Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e362e302f32332d3332203d3e203233393631.roa
File: 3230312e342e362e302f32332d3332203d3e203233393631.roa (raw, json)
Hash identifier: 6dgSDcNhm53ie+bsgD7J8IGn5nBp0ZbLPHVHuPecMnc=
Subject key identifier: A4:22:FB:BA:9E:91:61:55:CC:6A:59:C7:EF:77:C0:91:3E:5C:A6:78
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 64EF3D4E1DDF4EECB1BE72AA034DC5B416DC9111
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e362e302f32332d3332203d3e203233393631.roa
Signing time: Fri 11 Sep 2026 12:50:32 +0000
ROA not before: Fri 11 Sep 2026 12:45:32 +0000
ROA not after: Fri 10 Sep 2027 12:50:32 +0000
asID: 23961
IP address blocks: 201.4.6.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:46:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ef:3d:4e:1d:df:4e:ec:b1:be:72:aa:03:4d:c5:b4:16:dc:91:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:32 2026 GMT
Not After : Sep 10 12:50:32 2027 GMT
Subject: CN=A422FBBA9E916155CC6A59C7EF77C0913E5CA678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:db:48:37:d3:d6:3f:81:c8:8c:a1:fb:28:fb:
6c:29:55:7d:c1:18:e3:b4:3e:9a:bb:ea:4c:4c:c7:
0e:37:d9:33:91:1b:1a:f1:35:f7:1e:87:32:e6:b6:
24:6c:c0:c2:56:78:73:77:7d:2a:15:b0:0e:a9:a5:
f3:bc:47:9f:6a:ae:fa:42:2b:56:2b:04:ca:4e:e8:
20:56:50:15:4b:92:50:44:5e:e8:14:2c:a2:25:65:
89:94:54:15:4d:97:a9:e2:54:76:9a:1d:5c:98:be:
a1:9b:b8:11:31:59:bd:a4:56:d2:ac:0c:9b:45:1b:
be:82:16:13:07:03:bf:0a:d7:f5:1f:24:96:44:a1:
9b:8c:89:59:9a:4f:fd:11:0d:9e:f8:ee:ed:d5:3b:
33:d3:4d:b2:8c:5d:e5:4d:40:1f:78:17:43:68:e8:
cd:cd:cf:8c:8f:2a:39:c9:02:ad:f4:25:8e:7a:a3:
90:86:26:58:23:47:05:c4:b7:8d:e1:70:d0:e3:20:
3a:b0:1c:c0:67:4b:00:ab:81:a0:e5:e8:0a:cf:fd:
55:99:89:5f:8c:f0:15:b0:8f:a8:0d:05:74:42:97:
0d:d3:51:64:15:2c:67:69:15:65:3e:63:e0:0a:2f:
e8:fe:21:fc:e0:07:36:aa:5f:d7:67:45:20:7b:dc:
f0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:22:FB:BA:9E:91:61:55:CC:6A:59:C7:EF:77:C0:91:3E:5C:A6:78
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e362e302f32332d3332203d3e203233393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.6.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:73:14:8b:03:87:6d:a1:c8:e5:58:7f:1a:37:25:41:c1:6f:
24:68:95:90:bb:f7:62:35:e2:23:3e:26:0c:74:55:b4:d0:50:
e9:9d:90:c5:6c:7c:f7:58:23:1b:c3:38:f4:61:39:53:a1:54:
58:fc:46:e2:94:4c:68:0b:59:13:19:b0:db:09:0e:3b:eb:d3:
3e:67:7c:90:6a:f2:46:d2:13:65:72:68:3f:29:10:75:89:79:
f3:7c:7a:1d:a4:13:11:8c:1d:82:62:5e:5f:c2:72:df:36:9f:
38:a0:4e:13:bf:37:33:9d:a9:52:0e:eb:92:44:4a:1e:0d:d6:
80:71:57:0b:dd:d8:9a:3c:90:ac:8d:13:b3:4b:64:8c:09:98:
63:ca:64:1c:e7:01:41:cc:83:b5:91:06:7c:6e:7a:08:6a:20:
18:f9:0c:7a:90:f1:7e:22:ee:b5:ac:d0:04:aa:96:3c:bf:f9:
95:34:37:e7:d9:ba:89:ec:8d:56:7b:70:55:f2:cb:b2:da:29:
00:f9:a5:3b:c2:fb:91:0f:01:35:4c:9b:65:3b:04:68:e8:6b:
72:83:04:62:19:79:a0:1e:ff:fa:02:73:5d:e7:c5:f2:36:09:
78:4a:e8:4f:27:7c:84:98:e5:00:ac:2a:d3:05:e7:2d:25:47:
0b:24:82:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:55:54 2026 by rpki-client