Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32302e302f32342d3234203d3e20323132323338.roa
File: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 39u3b1aPs44ID+slKDmXnVmqBOUo9+ShXVBFlRqmNOw=
Subject key identifier: AD:0E:35:D1:3A:61:6B:D0:22:51:3F:51:C6:27:62:11:B5:8B:80:12
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 3908D7EB62DBC6E2E8B0A6FE1EE9F967F0EAE778
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32302e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 09 Jun 2026 10:47:31 +0000
ROA not before: Tue 09 Jun 2026 10:42:31 +0000
ROA not after: Tue 08 Jun 2027 10:47:31 +0000
asID: 212238
IP address blocks: 194.26.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:08:d7:eb:62:db:c6:e2:e8:b0:a6:fe:1e:e9:f9:67:f0:ea:e7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Jun 9 10:42:31 2026 GMT
Not After : Jun 8 10:47:31 2027 GMT
Subject: CN=AD0E35D13A616BD022513F51C6276211B58B8012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:9a:22:85:8e:f9:07:de:77:54:a9:a5:9d:
61:39:63:28:12:df:d8:33:72:39:a3:29:cc:8d:49:
85:2c:a8:29:58:9c:c4:56:f2:a8:3a:bc:71:df:23:
00:9f:af:f1:f7:b4:6c:f0:24:93:9d:45:a5:4e:be:
9c:e1:91:6a:60:b8:ca:e5:8f:68:87:b1:0a:cc:ec:
b7:a6:4f:e6:8e:bc:8e:68:6f:ce:b9:5c:17:c6:fe:
1a:62:70:08:05:91:14:65:0f:a1:05:3d:b3:e1:fd:
d7:a8:07:ba:b8:3a:e0:7d:7c:61:81:70:97:25:86:
41:53:84:ab:48:2a:66:4e:6e:2f:a3:17:4a:cc:10:
6d:fa:9c:fc:7e:4e:ec:8c:23:f1:aa:a2:69:ca:38:
57:bc:c3:81:93:22:59:51:54:12:1f:53:87:29:72:
9a:22:5c:12:3b:1f:b3:13:9c:0d:a2:c9:6d:0f:f0:
4f:cd:df:8f:44:a0:3b:1d:e1:21:4a:3c:9a:8e:e1:
ad:e6:00:6a:0c:ad:44:73:4b:e4:d1:ae:6e:33:0e:
2d:98:e5:e5:78:ac:3d:c1:47:a6:73:fe:ff:8b:70:
85:7f:42:00:ac:34:35:9c:d3:ce:e9:23:18:82:22:
f2:96:7a:04:53:61:22:02:4d:70:03:ed:c3:0b:0b:
db:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0E:35:D1:3A:61:6B:D0:22:51:3F:51:C6:27:62:11:B5:8B:80:12
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32302e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.20.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:9b:75:74:4f:52:b0:d5:d6:3c:82:92:b6:63:73:ef:80:18:
58:b2:6b:52:cf:e4:73:dc:3f:51:e0:4a:8d:eb:ee:ce:d1:99:
ae:57:a4:f2:e8:b3:ed:73:3e:b6:c3:0a:ea:16:88:c8:58:32:
8d:e8:64:76:d6:a1:b4:63:2a:b7:40:06:c2:6a:e7:14:cd:af:
ae:b7:69:03:d2:b0:7b:f5:3d:17:8e:2b:d9:9f:a9:18:fb:64:
91:0f:70:68:83:58:2f:d3:3a:62:4c:b8:80:d9:f8:1c:2d:99:
89:cc:63:a0:c5:fc:6c:8f:4f:31:af:c1:a0:9d:b9:7c:61:27:
b3:61:15:46:1d:68:86:e2:a3:38:51:93:91:2f:f2:53:91:1f:
83:f8:bf:47:7f:2f:b9:d7:e9:90:dd:75:06:48:40:94:c4:ed:
20:92:5b:2b:a9:53:ce:74:3d:fa:b2:cf:9e:a4:a0:94:59:01:
ac:4b:8d:68:3f:04:dd:81:e5:0d:d7:70:ad:eb:08:68:32:63:
61:c1:b7:e9:1e:67:72:49:ce:88:53:6d:fc:b3:24:8f:0c:39:
92:f0:03:47:34:ef:cd:c0:47:08:9e:a4:01:b8:91:56:7a:0f:
76:7b:02:24:7e:36:8c:61:31:8f:a5:cf:c8:6a:92:c6:e0:7d:
d1:f8:0b:ec
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUOQjX62LbxuLosKb+Hun5Z/Dq53gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0
ZTQzYWUxYjAeFw0yNjA2MDkxMDQyMzFaFw0yNzA2MDgxMDQ3MzFaMDMxMTAvBgNV
BAMTKEFEMEUzNUQxM0E2MTZCRDAyMjUxM0Y1MUM2Mjc2MjExQjU4QjgwMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPiZoihY75B953VKmlnWE5YygS
39gzcjmjKcyNSYUsqClYnMRW8qg6vHHfIwCfr/H3tGzwJJOdRaVOvpzhkWpguMrl
j2iHsQrM7LemT+aOvI5ob865XBfG/hpicAgFkRRlD6EFPbPh/deoB7q4OuB9fGGB
cJclhkFThKtIKmZObi+jF0rMEG36nPx+TuyMI/GqomnKOFe8w4GTIllRVBIfU4cp
cpoiXBI7H7MTnA2iyW0P8E/N349EoDsd4SFKPJqO4a3mAGoMrURzS+TRrm4zDi2Y
5eV4rD3BR6Zz/v+LcIV/QgCsNDWc087pIxiCIvKWegRTYSICTXAD7cMLC9sPAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUrQ410Tpha9AiUT9RxidiEbWLgBIwHwYDVR0j
BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy
NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1
RHJocy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTMzYjJmZDct
MzFjMS00NTFjLTgyODgtYzFhYTBhYTEyNzUwLzAvMzEzOTM0MmUzMjM2MmUzMjMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
whoUMA0GCSqGSIb3DQEBCwUAA4IBAQCfm3V0T1Kw1dY8gpK2Y3PvgBhYsmtSz+Rz
3D9R4EqN6+7O0ZmuV6Ty6LPtcz62wwrqFojIWDKN6GR21qG0Yyq3QAbCaucUza+u
t2kD0rB79T0XjivZn6kY+2SRD3Bog1gv0zpiTLiA2fgcLZmJzGOgxfxsj08xr8Gg
nbl8YSezYRVGHWiG4qM4UZORL/JTkR+D+L9Hfy+51+mQ3XUGSECUxO0gklsrqVPO
dD36ss+epKCUWQGsS41oPwTdgeUN13Ct6whoMmNhwbfpHmdySc6IU238sySPDDmS
8ANHNO/NwEcInqQBuJFWeg92ewIkfjaMYTGPpc/IapLG4H3R+Avs
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:33:05 2026 by rpki-client