Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e322e302f32332d3332203d3e203530303639.roa
File: 3230312e342e322e302f32332d3332203d3e203530303639.roa (raw, json)
Hash identifier: vnlbzeDHDzI5KDbWJ9P6LdCa67W9aeahffbqRxi5BqA=
Subject key identifier: 20:45:B2:83:FC:B0:0C:57:93:4D:E5:A2:18:96:C7:CB:C6:85:1C:74
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 4F283FBEDA80593C8B467BDAE6DE385EEBC29768
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e322e302f32332d3332203d3e203530303639.roa
Signing time: Thu 25 Jun 2026 14:11:54 +0000
ROA not before: Thu 25 Jun 2026 14:06:54 +0000
ROA not after: Thu 24 Jun 2027 14:11:54 +0000
asID: 50069
IP address blocks: 201.4.2.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:28:3f:be:da:80:59:3c:8b:46:7b:da:e6:de:38:5e:eb:c2:97:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:06:54 2026 GMT
Not After : Jun 24 14:11:54 2027 GMT
Subject: CN=2045B283FCB00C57934DE5A21896C7CBC6851C74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9b:16:19:74:71:86:51:39:57:8b:1f:0c:c6:
97:46:eb:6c:ef:82:95:b6:41:ab:11:7a:80:52:2a:
30:56:c8:6f:1c:f7:ca:77:d8:6c:12:a1:75:fb:67:
8b:ef:32:9b:2b:f9:c9:3c:a1:b7:e4:7e:99:5b:f1:
84:71:10:f1:5c:c8:53:2d:08:d7:83:60:4e:c4:dc:
74:70:36:f3:b0:9f:cd:6c:e4:22:40:6c:1f:dc:c5:
0a:f6:78:ca:15:82:af:21:a5:40:47:c0:a1:3a:da:
08:dc:c4:e7:93:89:23:5a:ea:30:51:59:95:67:33:
be:54:37:79:94:96:9d:cb:34:88:17:66:1d:7b:09:
a7:38:90:6d:13:87:39:dc:85:06:9c:91:48:69:4f:
d0:6e:46:0f:aa:d3:23:1d:14:8c:aa:9e:d9:b6:a6:
74:ee:42:10:91:a0:8e:b3:63:97:7a:f3:27:35:57:
31:87:8c:9f:f0:bd:4d:99:45:34:52:a1:9c:c2:db:
ce:f8:f6:b1:0d:d3:e1:74:ea:ea:5f:50:7d:0b:75:
e9:4e:95:6a:84:ca:8b:4d:e1:40:57:66:cb:a6:5b:
1d:55:5d:ff:94:eb:44:5b:08:02:8b:7b:a6:ec:8f:
21:43:d8:78:7a:be:c9:c7:63:9e:2a:06:2c:1c:14:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:45:B2:83:FC:B0:0C:57:93:4D:E5:A2:18:96:C7:CB:C6:85:1C:74
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e322e302f32332d3332203d3e203530303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.2.0/23
Signature Algorithm: sha256WithRSAEncryption
34:89:3f:27:f9:11:63:bf:5f:92:75:1c:13:04:43:8e:f0:f9:
c6:ce:ba:86:c0:07:fa:3a:d5:c7:7b:a8:62:cc:c2:07:e3:1d:
e1:08:27:27:90:ad:e2:5b:bb:16:a8:7b:6a:87:f7:ae:eb:6a:
b5:07:ea:e6:fa:d4:0c:f6:67:78:db:ee:de:f9:55:42:b0:11:
33:5d:be:49:cd:1c:dd:c4:2e:f9:d0:22:63:da:a5:2f:14:db:
20:3e:2c:1e:65:45:17:66:6f:62:ac:7f:28:e0:3c:7f:68:f9:
34:2e:53:1f:75:ce:26:89:a5:3b:ab:ee:70:e8:f2:7d:90:cc:
e3:7f:32:1b:9b:24:f7:a7:6c:a1:a3:eb:c4:2e:18:ac:8c:24:
3d:9f:54:f0:a8:3c:00:28:9e:fb:97:d5:28:be:70:95:a5:1f:
8f:b1:f2:91:f9:7c:ea:11:76:43:0e:91:02:e1:1a:72:bc:ba:
5a:4c:f7:bc:b0:cd:93:5c:d1:37:eb:01:1f:b8:ce:d4:c6:47:
3f:a4:5e:1a:a1:fd:c5:96:a1:bb:f7:c4:c4:43:b1:7f:ca:42:
55:97:32:44:3d:31:98:74:73:32:da:9d:84:0b:4f:b4:c0:b4:
56:49:76:66:af:2a:45:0b:2e:73:6f:fa:83:b7:bd:2f:5d:ed:
d0:3e:46:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:32:32 2026 by rpki-client