Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e312e302f32342d3332203d3e203530303639.roa
File: 3230312e342e312e302f32342d3332203d3e203530303639.roa (raw, json)
Hash identifier: XmOCvCG6nE77wq2CjsfT1+9ketX90z1a7WSGv0nVh20=
Subject key identifier: EA:AB:C2:CF:12:AA:81:2A:F2:A2:73:E6:24:E4:FA:E5:74:16:A3:50
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 1E643439A489B15608643839D005F88AAE14DC43
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e312e302f32342d3332203d3e203530303639.roa
Signing time: Tue 30 Jun 2026 11:04:53 +0000
ROA not before: Tue 30 Jun 2026 10:59:53 +0000
ROA not after: Tue 29 Jun 2027 11:04:53 +0000
asID: 50069
IP address blocks: 201.4.1.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:64:34:39:a4:89:b1:56:08:64:38:39:d0:05:f8:8a:ae:14:dc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 30 10:59:53 2026 GMT
Not After : Jun 29 11:04:53 2027 GMT
Subject: CN=EAABC2CF12AA812AF2A273E624E4FAE57416A350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:85:ee:eb:cc:bf:aa:31:1f:3f:09:c4:61:
55:c7:b1:77:67:52:fc:0f:6e:3f:ad:86:57:87:4c:
fc:89:f2:55:3e:a6:a9:68:ba:6e:8b:f9:f3:9e:fd:
54:78:ed:af:6d:48:b4:e1:01:5b:0d:ba:fc:08:4c:
21:15:e7:d9:dd:41:b5:8d:6f:4f:44:7c:50:e2:0a:
f5:9a:59:e2:47:80:a0:98:84:eb:94:32:fa:a7:c1:
9d:d6:87:96:52:a9:b2:c0:8d:f6:89:fc:58:e9:85:
97:a7:c6:4c:9f:cf:2a:e7:61:99:3e:2d:81:25:cb:
5d:ae:28:00:e5:3e:4b:6b:65:f7:fe:c5:41:47:97:
9f:41:57:26:88:f1:d5:60:b9:e6:28:5f:21:3f:12:
be:f3:dc:9c:a0:55:eb:27:4c:5c:63:c4:a0:76:c8:
20:d3:76:09:1e:c9:af:3f:e2:4f:61:57:af:e4:b6:
83:66:90:dd:9e:f7:0f:a2:a7:5d:79:7f:fc:47:21:
e8:72:69:25:5f:a3:94:ad:47:40:fb:08:ec:13:a5:
46:a9:09:c6:7f:55:00:0f:df:4d:72:6f:86:77:79:
ff:91:fc:be:05:9c:bf:2e:02:8f:d1:45:34:28:f2:
c9:8c:7a:e8:e2:a8:86:bd:8e:74:2c:91:8b:21:9d:
08:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AB:C2:CF:12:AA:81:2A:F2:A2:73:E6:24:E4:FA:E5:74:16:A3:50
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e312e302f32342d3332203d3e203530303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.1.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ee:a7:76:9a:d3:7f:bf:94:31:f1:3e:c2:61:e7:e3:84:f1:
5c:7c:73:c0:4d:45:e5:a7:31:cb:2c:30:ad:80:af:f4:91:a0:
25:2f:d8:46:59:23:98:4f:40:f8:fb:8d:d7:f5:73:be:91:f8:
95:e2:ec:3d:b3:ef:74:aa:8f:6b:be:fe:22:75:0d:71:6d:0e:
59:68:eb:73:16:a7:25:2e:55:71:94:9d:d9:ce:a4:80:cf:cd:
fc:c1:33:ad:39:a3:d5:b3:9b:d5:aa:83:ab:87:e5:19:a4:a1:
90:e0:e8:9f:e8:f0:e8:69:a1:33:fb:72:6c:09:95:7c:ba:ab:
82:38:63:ca:e0:3a:cd:ee:5a:c0:f4:0b:a9:6b:6a:13:02:a3:
9d:20:10:21:b5:00:c0:e6:02:e2:b7:3e:b0:aa:32:91:e9:55:
c4:4c:b7:72:f9:a6:16:c8:00:87:b5:cc:34:29:d0:71:46:19:
0f:17:ca:80:37:23:ef:fc:06:ee:ce:63:7a:1c:8c:c5:8f:af:
00:d1:bf:c9:95:ec:20:87:e9:ad:50:35:a5:8d:12:35:96:11:
c0:94:07:b4:e7:47:5c:e6:7a:1f:9f:18:82:8b:3c:e1:b5:19:
32:bc:e8:c1:aa:8f:9e:dd:91:ed:0c:58:33:42:6a:1d:60:40:
da:f5:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:31:59 2026 by rpki-client