Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e31302e302f32332d3332203d3e20393137.roa
File: 3230312e342e31302e302f32332d3332203d3e20393137.roa (raw, json)
Hash identifier: pFaODxdTZ3Ur3GXEACIzBInYnsjP8y/uCN9GdAyNq6g=
Subject key identifier: 6E:E4:D2:39:DD:B7:69:AC:B2:81:36:A9:37:31:8B:7F:6F:A8:58:90
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 40CA17277205064839957BE0E8E3DF33EFD1F3CE
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e31302e302f32332d3332203d3e20393137.roa
Signing time: Fri 03 Jul 2026 12:43:11 +0000
ROA not before: Fri 03 Jul 2026 12:38:11 +0000
ROA not after: Fri 02 Jul 2027 12:43:11 +0000
asID: 917
IP address blocks: 201.4.10.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ca:17:27:72:05:06:48:39:95:7b:e0:e8:e3:df:33:ef:d1:f3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 3 12:38:11 2026 GMT
Not After : Jul 2 12:43:11 2027 GMT
Subject: CN=6EE4D239DDB769ACB28136A937318B7F6FA85890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4c:a5:41:a4:da:7a:39:91:79:e9:32:65:af:
e0:1e:fd:88:59:35:18:de:13:05:4b:e9:81:a7:0b:
7e:15:25:8a:49:3c:78:cb:83:e7:be:27:b1:f1:da:
10:d6:ee:c4:65:42:29:f1:6f:b0:f9:4c:01:70:78:
ea:60:a5:53:17:5d:82:f9:82:b6:30:8f:e2:16:04:
ad:fd:88:03:05:a5:32:67:c7:2b:77:d8:7e:e1:49:
0a:a3:b0:0c:37:a6:c1:8c:98:00:86:4b:0b:d8:e4:
cf:7e:3e:64:39:ae:2c:7b:0f:42:de:68:e8:fd:cc:
19:18:b1:37:d3:cd:4e:10:a9:45:8e:7e:49:87:d5:
fd:57:1a:a2:65:0a:0b:51:1c:22:89:cf:db:bf:41:
5c:70:00:bc:c6:45:8f:18:8d:ba:9b:55:49:a7:b9:
2e:c5:81:3e:bc:fe:b8:8d:d1:f5:58:e9:d0:57:e6:
c1:41:2d:74:39:ec:f8:bc:ce:75:91:ae:33:1a:c8:
ef:c6:a4:6d:8c:fc:44:15:42:14:22:f7:aa:c4:1c:
d9:9e:dd:80:29:77:9a:d8:9b:01:10:d2:df:26:b0:
24:f3:ea:38:60:46:0b:9a:3b:f6:33:e6:97:1b:e5:
75:fe:c6:ad:0b:aa:6d:94:8f:dc:62:e8:1b:86:60:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E4:D2:39:DD:B7:69:AC:B2:81:36:A9:37:31:8B:7F:6F:A8:58:90
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e31302e302f32332d3332203d3e20393137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.10.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:24:bf:63:89:1f:04:75:98:75:2d:0d:ac:46:7c:1b:78:7d:
a7:9e:e7:8e:ed:d9:b3:82:85:18:3d:27:7a:f8:c4:53:7c:5b:
93:b2:16:77:a6:dd:38:08:96:2b:48:a0:b0:23:a9:93:95:f2:
ce:32:3c:68:ad:a3:9f:09:24:35:a8:40:2a:61:24:ab:d5:63:
88:aa:e8:29:13:e7:54:e0:35:42:f3:c1:70:70:6e:32:c5:52:
68:83:2b:d4:86:34:a5:b0:d8:55:12:59:83:51:e4:e1:5e:e1:
a0:49:39:f9:79:1c:fc:48:80:42:e7:e2:86:a3:ac:e1:1c:4f:
3b:da:09:75:91:cf:82:f4:b0:ad:13:75:26:49:d7:2b:f1:54:
d4:79:24:bc:31:fa:ee:b1:10:6f:42:46:43:d7:84:6f:9d:8f:
3e:a4:5e:3c:0d:27:43:10:ab:54:f2:3b:97:e7:64:d0:68:70:
9f:7a:e0:d5:23:c4:86:68:b9:fd:02:e5:6f:b7:fc:a7:ae:53:
c0:54:1e:ea:7b:e6:e0:74:59:32:ca:e4:64:eb:83:16:a1:02:
58:ec:39:f6:36:a3:7b:af:4c:9c:2c:35:ad:88:fb:9b:8e:5f:
92:81:30:07:0f:4b:b6:af:ca:a2:1c:30:91:1e:65:3a:5b:16:
ad:d0:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:32:31 2026 by rpki-client