Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e322e302f32332d3332203d3e203530303639.roa
File: 3230312e342e322e302f32332d3332203d3e203530303639.roa (raw, json)
Hash identifier: ere/v3sb0RHIzq2vnbrgSDPEImJtyblbjxi3tF1BIoQ=
Subject key identifier: 1D:D8:CA:6E:B4:73:38:12:C3:AB:B4:CA:7F:B9:84:55:5F:01:C8:E7
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 74A4E45E93CD5D4BD1E4F93278A78B3C876F5AC0
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e322e302f32332d3332203d3e203530303639.roa
Signing time: Fri 11 Sep 2026 12:50:18 +0000
ROA not before: Fri 11 Sep 2026 12:45:18 +0000
ROA not after: Fri 10 Sep 2027 12:50:18 +0000
asID: 50069
IP address blocks: 201.4.2.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:a4:e4:5e:93:cd:5d:4b:d1:e4:f9:32:78:a7:8b:3c:87:6f:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:18 2026 GMT
Not After : Sep 10 12:50:18 2027 GMT
Subject: CN=1DD8CA6EB4733812C3ABB4CA7FB984555F01C8E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:69:22:18:7f:11:4c:8a:98:57:c1:78:9b:
f9:d5:b3:8d:80:a2:49:b0:05:89:3f:a8:b3:b8:a6:
36:8e:89:18:e8:43:ff:07:ab:72:b9:6e:10:dc:fd:
ea:9b:30:e8:69:4e:35:5c:ed:22:ad:6e:4e:82:24:
76:21:6c:04:a2:fc:87:eb:ae:74:1b:54:4c:15:b2:
8c:db:9a:d1:01:af:f8:99:20:db:a3:e9:33:30:86:
38:e8:7f:60:2a:3c:33:fd:d8:9d:90:4d:00:42:70:
27:c9:22:25:cb:34:78:23:dc:b1:24:4b:4e:a4:ac:
8e:d7:fb:63:20:cc:c4:98:fe:01:22:98:eb:06:1f:
88:d4:dd:26:cc:1d:50:94:4e:85:3f:64:0f:88:e6:
4e:99:f4:83:ae:d9:e8:b3:47:bf:e2:b6:af:6b:2b:
e5:25:65:4d:0b:6f:7c:2c:ee:0a:70:f5:e2:4c:d9:
20:18:05:76:9d:3d:4c:8f:77:9b:b7:42:fe:bd:f0:
aa:4b:22:1f:f0:34:bf:3b:14:e6:ad:00:a7:64:d8:
ee:a2:42:6b:fb:3a:ad:92:1f:1d:69:97:7c:f2:94:
e3:28:4a:6a:f0:64:84:ff:98:66:ff:40:4e:48:39:
f7:d5:2b:c9:af:7a:1d:55:1c:ca:3c:66:ca:e0:73:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D8:CA:6E:B4:73:38:12:C3:AB:B4:CA:7F:B9:84:55:5F:01:C8:E7
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e322e302f32332d3332203d3e203530303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.2.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:71:b5:38:d0:af:61:14:02:32:56:1a:20:1b:d7:82:97:72:
10:b2:a9:a2:04:0f:72:af:f1:86:96:56:7c:c5:c1:62:bb:37:
e3:86:2b:1e:55:e0:28:44:60:45:e9:c1:2d:fa:2a:aa:3e:30:
47:85:4b:2a:09:59:40:7d:92:be:b6:7a:a5:5c:e5:60:7b:e6:
83:78:d0:08:9d:d2:d2:8b:27:52:02:11:c7:cd:ca:46:69:d6:
a0:bb:e7:a6:ab:d3:f0:fd:f2:3d:35:aa:89:7c:c4:10:67:18:
ea:f8:1c:df:1a:4c:c0:43:56:b6:07:69:0f:bc:c8:f6:0e:68:
13:e3:de:1b:6c:62:de:8d:9a:4d:2e:81:2e:63:0c:97:ea:3b:
ce:ec:49:9e:37:e3:26:51:94:fa:53:65:00:5d:66:fe:6c:55:
90:c5:e5:97:06:b7:be:fa:c0:cf:32:41:a7:b8:4e:46:fa:ff:
46:64:e3:c2:b6:e4:45:cf:f1:94:25:cc:7f:b8:02:37:93:29:
8c:a3:10:19:3a:20:b4:e5:ac:11:6c:d2:c9:80:39:71:80:7a:
5a:88:da:cb:b9:aa:ce:3b:98:24:10:43:3d:8d:55:a6:1c:95:
a5:56:43:ef:59:bb:50:45:36:25:3e:78:af:cd:41:b4:c2:b0:
bd:79:fd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:19:41 2026 by rpki-client