Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2033323134.roa
File: 3230312e342e33322e302f31392d3234203d3e2033323134.roa (raw, json)
Hash identifier: SsQsQzEq0L3GGmsKtZb8LdJQhE+BLoZiPiDYDJ94VcM=
Subject key identifier: DB:14:CE:BE:93:BB:4F:9D:4D:D2:D1:71:E2:38:22:4B:AD:3F:E1:84
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 1033756E5674893BDC35042B880581F021DCA749
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2033323134.roa
Signing time: Thu 25 Jun 2026 14:18:44 +0000
ROA not before: Thu 25 Jun 2026 14:13:44 +0000
ROA not after: Thu 24 Jun 2027 14:18:44 +0000
asID: 3214
IP address blocks: 201.4.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:33:75:6e:56:74:89:3b:dc:35:04:2b:88:05:81:f0:21:dc:a7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:13:44 2026 GMT
Not After : Jun 24 14:18:44 2027 GMT
Subject: CN=DB14CEBE93BB4F9D4DD2D171E238224BAD3FE184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:08:fe:9f:10:b0:f7:70:6d:09:e3:99:e2:
50:ce:6b:21:5b:ac:54:61:83:2f:8e:22:6b:44:a1:
1b:3c:78:ed:aa:24:bb:b1:2f:93:25:bd:10:bc:5a:
40:51:9c:f4:61:2b:3c:31:3d:c4:da:12:3f:3b:dc:
6b:09:d2:a7:7d:3c:ae:70:26:b8:ca:d9:7a:d0:24:
91:73:9c:4a:3a:52:68:34:63:09:36:9e:38:a8:28:
3c:0e:c8:3d:a4:0f:17:c6:48:60:b1:55:24:c5:70:
3b:fc:af:b0:a0:d3:30:5a:2a:f3:27:25:d9:cc:90:
99:a5:a4:9a:54:4f:19:de:87:b9:70:ab:8a:14:01:
12:cc:69:26:f9:90:a8:6d:99:80:f6:1d:b2:0d:44:
a8:72:fd:b9:fe:16:8e:9b:fa:6a:5b:cc:9a:31:7c:
68:16:cb:08:0f:a3:d0:a5:fd:67:5f:ae:89:c0:f6:
06:69:df:fd:51:e1:03:15:d4:94:50:df:63:0a:7e:
93:57:66:0f:03:19:0d:9c:e4:fd:e3:7c:9c:8e:52:
ee:5e:33:b8:17:11:6b:93:a3:70:68:4f:ff:a3:67:
b4:04:f7:0e:88:b2:f2:6e:75:5a:36:5c:03:ae:eb:
17:8c:95:1c:6c:ee:59:a2:78:78:85:3e:4a:a3:d9:
e7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:14:CE:BE:93:BB:4F:9D:4D:D2:D1:71:E2:38:22:4B:AD:3F:E1:84
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.32.0/19
Signature Algorithm: sha256WithRSAEncryption
52:e1:a9:17:e0:05:42:36:d5:e2:92:1b:5c:9e:bc:91:d2:ba:
18:47:07:1c:cb:0d:09:10:59:c6:28:24:76:86:0b:15:34:61:
e9:f4:6b:b7:0c:25:9b:36:01:66:6f:85:f5:a2:b5:b8:e4:d0:
54:bf:03:15:df:08:20:87:90:2a:df:22:c6:0f:8d:75:02:4f:
da:6f:86:b2:ba:9b:d4:8b:84:16:62:6c:b5:d7:54:9b:02:ef:
5a:bc:1e:ff:b5:2c:0f:3d:b6:3a:fb:54:12:74:e7:25:7e:d8:
14:76:11:12:1c:78:8a:90:b7:0d:15:dc:7a:c2:1d:bd:e1:0e:
2f:2b:91:89:c4:71:78:e7:ee:15:34:81:3a:64:1d:2e:f2:dc:
92:8b:78:32:57:d6:bd:5f:42:ad:8b:42:9f:f3:2a:5c:c2:22:
3e:8b:aa:2d:34:c0:0e:ff:9a:25:e5:72:f3:0c:d1:44:a3:0d:
0d:3a:8d:3e:a7:f4:bc:af:e3:67:cf:f3:b2:d5:0f:e2:bb:3a:
0a:51:96:4e:26:77:cc:47:74:02:d1:05:12:61:bc:14:59:0e:
c6:eb:d9:6b:5c:11:61:89:9b:d7:e8:ed:c9:f1:48:8a:36:27:
57:02:5d:a1:b5:ab:46:4e:5f:23:ba:e8:4e:b6:67:8b:b4:b8:
4b:e1:fb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:32:28 2026 by rpki-client