Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e332e302f32342d3234203d3e20313937313733.roa
File: 3139342e32362e332e302f32342d3234203d3e20313937313733.roa (raw, json)
Hash identifier: 0gqojYMaS/0N7tH1AJI7/fdNCjGLNKJ+c++ER97t5Vc=
Subject key identifier: 88:45:72:E1:F8:AB:0C:67:6F:36:72:28:B6:CC:70:24:5F:8A:8A:55
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 7901ECD3040812E0B5F9AA70A648C92F3C4EF6AA
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e332e302f32342d3234203d3e20313937313733.roa
Signing time: Fri 24 Jul 2026 11:10:51 +0000
ROA not before: Fri 24 Jul 2026 11:05:51 +0000
ROA not after: Fri 23 Jul 2027 11:10:51 +0000
asID: 197173
IP address blocks: 194.26.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:01:ec:d3:04:08:12:e0:b5:f9:aa:70:a6:48:c9:2f:3c:4e:f6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Jul 24 11:05:51 2026 GMT
Not After : Jul 23 11:10:51 2027 GMT
Subject: CN=884572E1F8AB0C676F367228B6CC70245F8A8A55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:26:cd:13:ba:ed:ba:97:b9:86:6e:09:ae:
78:59:a6:f9:df:00:67:fe:08:a7:88:b2:60:c9:b7:
1b:28:4e:6d:b7:76:3d:c0:7a:8c:86:ee:85:81:ce:
d0:a0:3c:83:9b:33:9f:54:dd:4b:e6:24:06:df:c3:
61:f6:d9:0e:69:c0:c6:32:a0:8e:f2:0d:8a:fa:06:
a6:d1:b3:18:4c:61:e2:18:29:13:b5:90:70:5b:d1:
db:86:33:31:bb:10:dd:bb:1c:6e:a9:37:31:40:5b:
d6:fb:15:ff:6c:4f:03:d1:6a:46:4e:65:63:33:9c:
ad:9f:bc:e8:ab:64:c5:d0:40:45:bd:10:d5:88:f1:
ce:51:65:be:d4:a1:6b:e0:64:60:ab:52:f1:81:79:
fe:9e:6f:d4:5b:48:93:41:6e:4e:04:c2:7b:2c:43:
cd:43:ce:e4:5a:8e:76:4f:57:b2:fa:81:e4:a8:e0:
74:dc:82:1f:15:dc:21:d7:25:91:7c:4d:86:13:8d:
8a:59:1b:43:48:c8:c7:e3:1f:8e:4d:84:54:b0:97:
56:36:1f:c7:3b:61:cb:a0:41:a2:06:da:a6:5f:06:
08:ac:2b:a3:b1:a8:18:f6:8f:1f:3d:be:84:9b:1a:
5b:09:b5:d9:9e:40:0f:26:de:66:23:00:a6:23:3d:
dd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:45:72:E1:F8:AB:0C:67:6F:36:72:28:B6:CC:70:24:5F:8A:8A:55
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e332e302f32342d3234203d3e20313937313733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.3.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:54:b4:31:9f:55:34:81:32:30:7f:cb:04:fe:37:cc:07:a7:
94:00:70:b8:8d:e6:18:70:24:a7:70:f9:37:91:e6:c0:5b:27:
f3:e6:81:09:a4:29:46:a4:5f:19:ad:2c:ed:6f:07:6d:38:b7:
06:3f:71:6f:d7:c1:68:32:ad:53:14:c4:c1:87:2a:0e:68:f2:
0c:52:1b:d7:ed:28:42:b0:17:69:81:96:a6:49:99:06:ba:47:
d9:93:da:bd:ed:91:6f:26:dc:55:d2:e1:2f:73:1f:68:1b:50:
38:f4:35:da:a8:af:a9:6a:0a:a0:d6:fe:6b:ad:29:22:d4:c7:
3e:f3:ee:7e:b1:bc:6c:27:69:09:8b:48:ff:b4:b7:c9:42:04:
88:ba:7f:67:3c:71:ea:72:a0:43:39:57:37:1d:7b:eb:21:6b:
64:ab:ef:c1:2e:a5:61:25:97:71:8a:ea:7b:e6:e8:3d:c8:1e:
b1:b5:b0:5d:ce:be:7d:cb:d1:7e:46:71:bf:48:6d:3c:a5:b4:
2d:f0:2b:1d:99:5a:f6:88:49:e4:3a:6b:b7:cf:0e:20:f5:96:
32:55:e7:db:9c:9a:4a:57:41:dd:7a:b7:a5:7b:2a:68:b6:38:
61:41:d0:b5:e7:62:78:3d:c2:c6:69:c9:d3:47:2f:ef:03:c5:
4d:af:12:43
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUeQHs0wQIEuC1+apwpkjJLzxO9qowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0
ZTQzYWUxYjAeFw0yNjA3MjQxMTA1NTFaFw0yNzA3MjMxMTEwNTFaMDMxMTAvBgNV
BAMTKDg4NDU3MkUxRjhBQjBDNjc2RjM2NzIyOEI2Q0M3MDI0NUY4QThBNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhSbNE7rtupe5hm4JrnhZpvnf
AGf+CKeIsmDJtxsoTm23dj3AeoyG7oWBztCgPIObM59U3UvmJAbfw2H22Q5pwMYy
oI7yDYr6BqbRsxhMYeIYKRO1kHBb0duGMzG7EN27HG6pNzFAW9b7Ff9sTwPRakZO
ZWMznK2fvOirZMXQQEW9ENWI8c5RZb7UoWvgZGCrUvGBef6eb9RbSJNBbk4Ewnss
Q81DzuRajnZPV7L6geSo4HTcgh8V3CHXJZF8TYYTjYpZG0NIyMfjH45NhFSwl1Y2
H8c7YcugQaIG2qZfBgisK6OxqBj2jx89voSbGlsJtdmeQA8m3mYjAKYjPd1zAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUiEVy4firDGdvNnIotsxwJF+KilUwHwYDVR0j
BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy
NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1
RHJocy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTMzYjJmZDct
MzFjMS00NTFjLTgyODgtYzFhYTBhYTEyNzUwLzAvMzEzOTM0MmUzMjM2MmUzMzJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzNzMxMzczMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIa
AzANBgkqhkiG9w0BAQsFAAOCAQEAK1S0MZ9VNIEyMH/LBP43zAenlABwuI3mGHAk
p3D5N5HmwFsn8+aBCaQpRqRfGa0s7W8HbTi3Bj9xb9fBaDKtUxTEwYcqDmjyDFIb
1+0oQrAXaYGWpkmZBrpH2ZPave2RbybcVdLhL3MfaBtQOPQ12qivqWoKoNb+a60p
ItTHPvPufrG8bCdpCYtI/7S3yUIEiLp/Zzxx6nKgQzlXNx176yFrZKvvwS6lYSWX
cYrqe+boPcgesbWwXc6+fcvRfkZxv0htPKW0LfArHZla9ohJ5Dprt88OIPWWMlXn
25yaSldB3Xq3pXsqaLY4YUHQtedieD3CxmnJ00cv7wPFTa8SQw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:54 2026 by rpki-client