Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e312e302f32342d3332203d3e203134363138.roa
File: 3230312e342e312e302f32342d3332203d3e203134363138.roa (raw, json)
Hash identifier: YcIPspacibddqP4Q7lbKWsOwSq2g4fym2X2/J5u1FiA=
Subject key identifier: 14:4F:38:36:C5:1E:4C:F2:58:64:02:F0:C0:96:C1:A5:CE:D8:59:14
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 214A48822CCCD06B4A7509C047341056E7C4896F
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e312e302f32342d3332203d3e203134363138.roa
Signing time: Tue 30 Jun 2026 14:05:37 +0000
ROA not before: Tue 30 Jun 2026 14:00:37 +0000
ROA not after: Tue 29 Jun 2027 14:05:37 +0000
asID: 14618
IP address blocks: 201.4.1.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:4a:48:82:2c:cc:d0:6b:4a:75:09:c0:47:34:10:56:e7:c4:89:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 30 14:00:37 2026 GMT
Not After : Jun 29 14:05:37 2027 GMT
Subject: CN=144F3836C51E4CF2586402F0C096C1A5CED85914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:ac:b8:ad:dd:db:53:91:3e:1b:a9:e9:76:
ac:db:14:63:1a:34:2b:33:27:91:e9:d5:da:cc:70:
35:63:aa:e9:35:0d:3e:9c:81:10:c8:a2:26:89:fa:
67:af:3a:e5:22:69:6c:71:e0:cb:2b:20:c9:96:2f:
18:df:2f:bf:96:fb:95:df:a3:fb:63:aa:fa:d2:a5:
da:55:97:1e:6d:b6:80:61:ca:c8:b3:c4:f4:55:4a:
15:a7:68:de:8c:9d:ad:78:8b:9a:04:4e:55:5f:bc:
45:13:28:dd:81:cd:d3:e6:55:97:a1:9e:cd:1c:28:
97:1e:e8:ca:3e:e8:f7:5a:0d:e0:fe:38:02:f8:88:
6f:f7:d5:e2:74:e7:65:7d:1c:35:c8:f5:ec:11:31:
5e:16:7b:95:da:ae:be:cd:8f:df:52:9c:8e:d0:9e:
3c:99:81:1f:3a:62:90:47:6e:a1:ac:ef:39:d4:63:
d7:b4:ab:c9:38:84:fe:7c:de:a5:07:0d:6f:cf:ae:
c4:1a:59:21:2e:49:c1:91:2c:02:fc:73:27:51:92:
0c:8a:05:1f:f1:99:a3:1d:d1:bc:be:da:ca:48:5b:
16:92:e2:39:63:e0:f4:8d:50:85:29:05:b0:75:49:
ee:51:0a:8d:eb:57:f6:02:46:71:da:a5:81:9b:10:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4F:38:36:C5:1E:4C:F2:58:64:02:F0:C0:96:C1:A5:CE:D8:59:14
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e312e302f32342d3332203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.1.0/24
Signature Algorithm: sha256WithRSAEncryption
39:40:08:5b:43:84:86:1f:82:1f:dc:19:f5:b3:93:0f:a6:68:
19:d1:ed:ce:ac:e2:8e:46:64:eb:26:0c:a8:60:f3:42:c4:9b:
d1:ba:cd:d5:f6:39:0d:05:ac:f6:58:a8:d3:0b:c4:d6:fc:36:
7d:8d:a0:32:19:3c:37:1a:fa:d9:44:b7:2a:92:12:6d:a1:fd:
b9:69:7b:38:9e:49:43:e6:a8:2b:78:84:47:68:cb:a8:56:62:
77:9e:35:1d:7f:3b:cd:02:13:d8:a7:85:84:13:7e:b5:1a:e6:
3a:af:b1:bb:4c:2b:c2:4d:69:4e:86:2b:80:c1:ef:35:06:57:
d5:80:e5:fb:a1:fc:39:62:99:5b:99:a0:70:d1:61:3a:96:0e:
a5:ad:e6:fa:66:f7:53:e9:97:07:a0:ae:98:4e:c3:3d:96:08:
93:21:f0:26:1f:1a:48:44:f3:95:ff:db:e5:11:2d:15:f1:53:
3c:0f:5c:0f:08:b7:f7:e7:af:bf:fb:9c:4d:77:bc:25:b0:de:
da:8a:54:cc:76:3c:d7:ad:00:84:e9:0e:1c:ce:10:c7:22:89:
c7:66:d0:ff:73:9b:48:42:e8:2a:4d:b2:4b:9e:63:05:e4:8f:
22:48:7d:1b:2c:ec:0c:45:e4:14:a3:6c:fb:53:3c:2a:6d:12:
b1:87:a4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:33:44 2026 by rpki-client