Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2038383838.roa
File: 3230312e35302e33322e302f31392d3234203d3e2038383838.roa (raw, json)
Hash identifier: Id0lD9Oi+RFE/S2xLodJ4oFQZxHVtg1X/xF7a5feNlk=
Subject key identifier: 32:50:4D:ED:8E:4A:52:6A:94:18:6A:99:7A:DA:02:B9:83:46:22:ED
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 08892CB992CE8092DBF8A124ED415850D76D0C87
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2038383838.roa
Signing time: Fri 11 Sep 2026 12:50:24 +0000
ROA not before: Fri 11 Sep 2026 12:45:24 +0000
ROA not after: Fri 10 Sep 2027 12:50:24 +0000
asID: 8888
IP address blocks: 201.50.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:46:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:89:2c:b9:92:ce:80:92:db:f8:a1:24:ed:41:58:50:d7:6d:0c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:24 2026 GMT
Not After : Sep 10 12:50:24 2027 GMT
Subject: CN=32504DED8E4A526A94186A997ADA02B9834622ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:f6:5b:4d:ca:7d:b8:f5:d8:cf:81:1a:ff:
50:c6:35:df:c6:c8:0a:4d:08:c0:37:1a:53:66:e5:
c0:b9:c2:ad:8c:e8:87:18:cb:15:a7:41:e7:61:a6:
3b:8b:40:c7:6a:e3:89:1e:f2:94:82:eb:a9:3a:f4:
2f:a8:29:8f:44:65:8c:91:10:26:a2:59:09:cd:8e:
7b:bf:5b:8c:d7:5f:ce:a8:d5:ca:03:9b:ff:01:3f:
a3:46:2f:9e:6f:77:27:1c:df:8f:61:17:f9:bb:1e:
05:41:f8:20:3d:b5:52:0b:db:99:99:9b:d7:55:f9:
7c:84:df:b3:59:66:c3:76:0f:5e:84:00:5d:6a:28:
7e:5f:d8:22:6e:21:83:7f:53:c2:4f:6c:e3:25:52:
1e:6f:2b:48:04:54:67:67:d0:26:6e:c1:60:47:51:
fe:23:ba:0f:7d:ba:c1:54:1e:e5:9d:94:c2:0f:1e:
42:83:3a:ef:59:5e:c2:cb:9f:7c:68:76:13:ce:2e:
f1:24:13:ad:c8:f3:92:88:8d:cf:df:ee:32:fc:85:
25:7c:25:93:ed:1d:b9:53:95:0e:bd:92:89:dd:08:
30:4e:09:5e:8a:cb:3c:6a:a8:f1:5d:49:2f:2f:87:
f8:09:c8:ca:16:e0:27:ca:cf:49:e0:52:ed:ea:3f:
f7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:50:4D:ED:8E:4A:52:6A:94:18:6A:99:7A:DA:02:B9:83:46:22:ED
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:84:82:88:17:5e:c2:04:f6:49:09:59:82:0b:d7:f4:b9:30:
69:ef:c3:8b:26:ea:b5:da:8c:67:13:b4:82:6d:33:b6:3f:67:
dc:08:9b:77:cd:34:95:9a:f7:2d:c4:88:1c:29:56:88:e2:c1:
72:88:da:18:fd:2e:98:e5:64:55:b6:c5:18:f7:4c:c6:e6:c5:
53:5a:8f:25:03:3a:a8:05:1d:4a:a5:af:52:71:4e:10:ce:e4:
15:1c:52:ea:ad:66:3c:31:78:f3:1e:8a:b5:50:e8:5a:f7:2f:
c2:b6:5d:ba:b0:4a:52:0d:f7:e1:66:d2:e7:ef:37:d2:ce:7a:
9c:b3:cd:13:e7:48:34:16:7d:45:3f:71:75:54:f4:d5:73:f1:
6b:bc:f0:9a:49:b0:58:97:bb:7f:f2:2b:40:03:64:c7:d2:52:
6b:1f:f0:55:f2:76:82:d4:0d:ef:f6:45:66:76:86:92:0b:ee:
d0:57:68:96:8f:63:67:91:5d:ad:06:54:75:c5:28:3e:ea:2b:
51:c1:ee:a5:00:de:c1:3f:61:d8:d4:6c:a1:11:9f:bf:83:32:
f9:67:5e:bc:0e:c7:b8:86:38:8b:68:a2:2b:da:fb:91:70:65:
a8:bf:cc:10:a8:3e:ae:38:25:73:72:90:ab:c3:cb:9d:b2:5a:
a0:39:10:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:09:52 2026 by rpki-client