Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3138382e3231342e3233322e302f32332d3234203d3e2035303635.roa
File: 3138382e3231342e3233322e302f32332d3234203d3e2035303635.roa (raw, json)
Hash identifier: x3PmGOoet0cDs7+uuyuNJtaOTgdNjDt0p0iGeQg4oNo=
Subject key identifier: 9E:93:BF:1D:D2:EE:49:52:D8:3B:43:AE:5F:1E:A2:25:28:76:9F:F9
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 52C490F4E8F62C62B57FA7AD41A89131C349EBD1
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3138382e3231342e3233322e302f32332d3234203d3e2035303635.roa
Signing time: Thu 09 Apr 2026 09:51:21 +0000
ROA not before: Thu 09 Apr 2026 09:46:21 +0000
ROA not after: Thu 08 Apr 2027 09:51:21 +0000
asID: 5065
IP address blocks: 188.214.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 20:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c4:90:f4:e8:f6:2c:62:b5:7f:a7:ad:41:a8:91:31:c3:49:eb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Apr 9 09:46:21 2026 GMT
Not After : Apr 8 09:51:21 2027 GMT
Subject: CN=9E93BF1DD2EE4952D83B43AE5F1EA22528769FF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:76:20:48:d3:8d:dd:b3:64:93:04:37:e9:
99:e7:98:5a:29:ad:eb:d5:50:44:4f:a9:43:cc:11:
20:a0:82:33:a2:9d:90:66:10:97:41:28:97:1f:a0:
05:52:9a:18:1d:68:a1:62:7f:10:b2:da:22:69:3a:
60:72:75:df:b1:39:d4:75:2f:3b:53:74:3c:d0:fe:
e8:02:b5:1f:10:04:99:53:1d:81:24:88:d1:9f:47:
0a:b9:dc:70:79:ba:22:25:f1:7f:5b:de:17:89:2b:
06:d9:c5:b7:e8:71:8f:05:96:36:10:7b:d2:0a:28:
e0:a3:b3:2e:93:71:39:c8:e9:48:ce:0c:e9:00:fe:
7c:bc:f3:f3:b0:77:56:79:c3:f1:0e:c6:62:6a:85:
a1:aa:b4:0b:af:68:dc:6d:9e:97:9c:95:6d:b1:82:
18:49:f1:29:0e:99:7b:9a:30:6a:1d:9f:7f:28:b3:
1b:32:1a:64:92:8d:fa:89:a2:df:2a:e3:20:c0:0a:
f9:72:53:c0:f3:07:00:be:aa:6a:13:c6:04:34:5e:
c7:4d:d5:2a:c6:55:2b:27:98:80:e6:a8:cb:f5:92:
4b:21:32:f3:91:a9:27:08:91:e7:2a:63:3f:cf:9b:
5d:5d:07:2c:f3:33:7c:64:2b:38:21:41:f5:92:b4:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:93:BF:1D:D2:EE:49:52:D8:3B:43:AE:5F:1E:A2:25:28:76:9F:F9
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3138382e3231342e3233322e302f32332d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.232.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:f7:8b:40:68:0e:9a:54:01:6a:0f:22:0e:91:c2:82:c6:e1:
b4:b4:4f:c4:3b:bf:95:36:77:c3:3c:fc:43:1b:60:d8:0f:b2:
ef:0a:d5:32:35:00:8b:a3:d3:f3:9b:c9:6f:fb:9b:28:b9:76:
c0:c4:27:8a:79:9c:ab:40:19:ba:c6:e5:57:d4:5a:49:9d:14:
4c:72:46:86:ab:c9:d2:31:47:e4:d7:f3:7d:37:2b:f3:b2:50:
74:7b:28:20:17:6d:45:4b:3e:75:91:ae:d5:15:ad:e5:39:63:
fd:a7:4b:8f:3f:cb:16:45:e7:28:78:d7:5e:1d:b7:58:2c:62:
90:bf:4e:fd:08:8d:b8:15:c9:7a:67:36:a9:11:3a:c3:a7:30:
fc:0d:73:61:06:11:d2:d9:69:83:72:3a:ee:77:bc:76:eb:b6:
f3:ed:50:be:3e:55:40:96:0a:44:b8:bd:68:91:6f:ee:d2:36:
ce:a1:c0:d5:bb:fe:35:d0:ee:db:5f:30:a3:40:ad:52:07:a7:
94:5d:fd:f5:94:04:41:3a:bc:a1:84:bd:90:40:d4:58:cc:55:
a9:d3:ad:79:1f:98:34:94:86:48:41:7c:88:23:c4:0d:ff:90:
4d:7d:0d:be:8c:d8:2e:20:e9:9b:b0:0a:6f:25:6a:aa:91:c0:
94:76:4c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:20:06 2026 by rpki-client