Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e312e302f32342d3332203d3e203136353039.roa
File: 3230312e342e312e302f32342d3332203d3e203136353039.roa (raw, json)
Hash identifier: MqNFwidfN/gBbmLPU8fAtfSeaXA1OLb27E64iUo9EEM=
Subject key identifier: E1:F8:09:DA:13:55:41:2A:00:7C:A2:33:23:2A:91:7D:30:C4:AB:E5
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 19A6765EB94A77E725DD2ECACE75FC27559014FF
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e312e302f32342d3332203d3e203136353039.roa
Signing time: Tue 30 Jun 2026 11:04:34 +0000
ROA not before: Tue 30 Jun 2026 10:59:34 +0000
ROA not after: Tue 29 Jun 2027 11:04:34 +0000
asID: 16509
IP address blocks: 201.4.1.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a6:76:5e:b9:4a:77:e7:25:dd:2e:ca:ce:75:fc:27:55:90:14:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 30 10:59:34 2026 GMT
Not After : Jun 29 11:04:34 2027 GMT
Subject: CN=E1F809DA1355412A007CA233232A917D30C4ABE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:63:bf:93:03:a2:df:f0:7b:55:dd:1c:41:
66:54:63:31:b5:27:21:be:72:18:65:6c:8a:4a:ca:
a9:a7:02:c1:76:8c:f3:03:2e:14:ef:b3:ed:fb:8e:
09:93:16:a9:7a:7d:9a:4e:b9:27:ab:89:f2:28:c8:
41:6e:dc:dc:2b:f7:72:f9:bc:1c:f8:25:cf:1c:68:
5f:e8:64:ad:31:68:fe:6b:a1:4b:ce:3e:df:85:de:
5f:8d:6f:69:76:54:c2:48:73:7c:b3:cf:a0:a4:06:
d9:70:6b:a3:6f:50:8c:a6:a7:e1:dc:16:ab:46:af:
bd:b3:16:4c:15:8c:cf:a5:fc:c3:17:f8:d9:09:1f:
c5:86:23:5d:26:46:0a:43:28:e2:dd:3f:3b:a7:6c:
4e:0e:23:fd:30:88:d9:f3:24:fb:22:a2:01:f4:dd:
9a:bf:92:41:bc:2d:63:af:bd:99:23:41:be:13:a9:
6c:d7:bf:04:9a:3c:2c:9d:c3:78:12:32:71:1c:bd:
12:25:1b:cf:5b:89:7d:08:d0:3e:af:d9:b3:a1:aa:
2c:f0:c7:bb:33:88:57:50:df:fc:49:5d:c9:49:1c:
25:0d:ef:44:06:81:97:ee:34:af:72:b0:bb:0f:d3:
81:f1:77:68:54:7f:98:71:39:d6:6d:b3:5d:25:8e:
14:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F8:09:DA:13:55:41:2A:00:7C:A2:33:23:2A:91:7D:30:C4:AB:E5
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e312e302f32342d3332203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.1.0/24
Signature Algorithm: sha256WithRSAEncryption
14:0a:69:94:46:47:3b:0a:07:71:c9:f7:e0:5b:f3:19:91:e4:
40:3a:70:f7:6b:0c:76:64:dd:d9:72:e0:7a:ac:a0:e7:51:df:
45:4a:57:6a:b1:39:74:78:29:76:1a:e4:a3:70:30:b3:e5:35:
39:47:8c:02:97:2b:e4:60:a7:4a:bc:c6:eb:b7:62:f4:da:8a:
5f:0a:6f:66:e4:10:b8:e6:34:3f:0a:e3:62:3f:bb:99:6e:5a:
5f:68:cc:8b:b9:94:74:c1:20:b0:87:81:1f:46:f8:54:1c:a5:
ae:b2:c9:43:bb:3e:85:c1:b2:e6:51:29:3d:aa:84:14:97:19:
53:85:14:ef:d0:b7:85:e0:6d:e1:07:84:9e:08:85:a0:de:ef:
2c:0a:d7:ff:65:a4:d2:d3:d1:73:27:70:e1:82:21:fc:36:54:
a1:ef:55:86:68:32:fd:f1:61:e1:b8:a0:f1:bb:a6:e2:f3:33:
26:82:a5:7f:1a:ae:bc:e6:d3:5a:d4:b7:0e:68:53:23:8d:11:
50:11:d0:3f:16:e7:0a:8f:d5:46:5f:86:92:e6:7d:e2:15:3a:
63:96:3f:09:f9:fc:3b:c9:43:e5:e4:13:f5:48:42:0b:29:46:
d8:99:22:f6:43:95:d9:fb:51:d5:47:11:8b:7e:f6:56:e4:04:
22:48:7d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:32:41 2026 by rpki-client