42:37:ec:0f:
68:d3:84:ee:90:e5:8d:ca:77:fc:ec:4f:7e:95:5e:
1e:aa:4d:72:60:b9:1d:3e:79:ca:5e:f8:19:7a:81:
ce:b6:dd:05:a5:2b:aa:e1:1c:4a:9e:54:f2:8f:75:
49:c5:10:7d:2f:b1:7d:1e:88:f7:c3:13:24:df:9a:
76:da:5c:38:04:85:a8:c7:8d:80:a2:80:7d:f3:e4:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A2:CA:D5:15:8A:0D:48:06:7C:E3:38:5F:35:AF:87:C1:FC:28:02
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3137322e302f32322d3234203d3e203330303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.172.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:9f:3b:85:39:5d:56:fc:25:c6:a0:b5:8e:77:e9:3f:36:3f:
7e:00:26:3c:c4:06:41:49:fc:b9:26:b9:8a:37:21:75:e2:3a:
88:bd:8c:8a:0b:ee:bb:63:24:f4:4e:e3:53:ac:7d:57:51:24:
b9:6e:21:a7:12:03:70:40:b1:88:4d:10:d8:18:85:79:e6:6a:
e4:b8:66:05:b3:21:68:f2:5e:0f:ba:4d:8e:72:f2:61:90:44:
ab:54:a6:d9:75:da:e3:4a:36:b8:b0:0d:95:22:9d:e6:ab:f7:
04:20:79:f2:fa:f6:7e:ee:89:ed:20:5a:dc:1b:f7:da:29:23:
2a:c2:b1:3c:57:86:b5:14:a7:73:38:08:ca:25:58:d1:5d:d5:
bb:75:a1:f4:02:25:8b:d2:02:8b:f4:77:32:6e:09:11:1c:8b:
dd:ec:2a:b4:88:78:9f:ad:ff:38:4b:45:b0:9a:43:ab:ca:79:
1f:e0:45:90:49:3c:e1:91:bc:7d:75:36:bf:b1:73:93:da:10:
c4:32:3e:2f:aa:20:4c:4f:54:a7:c2:f9:3a:39:79:23:c7:e0:
d9:5d:b1:18:d1:ec:f6:4b:8b:a3:5e:72:1a:cd:14:5d:ac:cd:
fb:3e:68:82:70:b1:86:29:aa:02:1a:22:0b:fd:5c:03:82:69:
19:5b:e4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:40:57 2026 by rpki-client