Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139332e3234362e3136352e302f32342d3234203d3e20323136313539.roa
File: 3139332e3234362e3136352e302f32342d3234203d3e20323136313539.roa (raw, json)
Hash identifier: 6btW8oVMBrDCtZqv+Luv6y7+nYwucV6SF0bhOqSqdro=
Subject key identifier: A4:60:5B:07:A6:48:A0:09:0D:D5:20:E0:A9:15:64:24:6E:89:F1:7E
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 0D3C74CC50E5F23A313681E9C8A87CFFA9D5CA7F
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139332e3234362e3136352e302f32342d3234203d3e20323136313539.roa
Signing time: Wed 05 Nov 2025 07:33:14 +0000
ROA not before: Wed 05 Nov 2025 07:28:14 +0000
ROA not after: Wed 04 Nov 2026 07:33:14 +0000
asID: 216159
IP address blocks: 193.246.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:3c:74:cc:50:e5:f2:3a:31:36:81:e9:c8:a8:7c:ff:a9:d5:ca:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Nov 5 07:28:14 2025 GMT
Not After : Nov 4 07:33:14 2026 GMT
Subject: CN=A4605B07A648A0090DD520E0A91564246E89F17E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1b:c2:39:d3:78:8e:e8:2b:c4:4e:fb:d1:9a:
3b:6d:a4:0a:f7:0c:bb:65:8c:c6:71:d9:c2:89:ab:
2e:10:00:d5:45:b5:ed:e3:91:a8:17:e2:38:c5:ee:
ad:9f:67:12:ae:7c:47:db:45:71:42:0c:0d:9a:ed:
e2:5e:a3:57:c1:9d:17:ee:36:2a:9d:8c:ec:14:b2:
e9:0a:da:27:66:8e:96:f5:49:83:94:c3:1c:47:6c:
4c:14:2d:a2:0d:cd:1d:85:0c:2a:50:bd:65:c7:16:
fe:d5:e5:80:fa:78:1a:85:a2:17:a9:55:16:05:2a:
87:72:48:1f:a9:42:26:17:d9:c1:ee:c4:63:2f:8e:
09:82:6d:20:b0:98:04:95:8e:d3:66:4f:16:59:b9:
70:b7:a9:1e:97:ba:77:cc:d1:1e:8a:d7:cb:04:d8:
00:0b:6f:eb:78:8d:de:fb:3a:21:95:d9:06:ef:56:
70:5f:2c:41:04:69:98:e8:4d:9a:6a:e5:53:82:34:
c6:86:34:ba:00:be:4b:c4:75:ad:0f:2e:4a:80:38:
52:4f:ec:78:7c:22:63:5a:ea:f7:a3:03:b2:6b:36:
0a:65:6b:5b:02:8d:77:93:c0:fc:44:83:dc:3f:b5:
62:81:35:0f:8e:07:03:c6:4f:f3:2a:59:d4:bf:3d:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:60:5B:07:A6:48:A0:09:0D:D5:20:E0:A9:15:64:24:6E:89:F1:7E
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139332e3234362e3136352e302f32342d3234203d3e20323136313539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.165.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ba:3d:b7:34:62:72:d1:51:42:1f:9a:76:79:cb:b7:a4:a5:
b1:58:37:2d:eb:e0:e3:65:b5:96:2a:52:7c:47:78:8b:c8:90:
c8:f8:3a:3b:56:53:f0:9f:2d:4e:8c:08:6f:2f:e4:77:30:54:
45:fa:f1:aa:a4:a7:cb:fc:f7:a7:43:6a:37:70:06:cd:f6:a1:
bb:ed:3b:28:a5:6e:b4:8d:29:73:0d:b0:22:5e:82:5f:73:51:
6b:a4:22:8a:90:ce:d0:63:48:fb:e8:7c:6a:c6:5b:8c:01:1b:
12:89:4a:3b:ef:22:a2:3a:b7:2e:f8:66:f7:2c:79:9e:21:7e:
2a:ef:79:8b:6e:85:12:bb:c0:26:ba:f8:8a:90:04:5b:c4:c7:
40:f4:7e:8f:f0:57:c6:e2:07:4c:0d:9b:3c:4e:15:80:4c:69:
84:5f:cc:97:62:0e:26:95:0a:01:4b:35:8e:24:7f:bd:03:7e:
5d:d1:b6:48:ce:4e:01:ad:d4:5f:ad:81:f6:f4:fc:da:d1:50:
ee:c9:11:41:dd:ad:16:9c:80:aa:d1:96:1b:f6:ca:8f:ef:5e:
8b:61:b7:c7:80:56:09:b0:25:23:ef:ab:b6:3c:f0:b9:54:48:
1c:5d:44:5b:71:6e:9f:a9:f7:22:19:56:c8:bb:27:95:f8:9a:
d7:e5:5a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:40:23 2025 by rpki-client