Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e302e302f32332d3332203d3e20393137.roa
File: 3230312e342e302e302f32332d3332203d3e20393137.roa (raw, json)
Hash identifier: 1XzO8dtu2A8547Pdy5BV6gH3n5WPqkjpVDerbDLYuiM=
Subject key identifier: D2:2B:9D:5F:4F:CA:B1:4E:2F:76:2D:9E:C8:AD:CE:BB:B1:FF:66:F2
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 0F1A6FAF51754564199D04C5D383803166386DD2
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e302e302f32332d3332203d3e20393137.roa
Signing time: Thu 25 Jun 2026 14:12:17 +0000
ROA not before: Thu 25 Jun 2026 14:07:17 +0000
ROA not after: Thu 24 Jun 2027 14:12:17 +0000
asID: 917
IP address blocks: 201.4.0.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:1a:6f:af:51:75:45:64:19:9d:04:c5:d3:83:80:31:66:38:6d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:07:17 2026 GMT
Not After : Jun 24 14:12:17 2027 GMT
Subject: CN=D22B9D5F4FCAB14E2F762D9EC8ADCEBBB1FF66F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:49:62:04:a2:1b:3f:03:80:98:5b:a0:f6:
27:37:56:05:45:d0:bf:8f:59:ab:98:d0:4f:ae:f8:
aa:ab:63:4b:41:fd:fb:ca:d2:23:8d:b9:76:59:95:
0f:96:eb:1e:17:c1:57:dd:85:71:85:d4:91:ef:c3:
cf:a9:07:18:e5:12:b3:96:b4:d7:ad:84:f2:40:17:
87:09:a1:61:01:f9:26:a5:b6:fb:67:37:e5:0d:44:
24:a1:c7:a7:f9:67:02:5a:07:1f:81:4e:2d:30:63:
60:98:80:e4:57:5b:a0:51:37:b2:e5:25:1f:4e:76:
b1:71:b0:31:85:0d:b1:07:1e:9d:cd:f8:28:d5:df:
ba:5a:ad:ec:42:f5:ab:71:36:f3:5d:b7:ce:68:fe:
d2:9f:c7:ec:97:5e:1a:a0:f0:05:ea:e6:8b:e8:c6:
24:1c:08:74:ef:98:96:9d:b7:30:9e:45:ef:8a:9b:
85:73:1e:61:2a:de:a2:cf:5f:6a:1b:b2:07:eb:c4:
3c:1a:37:05:6e:c6:81:a3:9b:ff:f7:27:ec:65:8e:
3a:50:0b:54:a2:2e:5d:9a:df:f5:8f:2e:37:e5:ec:
88:83:c8:78:71:2e:22:9f:17:fb:40:f8:17:ed:ae:
cf:a3:a7:b7:ff:63:0c:82:2e:4f:b8:61:3b:49:6b:
d7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2B:9D:5F:4F:CA:B1:4E:2F:76:2D:9E:C8:AD:CE:BB:B1:FF:66:F2
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e302e302f32332d3332203d3e20393137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.0.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:23:16:98:03:14:f2:ec:c4:a9:66:51:64:dc:02:34:1a:08:
50:a5:47:32:71:09:6a:7a:06:bf:e1:64:c1:b2:7c:4b:f3:11:
fd:e4:99:d5:6a:84:04:bc:e1:fd:27:e7:14:6b:93:5b:6e:d1:
07:00:13:ea:8a:28:37:79:4f:ad:52:d6:77:31:6f:e1:83:69:
b8:f0:ce:5e:55:39:1e:e2:dc:76:cd:26:db:93:af:77:e5:57:
73:ae:73:48:0e:b2:6a:2a:5a:de:df:2f:47:27:8a:3f:b6:7c:
a5:bb:30:ea:03:c1:b6:00:02:88:72:7a:23:ff:da:da:88:6a:
71:04:6a:67:9f:cc:d4:ec:96:d9:6a:05:e7:70:35:0a:ae:8d:
27:45:9a:b0:01:69:7e:7b:37:3c:90:a8:c8:60:08:8f:b4:5a:
a5:a4:43:5e:75:79:96:f0:6d:ff:f0:95:a5:9c:ee:93:b1:d7:
2d:51:34:63:0c:3c:4c:7c:80:b5:cc:58:ad:1c:f7:41:8d:45:
61:c1:6c:60:53:06:a9:0c:fb:24:bc:dc:3c:4b:f1:23:82:71:
c1:20:0c:7b:b3:a5:d9:88:e1:4e:bb:51:79:98:d2:b8:bf:4f:
50:a3:43:db:67:b6:16:c6:f2:31:f5:41:dc:9e:fe:c4:d7:9b:
c5:5a:af:ee
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUDxpvr1F1RWQZnQTF04OAMWY4bdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA2MjUxNDA3MTdaFw0yNzA2MjQxNDEyMTdaMDMxMTAvBgNV
BAMTKEQyMkI5RDVGNEZDQUIxNEUyRjc2MkQ5RUM4QURDRUJCQjFGRjY2RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXWUliBKIbPwOAmFug9ic3VgVF
0L+PWauY0E+u+KqrY0tB/fvK0iONuXZZlQ+W6x4XwVfdhXGF1JHvw8+pBxjlErOW
tNethPJAF4cJoWEB+SaltvtnN+UNRCShx6f5ZwJaBx+BTi0wY2CYgORXW6BRN7Ll
JR9OdrFxsDGFDbEHHp3N+CjV37parexC9atxNvNdt85o/tKfx+yXXhqg8AXq5ovo
xiQcCHTvmJadtzCeRe+Km4VzHmEq3qLPX2obsgfrxDwaNwVuxoGjm//3J+xljjpQ
C1SiLl2a3/WPLjfl7IiDyHhxLiKfF/tA+Bftrs+jp7f/YwyCLk+4YTtJa9crAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQU0iudX0/KsU4vdi2eyK3Ou7H/ZvIwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzIzMDMxMmUzNDJlMzAyZTMw
MmYzMjMzMmQzMzMyMjAzZDNlMjAzOTMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHJBAAwDQYJKoZI
hvcNAQELBQADggEBAC8jFpgDFPLsxKlmUWTcAjQaCFClRzJxCWp6Br/hZMGyfEvz
Ef3kmdVqhAS84f0n5xRrk1tu0QcAE+qKKDd5T61S1ncxb+GDabjwzl5VOR7i3HbN
JtuTr3flV3Ouc0gOsmoqWt7fL0cnij+2fKW7MOoDwbYAAohyeiP/2tqIanEEamef
zNTsltlqBedwNQqujSdFmrABaX57NzyQqMhgCI+0WqWkQ151eZbwbf/wlaWc7pOx
1y1RNGMMPEx8gLXMWK0c90GNRWHBbGBTBqkM+yS83DxL8SOCccEgDHuzpdmI4U67
UXmY0ri/T1CjQ9tnthbG8jH1Qdye/sTXm8Var+4=
-----END CERTIFICATE-----
Generated at Sun Jul 12 08:32:08 2026 by rpki-client