Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e31302e302f32332d3332203d3e20393137.roa
File: 3230312e342e31302e302f32332d3332203d3e20393137.roa (raw, json)
Hash identifier: 7DbKYuvrYYcMc4FJjAjREZxF0j1+7/joCPmYoc/EHe4=
Subject key identifier: 54:66:DC:85:B7:3D:CD:29:BD:F3:03:5F:83:07:64:40:72:81:5B:62
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 0198B798B75EE8737B6AD5E20CC8B6B9EE173C42
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e31302e302f32332d3332203d3e20393137.roa
Signing time: Fri 11 Sep 2026 12:50:18 +0000
ROA not before: Fri 11 Sep 2026 12:45:18 +0000
ROA not after: Fri 10 Sep 2027 12:50:18 +0000
asID: 917
IP address blocks: 201.4.10.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 02:27:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b7:98:b7:5e:e8:73:7b:6a:d5:e2:0c:c8:b6:b9:ee:17:3c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:18 2026 GMT
Not After : Sep 10 12:50:18 2027 GMT
Subject: CN=5466DC85B73DCD29BDF3035F8307644072815B62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:8f:7b:b0:ca:6b:d6:d2:6c:55:52:34:ce:
9c:f3:03:25:f1:9e:2d:3c:e9:f1:f0:0e:ee:c4:b1:
78:d2:07:2c:0e:e5:4a:8a:2c:56:e6:2a:f1:ff:2b:
c2:4b:5f:1e:8b:f8:60:61:33:f7:de:05:2c:1f:11:
04:af:af:95:13:da:8a:96:4a:eb:a4:58:56:a0:29:
25:93:6e:9e:24:0b:6b:ba:9f:dc:ed:8e:9e:6f:e3:
1d:46:a2:1e:d5:f2:e0:96:bd:45:44:e0:5e:ac:97:
a7:9d:09:c7:45:c3:32:be:2b:95:ad:91:5e:d3:28:
f7:db:67:84:f2:e7:41:91:57:27:9f:eb:86:9e:0c:
0c:ea:05:eb:40:06:9d:41:25:62:ed:4b:28:a9:cb:
25:f6:3b:f2:3c:17:16:d6:14:8f:0f:30:1c:fc:19:
aa:92:f5:1c:cf:bc:30:de:0c:2f:27:ae:23:1b:18:
15:54:75:ba:45:40:bd:ba:1b:a6:9c:f2:90:be:e6:
c2:07:3d:b4:9a:6e:7f:f2:82:e5:7c:db:d5:98:01:
4c:56:e3:36:c6:93:2b:1e:8f:1d:d6:4a:ee:79:29:
33:35:70:e3:23:6c:09:13:22:cb:03:99:55:59:db:
df:38:8c:03:06:5f:f5:ad:7c:70:7a:2d:e4:0c:54:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:66:DC:85:B7:3D:CD:29:BD:F3:03:5F:83:07:64:40:72:81:5B:62
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e31302e302f32332d3332203d3e20393137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.10.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:b1:1f:81:13:5f:44:f0:92:d0:b0:4a:e2:86:92:92:07:ab:
bf:14:d4:28:01:e1:79:2e:2a:a5:15:35:1b:cc:bb:55:e0:9e:
85:7a:49:25:c1:5d:5b:50:d4:7d:ab:e4:5b:cd:37:05:a4:49:
20:46:0e:33:d8:88:34:dc:fe:21:8c:c5:6b:f0:0c:eb:0c:ba:
12:7c:37:a3:3d:7b:c7:9e:7b:94:52:df:f6:d7:10:29:74:f9:
39:18:b7:36:97:91:28:61:2c:cf:aa:3b:da:15:5e:ac:dd:d5:
31:80:7c:34:bc:52:2f:fc:50:f4:75:86:0d:82:13:e2:47:39:
ef:2d:18:00:fa:cd:ab:0b:f0:ef:12:ed:d4:6d:90:52:11:d0:
01:23:48:e8:63:f4:95:c1:0d:8f:61:fc:cb:35:79:f4:65:a5:
1f:ba:74:b0:ba:17:65:05:74:f9:15:ce:c6:67:83:0a:94:60:
c4:b6:fa:68:ee:67:7e:dd:2a:65:98:99:ba:b3:2c:11:c4:1d:
d0:37:89:2b:d8:12:23:d5:d5:b7:37:03:92:35:f5:89:9a:e1:
53:58:82:a7:39:e2:32:01:5f:4e:e5:be:e9:3c:96:86:b1:e5:
d7:ab:30:60:f9:9c:93:ac:c5:1a:f7:ca:cb:f1:0f:5a:39:31:
e2:ed:67:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:50:21 2026 by rpki-client