Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2034373835.roa
File: 3230312e35302e33322e302f31392d3234203d3e2034373835.roa (raw, json)
Hash identifier: GhLtRoDjlqNHphHRdRApCsni62HttlSYQnl4FDsPCxk=
Subject key identifier: BD:24:CA:41:8E:CC:BB:33:2E:DB:12:0C:BB:03:0D:74:51:84:BE:57
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 2B65F4B64C20DA659DDFC83864E155C3D3AC68BC
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2034373835.roa
Signing time: Fri 11 Sep 2026 12:50:15 +0000
ROA not before: Fri 11 Sep 2026 12:45:15 +0000
ROA not after: Fri 10 Sep 2027 12:50:15 +0000
asID: 4785
IP address blocks: 201.50.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:65:f4:b6:4c:20:da:65:9d:df:c8:38:64:e1:55:c3:d3:ac:68:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:15 2026 GMT
Not After : Sep 10 12:50:15 2027 GMT
Subject: CN=BD24CA418ECCBB332EDB120CBB030D745184BE57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:52:c5:c2:74:2c:e8:97:df:a5:ec:d7:8b:
62:ae:c5:cc:05:48:5a:c0:60:7c:ae:68:ba:b0:51:
d4:10:b9:58:31:57:25:9a:fd:90:ea:db:d2:a3:a5:
1a:9a:ae:62:3c:5a:ad:78:5a:3b:64:75:02:e8:f8:
08:c9:b3:2d:a8:c5:62:49:5e:92:eb:31:ab:bc:39:
75:42:ca:c3:93:80:e8:34:eb:ba:c1:42:32:1a:95:
97:eb:9e:4e:b2:15:71:18:97:86:27:07:3a:01:f1:
17:6b:c6:5e:da:58:a5:76:39:8e:47:85:55:82:a3:
54:80:eb:35:4b:02:ae:7f:f6:e8:03:1c:e7:97:c0:
99:60:7d:32:89:8b:11:51:51:d9:db:03:15:95:fb:
81:a3:83:92:f7:fc:3a:5c:d1:30:85:e3:fa:7d:e3:
bb:78:63:3f:3a:58:9a:1c:42:6b:49:4c:f5:b1:c1:
cd:28:5c:e0:39:f5:14:3e:d8:58:c3:fb:1a:e9:87:
15:af:5e:03:8a:1e:df:26:b9:48:a4:79:b1:e7:ad:
c7:3e:e7:9d:75:6d:98:e8:e2:f3:7b:24:2a:3d:ee:
1a:ab:a8:ca:d6:78:fc:31:35:87:5e:24:f1:93:63:
03:56:e9:ab:e6:b8:07:c4:91:94:f4:e7:a0:0f:44:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:24:CA:41:8E:CC:BB:33:2E:DB:12:0C:BB:03:0D:74:51:84:BE:57
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2034373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.32.0/19
Signature Algorithm: sha256WithRSAEncryption
07:0f:a0:d9:6e:43:56:9f:c2:ce:13:46:0e:cd:32:47:c2:f9:
4b:47:c3:77:32:7c:59:9d:ce:2f:c1:7b:9f:bf:e0:a7:c6:c1:
88:bb:ef:92:04:56:97:90:b1:dd:61:58:a4:55:3a:2f:bb:8d:
c3:13:93:96:50:d7:d9:00:87:7d:e4:d1:87:ee:b4:05:19:b8:
1d:fc:1b:98:39:d1:34:f2:24:e7:8c:72:76:cc:1b:b9:85:ff:
7f:0e:4d:1b:5a:2c:9f:44:c7:af:a8:25:f2:f9:18:a6:d1:87:
c4:77:b8:14:c6:0b:3e:ec:65:1d:41:91:fc:50:f1:71:b6:22:
a5:fd:26:74:95:df:aa:97:3d:bb:c1:3f:4f:66:6f:fd:68:0f:
3a:9e:a2:a3:3c:c7:e2:a1:91:39:33:32:1d:0e:1e:06:56:c0:
08:ef:35:2b:19:58:49:15:c1:45:2f:d3:98:21:dc:cc:95:89:
4f:92:32:44:ed:36:18:7c:90:3e:ae:3b:dd:e7:45:ab:6a:1e:
97:18:5f:bb:3b:d7:7f:78:82:7a:60:b8:77:90:d5:c2:00:df:
e1:b9:e4:be:06:cf:e3:87:3a:4c:36:e3:73:cb:14:0e:97:6c:
60:ff:2a:4e:a3:4b:8f:d9:27:b3:ce:b8:f1:37:52:1a:d3:73:
c9:6e:ed:04
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUK2X0tkwg2mWd38g4ZOFVw9OsaLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA5MTExMjQ1MTVaFw0yNzA5MTAxMjUwMTVaMDMxMTAvBgNV
BAMTKEJEMjRDQTQxOEVDQ0JCMzMyRURCMTIwQ0JCMDMwRDc0NTE4NEJFNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ZlLFwnQs6JffpezXi2KuxcwF
SFrAYHyuaLqwUdQQuVgxVyWa/ZDq29KjpRqarmI8Wq14WjtkdQLo+AjJsy2oxWJJ
XpLrMau8OXVCysOTgOg067rBQjIalZfrnk6yFXEYl4YnBzoB8Rdrxl7aWKV2OY5H
hVWCo1SA6zVLAq5/9ugDHOeXwJlgfTKJixFRUdnbAxWV+4Gjg5L3/Dpc0TCF4/p9
47t4Yz86WJocQmtJTPWxwc0oXOA59RQ+2FjD+xrphxWvXgOKHt8muUikebHnrcc+
5511bZjo4vN7JCo97hqrqMrWePwxNYdeJPGTYwNW6avmuAfEkZT056APRCKzAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUvSTKQY7MuzMu2xIMuwMNdFGEvlcwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzIzMDMxMmUzNTMwMmUzMzMy
MmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzQzNzM4MzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXJMiAw
DQYJKoZIhvcNAQELBQADggEBAAcPoNluQ1afws4TRg7NMkfC+UtHw3cyfFmdzi/B
e5+/4KfGwYi775IEVpeQsd1hWKRVOi+7jcMTk5ZQ19kAh33k0YfutAUZuB38G5g5
0TTyJOeMcnbMG7mF/38OTRtaLJ9Ex6+oJfL5GKbRh8R3uBTGCz7sZR1BkfxQ8XG2
IqX9JnSV36qXPbvBP09mb/1oDzqeoqM8x+KhkTkzMh0OHgZWwAjvNSsZWEkVwUUv
05gh3MyViU+SMkTtNhh8kD6uO93nRatqHpcYX7s71394gnpguHeQ1cIA3+G55L4G
z+OHOkw243PLFA6XbGD/Kk6jS4/ZJ7POuPE3UhrTc8lu7QQ=
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:29:13 2026 by rpki-client