Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32312e302f32342d3234203d3e2036303739.roa
File: 3139342e32362e32312e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier: C+pqIVBYxtX1Vf4vHbq3YBGNZtxuHmXXj5v6GlxMx88=
Subject key identifier: 3B:B2:60:E9:DD:EB:C4:7D:FB:2F:43:00:B6:07:DD:44:CF:D5:66:93
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 419A7B2005969B85151B67DED000C96A90F048E0
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32312e302f32342d3234203d3e2036303739.roa
Signing time: Fri 13 Feb 2026 02:59:17 +0000
ROA not before: Fri 13 Feb 2026 02:54:17 +0000
ROA not after: Fri 12 Feb 2027 02:59:17 +0000
asID: 6079
IP address blocks: 194.26.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:9a:7b:20:05:96:9b:85:15:1b:67:de:d0:00:c9:6a:90:f0:48:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Feb 13 02:54:17 2026 GMT
Not After : Feb 12 02:59:17 2027 GMT
Subject: CN=3BB260E9DDEBC47DFB2F4300B607DD44CFD56693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:82:2a:f5:7b:39:5e:81:c7:3c:64:21:59:
84:6e:a0:f5:45:33:32:03:4e:b6:97:d2:d0:26:51:
70:30:b4:db:db:95:77:0b:2b:28:12:2d:0a:88:b3:
ba:b8:1e:c5:d3:0d:5c:e2:4a:69:b1:cc:96:75:36:
09:b3:3f:32:d7:b3:c8:07:81:05:44:16:b8:4d:f4:
6d:9d:55:a9:f0:06:44:e8:2d:56:7e:ad:fd:67:ee:
38:ec:6c:28:e2:e9:2a:ff:f9:4f:f4:dc:f3:ee:8c:
2d:a4:93:3a:46:fa:91:44:be:e1:12:9e:2e:c9:ff:
8f:49:5b:69:0a:38:2e:a7:a8:36:32:38:ef:3c:a2:
a3:dd:2a:f6:a4:67:70:da:9f:c9:06:a7:5f:25:b7:
40:92:36:aa:46:bb:eb:08:6a:4c:90:5d:fc:82:92:
05:55:79:1e:bb:c6:01:26:58:fc:b3:35:cd:35:10:
39:9d:01:bb:c1:bd:31:16:02:02:fc:ad:9a:2e:22:
e5:f6:2f:62:99:79:73:76:16:18:3b:2a:17:57:ae:
65:ab:f4:aa:31:83:d4:d3:2c:51:67:e6:76:87:81:
6d:32:b8:fd:c9:ea:5c:8e:54:55:0c:2c:68:5e:b6:
aa:cd:37:13:59:c3:c4:0a:f9:81:e9:46:d8:9b:9b:
09:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B2:60:E9:DD:EB:C4:7D:FB:2F:43:00:B6:07:DD:44:CF:D5:66:93
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32312e302f32342d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.21.0/24
Signature Algorithm: sha256WithRSAEncryption
49:41:d7:b0:f0:0f:2b:5a:b8:6d:05:98:85:0b:0a:da:27:37:
71:14:8d:c2:ad:5c:b2:5e:ad:90:e6:e0:ef:e9:13:1a:ad:24:
fb:70:8c:60:26:5f:8d:76:ff:3a:c7:22:ab:dd:cf:49:0f:60:
a1:40:07:3e:d2:09:94:db:5c:35:82:52:d9:fb:7c:3d:01:3f:
e0:cd:ca:79:8f:7c:e3:da:8b:5c:00:8b:26:9d:e1:90:7d:c1:
81:62:e3:f3:33:a0:1e:c1:50:4f:f3:10:1b:f9:72:1b:2d:e3:
60:f3:58:b3:f2:22:17:e7:32:4f:b6:f7:23:bb:c3:1f:d5:3c:
71:18:52:1d:2a:58:a3:ee:02:df:7e:9c:30:ec:0a:80:75:23:
8f:d7:de:81:66:4b:f8:fc:dd:8e:4d:18:4f:cc:7e:d5:8a:24:
2d:9d:ab:90:36:2f:1f:11:1f:34:d2:1c:fa:7d:2c:c9:3d:3e:
60:81:ca:5b:5b:04:37:58:80:71:bc:e4:3c:76:44:b1:e4:4d:
09:af:8d:24:d9:a5:75:31:69:14:a7:77:b5:74:76:b7:02:3c:
e0:4b:01:f3:b9:7b:6a:29:43:da:58:ad:e0:5d:22:38:9d:e2:
d6:d2:93:d9:4a:6e:a6:64:47:7b:3d:eb:55:92:d9:7c:2f:01:
5e:49:d7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:36 2026 by rpki-client