Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e31322e302f32322d3332203d3e20393137.roa
File: 3230312e342e31322e302f32322d3332203d3e20393137.roa (raw, json)
Hash identifier: dM5HSwOUNmEnlGbv7ZT9pdO1x5lxVVoCWSo1pXl1GwY=
Subject key identifier: B5:83:57:52:29:15:DE:E5:4F:E4:38:92:95:E7:E8:F1:12:8E:55:6E
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 4A7DDAE42EDFAD9DB6B3C6C741599509F71807B2
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e31322e302f32322d3332203d3e20393137.roa
Signing time: Fri 11 Sep 2026 12:50:18 +0000
ROA not before: Fri 11 Sep 2026 12:45:18 +0000
ROA not after: Fri 10 Sep 2027 12:50:18 +0000
asID: 917
IP address blocks: 201.4.12.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 02:27:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:7d:da:e4:2e:df:ad:9d:b6:b3:c6:c7:41:59:95:09:f7:18:07:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:18 2026 GMT
Not After : Sep 10 12:50:18 2027 GMT
Subject: CN=B58357522915DEE54FE4389295E7E8F1128E556E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:d2:4d:02:20:39:0f:86:62:78:ce:d5:38:
b5:95:40:ac:66:f9:fa:fd:2d:58:8f:97:a3:6d:51:
9d:db:48:10:e5:29:a9:65:30:d7:b4:0c:17:f5:9f:
be:99:d1:74:e9:00:a7:7d:6a:14:29:b2:05:49:09:
a8:c3:64:68:a6:8c:35:36:d8:df:ad:c8:d8:8c:10:
53:57:69:81:76:19:ad:8b:1f:1d:ba:75:07:2a:7e:
50:60:89:55:99:e2:11:b3:ee:96:c2:a8:4a:a9:21:
44:38:10:95:9e:73:55:4d:44:2d:f6:86:b8:eb:fd:
bb:a5:6c:51:80:4e:76:7d:30:fc:17:72:c4:bb:aa:
ec:e4:76:8f:43:48:e8:b7:25:4e:be:84:f8:5a:4e:
40:ab:90:d4:1c:6a:6f:37:17:90:39:77:e5:08:be:
49:44:7b:55:bf:66:68:c4:b5:a5:6f:ef:49:f4:ba:
56:75:e8:88:7e:22:d6:ca:6e:8f:b9:86:08:44:62:
7a:19:62:2e:4e:04:94:52:58:08:94:9e:69:0e:6f:
90:b1:86:fa:0f:cc:7f:3d:7a:0f:98:61:1b:78:9b:
2b:32:56:d1:89:13:f5:6c:ff:1e:5d:9f:e5:cf:c0:
b7:54:85:3f:d3:e2:d1:b2:c1:8e:90:2d:f0:3d:f3:
14:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:83:57:52:29:15:DE:E5:4F:E4:38:92:95:E7:E8:F1:12:8E:55:6E
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e31322e302f32322d3332203d3e20393137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.12.0/22
Signature Algorithm: sha256WithRSAEncryption
68:10:16:1c:b0:4e:e8:1d:82:48:29:73:cc:53:fd:cf:39:04:
d6:10:94:cb:b1:a9:a3:e6:ed:19:9a:c9:6b:f1:9a:7d:ff:83:
8c:79:73:57:48:12:5e:db:14:00:f6:bc:0e:b5:75:75:35:ac:
39:b9:18:e1:0b:02:6f:99:33:bb:04:f1:eb:4e:4c:99:e6:7c:
66:5f:ee:96:fb:b8:fb:d8:83:fe:45:09:52:1a:95:d5:f9:3b:
7c:02:b2:94:08:ed:55:cb:48:6c:ab:a8:0a:39:44:fc:db:07:
a1:08:23:aa:c5:0a:e3:31:cb:ea:06:ce:69:e5:c8:da:a5:c3:
f8:7d:1f:15:1f:c4:b8:1c:14:72:ef:4c:df:b7:c6:57:4c:fb:
23:c5:c0:57:3d:9c:f1:7d:f2:60:4b:00:ea:c6:9e:48:31:5a:
2b:ab:32:6c:4f:4a:e7:a4:6a:11:ff:15:8f:01:45:be:b8:0f:
3e:1d:77:68:9b:90:2c:fc:7c:2b:78:a7:a2:9d:a6:16:ab:81:
05:94:59:96:98:bf:2f:9b:e6:50:73:6c:04:08:06:f8:88:f2:
96:85:75:e8:5d:b6:ff:b4:12:ea:ad:9b:15:cf:aa:3b:05:98:
6e:f8:5c:f6:31:23:a8:57:87:3e:e8:ac:70:16:f9:eb:63:af:
1e:4c:d5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:24:13 2026 by rpki-client