Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2033323134.roa
File: 3230312e342e33322e302f31392d3234203d3e2033323134.roa (raw, json)
Hash identifier: RqpDVwFKUVJ4KXL9OMqnTfidvT/47+lHjhOmK+YPi50=
Subject key identifier: 69:81:94:20:73:5B:6B:13:31:F7:8C:55:FE:7E:76:6B:67:91:E9:B6
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 702F7F4C2F70AD2A8D9D6E8C76E64733B98BB5CC
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2033323134.roa
Signing time: Fri 11 Sep 2026 12:50:24 +0000
ROA not before: Fri 11 Sep 2026 12:45:24 +0000
ROA not after: Fri 10 Sep 2027 12:50:24 +0000
asID: 3214
IP address blocks: 201.4.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:2f:7f:4c:2f:70:ad:2a:8d:9d:6e:8c:76:e6:47:33:b9:8b:b5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:24 2026 GMT
Not After : Sep 10 12:50:24 2027 GMT
Subject: CN=69819420735B6B1331F78C55FE7E766B6791E9B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:ff:72:03:46:8e:04:e7:54:e6:c3:4c:d6:
32:14:b5:62:90:7c:53:48:9d:fb:cc:73:aa:0d:cc:
00:26:7b:a5:08:52:42:18:55:0b:37:ac:01:45:c0:
af:ba:cf:fe:bc:c0:9e:da:48:48:df:e8:1a:9b:1d:
96:54:e4:7f:7e:69:8c:7d:ed:21:71:49:0e:60:75:
66:b7:ff:fe:8d:e9:90:6c:43:05:0c:d0:41:4c:15:
f5:d9:5c:24:2a:49:ef:e6:42:7b:10:af:f9:ac:e8:
3c:45:48:77:9c:d7:82:aa:cf:57:22:10:6e:e2:21:
1e:c7:0d:d4:b2:94:a1:12:01:8f:3c:f5:90:b1:ed:
ef:6c:f3:15:a1:91:7a:dd:85:3a:fd:ea:6e:35:49:
08:05:18:cc:59:e8:b0:66:ee:8a:d4:b4:f4:55:56:
e4:f8:10:88:e1:b1:b9:64:8c:6c:28:e8:33:ec:9f:
36:07:f2:40:22:70:b8:78:ac:6a:8c:7f:28:4f:f1:
98:1b:7a:56:a1:76:c1:b1:01:ff:73:a0:e8:c3:e4:
73:00:16:6a:c1:ff:73:b4:11:a5:76:88:0a:78:c8:
c6:d9:1e:5f:b0:b0:1f:93:90:8d:cc:a4:6a:a1:24:
58:2f:db:8f:98:73:d4:80:e9:da:45:31:95:2a:c6:
69:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:81:94:20:73:5B:6B:13:31:F7:8C:55:FE:7E:76:6B:67:91:E9:B6
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.32.0/19
Signature Algorithm: sha256WithRSAEncryption
91:bf:7f:01:96:65:be:87:8e:f3:d0:7d:d1:f5:c3:98:a6:8d:
c5:94:99:d8:65:77:9f:b5:83:f9:2a:be:95:d5:80:46:97:4c:
38:1f:8e:49:06:e9:55:da:cb:40:c1:a4:13:b4:2e:3c:62:49:
53:ba:8c:67:e2:e1:22:21:33:2f:4c:0a:6b:bf:82:85:76:13:
ef:31:82:c4:1a:3f:b7:84:6d:63:b7:94:56:81:83:32:42:df:
1e:50:c8:21:e3:7c:e6:31:c4:09:f7:3e:ae:1e:3f:23:ab:9d:
3b:6b:7f:62:82:dc:e0:0d:8f:29:59:26:a4:07:9e:30:50:16:
34:26:6c:af:e6:0b:9c:84:3a:9d:e6:f8:5f:72:d7:5e:9c:11:
cc:30:bd:bd:30:c8:9f:57:c6:87:09:5e:08:61:22:35:89:25:
8e:16:13:b2:be:0e:eb:3d:a3:c4:c8:09:06:bc:b2:31:40:2f:
fe:03:b0:fa:b7:50:8e:51:94:7a:26:b1:06:74:cc:92:6f:cf:
0f:59:2e:9b:8b:ff:0c:76:94:db:29:07:6a:40:4c:ec:4d:f9:
38:75:e7:f6:d0:83:3a:e5:d4:92:23:80:97:d5:af:95:6a:85:
fc:50:8e:71:62:1d:cc:ec:f3:84:6b:1e:a1:8b:20:0b:bb:a2:
24:dd:d8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:00:27 2026 by rpki-client