Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2033323538.roa
File: 3230312e342e33322e302f31392d3234203d3e2033323538.roa (raw, json)
Hash identifier: kKkIi2Njog5VZa3Vp/CGjMvKk276qvFmwbcVpof928s=
Subject key identifier: 1D:D7:CE:F2:C1:85:77:D0:B1:F2:60:99:BA:18:FB:86:A6:B5:7B:82
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 414FC271A86F38ADEE2F9447F0D9DD658193D3DA
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2033323538.roa
Signing time: Thu 25 Jun 2026 14:19:28 +0000
ROA not before: Thu 25 Jun 2026 14:14:28 +0000
ROA not after: Thu 24 Jun 2027 14:19:28 +0000
asID: 3258
IP address blocks: 201.4.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:4f:c2:71:a8:6f:38:ad:ee:2f:94:47:f0:d9:dd:65:81:93:d3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:14:28 2026 GMT
Not After : Jun 24 14:19:28 2027 GMT
Subject: CN=1DD7CEF2C18577D0B1F26099BA18FB86A6B57B82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:98:05:53:73:13:03:93:bb:88:d6:85:97:
b0:3c:11:1d:5b:ba:a2:ed:af:bf:a6:e4:78:d3:14:
9e:d7:0c:84:c8:52:b6:38:66:36:b4:1a:a4:2c:03:
e3:22:53:ae:d8:9b:a6:1f:d8:8e:79:cb:bb:79:6b:
1c:c9:16:80:79:88:7b:48:0c:d6:8f:71:63:a1:14:
ed:6d:7a:8a:82:37:25:f0:44:e6:f9:71:2c:c0:5c:
25:43:31:ae:af:16:8a:f4:42:df:d7:ab:17:35:7f:
4d:2c:9e:ab:47:e5:e2:23:9a:40:77:95:d0:59:fb:
7f:4e:00:e6:bb:5d:28:f4:61:b7:df:fd:d6:fe:c5:
67:4c:d5:92:52:cd:bb:96:c3:27:61:65:54:f2:04:
19:55:49:f1:75:a6:f0:f8:a7:49:34:48:a9:ca:ce:
df:d9:46:6e:6c:8d:3d:37:5f:ff:45:53:a8:06:30:
80:e9:24:36:e9:d1:92:b9:8a:f2:e1:4a:72:35:da:
e8:be:97:56:6b:e8:67:9c:cb:8b:ce:44:ed:09:55:
ee:c6:a5:63:af:85:99:2f:0f:ca:c9:a9:b8:27:64:
1a:53:2a:46:f2:78:bf:e8:c1:7a:64:5c:2a:57:f4:
17:65:b7:ec:9b:73:4e:19:5e:32:db:18:63:66:9a:
21:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D7:CE:F2:C1:85:77:D0:B1:F2:60:99:BA:18:FB:86:A6:B5:7B:82
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2033323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:58:64:e5:a2:76:3d:1c:da:0b:90:c7:7e:54:e5:24:cd:7b:
9b:8f:a9:e3:9b:d2:b4:20:08:3a:6e:36:10:32:ed:93:d3:aa:
92:88:63:6f:a3:e9:48:59:db:91:71:a5:02:a1:5b:3e:4a:2b:
05:71:c4:d8:51:85:e6:5c:c7:5e:c1:a7:cd:ee:7f:20:02:57:
e0:3a:06:82:59:dc:e8:1b:26:42:73:e3:dd:35:65:77:0a:ef:
a2:9e:78:5b:dd:fa:42:96:e7:0a:1b:bf:6e:a4:9f:e7:99:ab:
55:18:9b:8b:dc:c9:aa:0a:99:03:13:49:4c:0a:f6:f2:0e:23:
36:97:f9:58:53:f4:6c:fd:f7:2a:a2:b1:08:ae:f2:2c:fb:5f:
d4:92:05:6c:22:c7:04:53:26:82:a7:9c:6f:6f:5e:ec:4d:3f:
72:ff:10:51:57:74:d9:d1:ed:90:ce:b6:41:f9:14:9b:7f:46:
c9:34:19:d5:dc:de:5b:11:d3:ff:c1:65:64:53:17:a7:6e:8e:
0f:62:e7:af:fe:3c:e5:c7:0c:ea:a1:17:2d:d4:67:b8:47:ca:
76:17:33:61:86:16:f1:fb:24:33:93:b2:31:bb:d9:f9:ee:2a:
a9:02:91:ae:cd:2c:15:3b:cb:fc:da:6d:07:d7:aa:3b:cc:5c:
d2:67:52:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:32:40 2026 by rpki-client