Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139332e3234362e3136342e302f32342d3234203d3e20313335333931.roa
File: 3139332e3234362e3136342e302f32342d3234203d3e20313335333931.roa (raw, json)
Hash identifier: JL/dBZtc7cqNfBqDUBsHO8zmA5iOWu/V8229oSGf3qQ=
Subject key identifier: F3:2F:19:6C:1B:97:AE:BF:4D:23:0F:D3:48:25:96:EE:1D:15:0A:6E
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 35A41266DA130E8D13CDB3E8F3E28DCC3873AB5B
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139332e3234362e3136342e302f32342d3234203d3e20313335333931.roa
Signing time: Wed 05 Nov 2025 07:32:14 +0000
ROA not before: Wed 05 Nov 2025 07:27:14 +0000
ROA not after: Wed 04 Nov 2026 07:32:14 +0000
asID: 135391
IP address blocks: 193.246.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a4:12:66:da:13:0e:8d:13:cd:b3:e8:f3:e2:8d:cc:38:73:ab:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Nov 5 07:27:14 2025 GMT
Not After : Nov 4 07:32:14 2026 GMT
Subject: CN=F32F196C1B97AEBF4D230FD3482596EE1D150A6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:39:a0:b9:ad:fa:27:70:8c:90:67:1d:2e:
7c:26:ff:12:a1:e3:d8:b7:cf:04:4d:dd:56:e2:4c:
c6:6c:89:a9:1d:08:36:1a:6f:bb:6d:01:73:83:f0:
b5:45:c3:48:ec:e5:b1:85:be:6d:c4:2b:df:f6:7b:
1a:73:a0:29:ec:83:e8:6f:0d:15:5c:35:e7:e7:d1:
ca:07:07:c7:52:fd:dd:08:26:00:67:c5:b6:35:1c:
ff:78:58:28:d5:ba:6f:a4:57:8c:3b:eb:79:a1:d5:
79:6a:6f:1a:f3:65:6b:d0:34:4e:d3:65:c2:a3:82:
db:4b:fd:68:4d:8f:c2:b6:f7:40:cd:b2:f8:2d:f9:
28:27:ca:a0:1c:8f:e9:12:e1:7f:6a:b4:96:9e:f9:
83:46:18:d0:74:fe:a9:06:50:15:12:82:d3:e6:d7:
19:45:e6:56:cb:8d:af:ca:0b:67:c6:5e:1c:1e:7f:
01:ce:02:8f:79:10:62:0b:19:f3:e7:f9:f9:49:17:
64:67:31:03:1a:31:e6:5e:9d:22:2a:2f:30:1e:35:
a1:5a:e6:04:35:27:52:12:f2:f2:7b:59:91:3d:7e:
fb:e7:70:d7:30:2e:aa:02:34:fa:bc:e1:d5:8d:f4:
05:59:07:0d:7d:03:92:70:54:12:95:7c:9c:d4:b9:
c4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2F:19:6C:1B:97:AE:BF:4D:23:0F:D3:48:25:96:EE:1D:15:0A:6E
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139332e3234362e3136342e302f32342d3234203d3e20313335333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.164.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c6:e1:85:80:58:e7:f6:b3:a8:3d:a6:73:07:97:35:cc:0d:
47:a8:06:4c:81:d8:e7:39:df:6a:c5:89:b6:9c:94:49:6b:41:
88:4c:54:60:90:a0:0a:99:93:2b:4a:2e:a0:54:80:b6:e3:04:
3d:49:d4:29:72:1d:6c:02:8d:73:b5:37:c9:02:55:01:0c:fe:
33:fc:4e:e4:6d:79:4a:1e:c7:da:9c:f6:00:0b:24:aa:57:0a:
de:5a:ab:bc:37:04:71:02:e5:18:10:e6:ad:5d:85:88:4e:02:
b8:df:73:17:04:82:41:b4:16:17:f8:d2:17:0a:4b:e2:c9:da:
46:3c:85:12:81:02:e0:ec:10:61:68:31:9f:bb:d7:43:6c:6b:
40:a4:8f:4e:65:4d:eb:89:c8:8d:55:48:d7:31:af:c4:67:e8:
e8:86:9a:e8:46:da:eb:4e:d6:62:bd:85:c0:77:ed:5a:f8:95:
6b:e6:18:f4:2c:80:37:71:a0:19:a0:40:0a:9c:8c:55:4e:53:
60:64:d9:5c:18:e6:08:fd:ef:10:cd:a7:b7:a8:9b:9d:2e:79:
5f:d5:cd:f6:30:0e:25:da:40:7d:bd:ae:b3:29:6d:e2:fc:44:
6d:00:6e:3a:bb:82:79:f1:25:0a:32:39:05:ea:a8:01:25:0f:
e4:5d:31:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:41:10 2025 by rpki-client