Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa
File: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (raw, json)
Hash identifier: U7iNThQkzOazFO20cEnZ3jeJVGhPlXoN/qn3Pi641+U=
Subject key identifier: E7:19:B4:74:75:31:07:18:B0:37:7D:09:34:A4:24:E6:F1:BA:BF:9E
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 41EE992327ED4EB2CF4DD9E0FED25A1CC240735B
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa
Signing time: Tue 24 Feb 2026 06:55:40 +0000
ROA not before: Tue 24 Feb 2026 06:50:40 +0000
ROA not after: Tue 23 Feb 2027 06:55:40 +0000
asID: 5065
IP address blocks: 188.214.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ee:99:23:27:ed:4e:b2:cf:4d:d9:e0:fe:d2:5a:1c:c2:40:73:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Feb 24 06:50:40 2026 GMT
Not After : Feb 23 06:55:40 2027 GMT
Subject: CN=E719B47475310718B0377D0934A424E6F1BABF9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:72:a9:3f:28:17:4f:6a:05:1c:3d:2d:79:c5:
73:77:c5:d8:33:0a:7f:dd:07:ce:cd:4f:69:47:99:
cf:04:77:f7:85:46:d5:b1:86:04:1b:c7:31:d9:1e:
12:f8:33:a2:fc:05:0c:5b:79:f0:9c:fc:02:3d:cc:
e4:65:d2:cf:74:88:10:9e:72:fd:05:43:d1:42:bd:
61:75:31:cf:86:c1:80:98:e1:b3:67:4a:ea:8e:53:
62:a9:90:d5:4b:99:00:f2:da:0c:79:5b:c8:d2:76:
b4:e6:5c:fc:b8:d2:2f:ec:4a:c4:04:89:c2:a1:25:
0b:4b:8b:01:e8:55:5e:87:88:db:d5:a5:ae:1a:2f:
5a:56:85:10:78:23:46:42:df:f8:c1:fd:cd:51:2d:
73:80:7c:08:63:9c:26:54:b5:f7:a9:ac:1e:f3:57:
98:24:e1:2f:23:52:93:b7:3e:cb:47:5d:ee:35:81:
da:a5:da:46:7e:a7:4d:f1:f3:f8:80:21:ff:f5:12:
79:8d:eb:66:33:fe:85:7c:8a:0b:d5:53:60:22:bf:
d5:27:32:f1:77:e8:20:25:eb:1c:d2:e4:6e:50:51:
65:ad:c4:41:9e:a6:77:db:fe:5e:28:f3:20:94:33:
a9:f2:94:94:d9:01:68:db:42:c4:85:bd:7d:db:09:
62:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:19:B4:74:75:31:07:18:B0:37:7D:09:34:A4:24:E6:F1:BA:BF:9E
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.232.0/23
Signature Algorithm: sha256WithRSAEncryption
29:3d:8f:68:68:0e:65:32:02:3d:47:7c:aa:27:77:99:d6:e0:
7a:8c:61:9d:ca:27:38:b9:cd:73:3f:78:5d:83:9c:08:56:97:
98:d9:62:1d:7d:ec:f3:9a:25:6a:0f:54:a0:9e:70:24:bf:4b:
4e:82:d2:e4:ad:87:1a:21:cc:d9:b6:e1:73:6f:8f:82:18:49:
f4:b5:fc:51:b3:a7:ab:61:4f:4b:0b:e4:9e:29:28:63:ed:3b:
96:5d:a1:4e:74:15:ea:04:13:df:19:fc:85:26:57:95:32:cc:
98:32:21:df:31:c1:af:76:ce:f6:5e:86:ab:ce:21:1e:2f:34:
b1:08:32:23:69:8c:39:67:ec:37:0e:ca:3d:70:77:cf:3d:1b:
78:7d:c8:59:c4:5a:da:bc:82:10:2e:82:f8:00:a3:1a:bf:65:
cf:4d:81:5b:cb:aa:ef:b8:51:dc:2c:3f:70:fc:e2:9d:51:0b:
59:27:e1:07:a0:b8:c2:9b:98:18:a6:78:c6:c4:9b:05:51:8c:
bc:07:83:eb:d9:b3:2f:19:da:15:de:ad:da:82:08:95:ef:3c:
c4:3d:b7:96:0d:3b:ac:c6:40:66:21:38:20:08:1c:18:78:2b:
9a:a2:d8:76:c3:85:02:de:a0:bd:db:f1:91:e9:9f:bc:2a:ad:
1b:c9:9a:8a
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUQe6ZIyftTrLPTdng/tJaHMJAc1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0
ZTQzYWUxYjAeFw0yNjAyMjQwNjUwNDBaFw0yNzAyMjMwNjU1NDBaMDMxMTAvBgNV
BAMTKEU3MTlCNDc0NzUzMTA3MThCMDM3N0QwOTM0QTQyNEU2RjFCQUJGOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwcqk/KBdPagUcPS15xXN3xdgz
Cn/dB87NT2lHmc8Ed/eFRtWxhgQbxzHZHhL4M6L8BQxbefCc/AI9zORl0s90iBCe
cv0FQ9FCvWF1Mc+GwYCY4bNnSuqOU2KpkNVLmQDy2gx5W8jSdrTmXPy40i/sSsQE
icKhJQtLiwHoVV6HiNvVpa4aL1pWhRB4I0ZC3/jB/c1RLXOAfAhjnCZUtfeprB7z
V5gk4S8jUpO3PstHXe41gdql2kZ+p03x8/iAIf/1EnmN62Yz/oV8igvVU2Aiv9Un
MvF36CAl6xzS5G5QUWWtxEGepnfb/l4o8yCUM6nylJTZAWjbQsSFvX3bCWJjAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU5xm0dHUxBxiwN30JNKQk5vG6v54wHwYDVR0j
BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy
NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1
RHJocy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTMzYjJmZDct
MzFjMS00NTFjLTgyODgtYzFhYTBhYTEyNzUwLzAvMzEzODM4MmUzMjMxMzQyZTMy
MzMzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1MzAzNjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
vNboMA0GCSqGSIb3DQEBCwUAA4IBAQApPY9oaA5lMgI9R3yqJ3eZ1uB6jGGdyic4
uc1zP3hdg5wIVpeY2WIdfezzmiVqD1SgnnAkv0tOgtLkrYcaIczZtuFzb4+CGEn0
tfxRs6erYU9LC+SeKShj7TuWXaFOdBXqBBPfGfyFJleVMsyYMiHfMcGvds72Xoar
ziEeLzSxCDIjaYw5Z+w3Dso9cHfPPRt4fchZxFravIIQLoL4AKMav2XPTYFby6rv
uFHcLD9w/OKdUQtZJ+EHoLjCm5gYpnjGxJsFUYy8B4Pr2bMvGdoV3q3aggiV7zzE
PbeWDTusxkBmITggCBwYeCuaoth2w4UC3qC92/GR6Z+8Kq0byZqK
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:21 2026 by rpki-client