Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e31322e302f32322d3332203d3e20393137.roa
File: 3230312e342e31322e302f32322d3332203d3e20393137.roa (raw, json)
Hash identifier: 86q5Ib6VV6W7lyWruMbQIXwBXgluQ4kpPxG0tDHsMfY=
Subject key identifier: EA:4F:6C:83:7A:8C:99:42:B5:32:E0:53:D0:4A:C1:6B:3A:BE:EE:A9
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 56A5580CDE64071701945CA07A5F7C7939FEA5E5
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e31322e302f32322d3332203d3e20393137.roa
Signing time: Fri 03 Jul 2026 12:43:34 +0000
ROA not before: Fri 03 Jul 2026 12:38:34 +0000
ROA not after: Fri 02 Jul 2027 12:43:34 +0000
asID: 917
IP address blocks: 201.4.12.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:a5:58:0c:de:64:07:17:01:94:5c:a0:7a:5f:7c:79:39:fe:a5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 3 12:38:34 2026 GMT
Not After : Jul 2 12:43:34 2027 GMT
Subject: CN=EA4F6C837A8C9942B532E053D04AC16B3ABEEEA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7f:0b:45:d2:c8:e1:2c:75:22:1f:16:81:e3:
d4:a7:a8:a5:f1:ec:99:05:41:63:ea:39:c5:91:18:
37:4b:66:30:0f:41:82:f3:e1:ff:27:c7:a3:96:f1:
28:9d:59:e9:59:36:9a:b7:98:7f:26:2f:15:21:1a:
9e:10:43:2f:f7:22:32:cf:41:3d:3d:f4:c2:c5:6e:
d4:ba:4b:25:76:ff:15:a4:98:c4:d3:e3:94:60:61:
da:9c:42:04:7b:0e:49:df:ac:6a:c0:bc:45:07:8b:
55:db:a5:d0:ec:fc:c9:1e:af:b8:9c:4f:ad:61:19:
7f:13:28:80:ac:e0:2f:5b:23:83:32:3a:5e:09:95:
75:d0:de:2e:ed:10:4d:93:21:23:66:43:17:d7:13:
1d:92:78:d0:9e:aa:a3:e6:fc:50:ca:ae:6d:b0:b8:
f0:4c:fe:ba:ac:6d:07:39:49:37:4d:3f:dc:48:23:
0e:0e:0c:55:32:29:7d:96:84:03:1b:59:a8:42:3d:
8c:a0:f4:74:10:3f:88:39:b1:fa:e0:bc:2c:0b:d2:
c9:33:07:6c:a1:e7:ca:c0:61:39:bf:b0:3a:1f:24:
18:d3:fe:48:5d:5a:38:ec:4a:5e:6f:16:a2:3e:85:
ca:e4:14:42:b5:6c:db:f6:55:ef:4d:82:6b:87:01:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4F:6C:83:7A:8C:99:42:B5:32:E0:53:D0:4A:C1:6B:3A:BE:EE:A9
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e31322e302f32322d3332203d3e20393137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.12.0/22
Signature Algorithm: sha256WithRSAEncryption
36:37:46:9b:2c:6c:41:b5:f2:b0:cb:02:d5:2a:d0:bb:08:bb:
bf:59:cf:6b:e8:61:dc:67:a4:12:07:76:5c:7c:ba:27:fc:fe:
f9:55:3e:3b:a2:9f:e7:68:2e:37:3e:f3:88:38:aa:4c:bd:d4:
7e:be:a9:81:7a:7c:af:05:4f:38:ef:77:22:8a:7c:cf:c1:c9:
3e:72:a1:70:3c:36:b8:1b:7a:34:ba:40:d2:de:79:db:39:fc:
86:87:fb:89:2f:80:a8:65:63:4b:f9:1c:c5:14:30:95:7d:a4:
f0:53:b1:cd:00:1f:45:01:28:b8:b3:b4:ee:a5:03:be:36:18:
81:9b:2a:91:e6:2c:6d:81:f2:e9:4f:7f:8b:a2:a5:63:12:dc:
3a:1b:df:af:30:60:e8:bd:b1:62:f6:1b:ac:09:2b:88:9a:23:
92:70:eb:b7:d5:be:0a:48:2d:fc:83:dc:61:d3:04:2b:cc:0c:
b1:76:ae:2e:52:24:f7:ef:f6:f6:c6:b1:e4:fa:8e:1b:09:79:
77:df:f2:f2:e7:45:ec:7b:f3:40:ed:85:e4:68:aa:99:70:9b:
f1:0b:29:3b:f2:ad:4f:84:b8:bc:2e:2a:ea:af:b2:1b:ba:ee:
aa:c7:0a:8b:11:ad:08:25:2b:dc:a2:a0:84:cc:a2:9b:12:9e:
87:6a:fd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:34:20 2026 by rpki-client