Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2036323333.roa
File: 3230312e342e33322e302f31392d3234203d3e2036323333.roa (raw, json)
Hash identifier: WdBX9P0O+wUAyIeyoPquWCOx0wam+Enxn9GHVit4ex0=
Subject key identifier: C5:1F:2B:91:FE:9C:80:A7:EF:61:CC:C8:FF:13:F0:4A:9A:F4:BE:19
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 425475E4F8F4483F1013A375E9E502DC620B495B
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2036323333.roa
Signing time: Fri 11 Sep 2026 12:50:22 +0000
ROA not before: Fri 11 Sep 2026 12:45:22 +0000
ROA not after: Fri 10 Sep 2027 12:50:22 +0000
asID: 6233
IP address blocks: 201.4.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:54:75:e4:f8:f4:48:3f:10:13:a3:75:e9:e5:02:dc:62:0b:49:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:22 2026 GMT
Not After : Sep 10 12:50:22 2027 GMT
Subject: CN=C51F2B91FE9C80A7EF61CCC8FF13F04A9AF4BE19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cb:e3:03:d9:7a:28:0d:f6:9c:4d:c4:d2:5d:
bd:8d:53:b3:af:0e:f1:46:49:d2:2a:c2:2b:03:9f:
e8:79:4e:c7:4a:c5:71:42:53:6a:f0:b9:98:88:e2:
e3:a9:61:ab:7c:00:d2:55:77:6e:2b:cf:e5:30:dc:
05:cf:ce:8f:c9:72:a4:9d:64:fd:0d:47:89:5e:8b:
66:09:9e:1f:f0:71:0c:45:6e:2c:7e:07:3b:4d:23:
d9:42:c6:3a:29:38:f2:2a:83:14:5e:b7:6e:80:ce:
bb:bb:ab:3d:a9:80:89:f2:52:bb:f2:43:42:41:36:
bf:c8:95:d1:78:3f:33:b2:30:f3:b2:a0:09:8e:3b:
41:8f:ce:e9:3c:d3:75:28:ca:2b:a6:e3:8d:6a:10:
78:4a:a8:7b:4c:c7:a1:19:ce:cd:84:d7:43:c3:54:
9b:d7:af:9c:2d:27:8b:b3:39:de:fb:94:ad:f5:38:
1f:8d:c5:3c:6b:4e:dd:2e:f7:0a:33:72:cf:66:16:
63:e5:24:5f:4f:56:b8:b8:bf:e7:56:64:2f:00:66:
ab:74:a0:af:d4:f8:66:8c:cf:9a:04:5b:48:fc:a3:
45:c1:55:0b:a9:27:8f:50:f8:e8:6b:af:cd:bb:3e:
29:72:85:27:28:77:89:9c:48:ae:cb:bf:4e:de:e9:
fc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1F:2B:91:FE:9C:80:A7:EF:61:CC:C8:FF:13:F0:4A:9A:F4:BE:19
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2036323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5d:b9:59:7e:4f:21:6b:05:de:81:20:b2:b3:81:bc:b4:be:ee:
b4:fb:d3:c0:fe:88:b9:68:d4:12:e7:f9:03:51:83:48:e6:5f:
8d:ec:f6:a5:ff:1c:0a:ca:c6:70:f0:fc:20:23:da:e4:6e:00:
21:cc:a0:0c:d4:28:b6:6a:96:25:97:c2:c8:ba:67:bf:87:90:
10:29:e6:a2:f5:b7:a0:ea:c5:70:19:7b:92:f4:b3:a2:76:a5:
8d:91:11:4f:e2:f6:66:24:ae:5b:ce:9f:7a:3a:56:3d:6d:12:
e9:2c:0c:db:1a:a7:34:67:a8:1e:e0:cb:22:92:18:5b:3e:90:
1d:84:d9:59:c5:2e:a5:48:35:d3:a1:40:f5:7d:01:5c:a5:74:
be:68:cd:e7:d4:dc:db:72:69:72:d0:6e:93:f4:8b:5f:1c:e7:
19:78:8d:fb:f4:d6:db:e5:6a:91:b9:12:11:c4:98:21:90:2a:
b9:40:f1:a8:fa:f3:49:f6:f0:0c:31:81:ad:c8:8d:1a:36:0f:
f9:d9:48:94:76:e5:a2:01:89:39:97:da:2a:f1:fe:ff:9c:d6:
59:23:12:15:88:21:76:52:b7:42:2d:a3:fb:fc:8f:24:13:83:
2c:1e:03:17:21:4b:8b:27:5f:7c:20:65:84:e3:95:86:94:b3:
ff:9d:7b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:32:21 2026 by rpki-client