Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2034373835.roa
File: 3230312e342e33322e302f31392d3234203d3e2034373835.roa (raw, json)
Hash identifier: Og7W6A868ofxtzlUfpG0Deju6pAIcPXK00px8nDGWGA=
Subject key identifier: EF:BD:03:D5:E5:30:9A:E8:BD:27:0A:19:A6:96:22:D3:58:71:FD:34
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 029981AF0FC68BB604FADDF67FFB528D138C1E7E
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2034373835.roa
Signing time: Thu 25 Jun 2026 14:19:47 +0000
ROA not before: Thu 25 Jun 2026 14:14:47 +0000
ROA not after: Thu 24 Jun 2027 14:19:47 +0000
asID: 4785
IP address blocks: 201.4.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:99:81:af:0f:c6:8b:b6:04:fa:dd:f6:7f:fb:52:8d:13:8c:1e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:14:47 2026 GMT
Not After : Jun 24 14:19:47 2027 GMT
Subject: CN=EFBD03D5E5309AE8BD270A19A69622D35871FD34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ae:52:74:c0:5e:e2:d6:89:a9:fc:b0:8a:22:
8f:3d:57:08:84:0b:87:e1:da:fb:ca:26:74:b0:47:
37:a4:21:08:62:80:0d:d3:b3:8a:16:4e:d7:95:20:
91:34:77:61:f4:3d:3f:2a:0b:23:d8:16:13:9d:6d:
68:cf:69:e6:60:73:8d:62:d4:e6:58:1c:41:3f:3a:
7f:6b:52:5b:a9:07:d1:87:d3:50:d1:b3:38:cd:d8:
c4:a6:6c:61:df:5c:51:41:39:0f:bf:4c:0b:32:ae:
18:26:63:92:69:b2:0e:d8:3f:ed:2a:e8:79:03:a7:
00:73:cc:56:8e:34:ab:df:25:a6:23:49:7a:99:e4:
69:26:9e:11:1c:5f:6f:21:6e:e7:fe:85:58:f3:4e:
8e:8e:92:3d:07:1e:99:5c:75:6e:a1:49:77:3a:5c:
99:ba:83:cb:6e:4e:85:c2:e4:69:9c:c2:ec:0a:c0:
d1:b4:da:42:34:c5:19:2f:3e:e8:2a:7e:63:b8:5c:
81:a0:33:66:af:bf:95:cf:fa:8d:02:05:98:4a:29:
e2:67:3c:23:26:47:2e:f1:5d:b9:8e:57:d9:eb:94:
a7:57:15:e8:17:29:1c:d3:d6:9a:47:11:08:b9:6c:
5e:81:51:71:2d:bb:9a:4e:11:e1:33:bf:a0:15:c6:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BD:03:D5:E5:30:9A:E8:BD:27:0A:19:A6:96:22:D3:58:71:FD:34
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2034373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.32.0/19
Signature Algorithm: sha256WithRSAEncryption
aa:ba:a7:e2:9c:75:4a:6e:61:35:8c:6f:32:88:d5:29:d0:cc:
c0:b6:56:a6:4f:35:3b:3c:24:b9:20:01:ad:c5:60:3d:0a:79:
a1:ea:3e:c0:4d:2d:9e:60:59:fb:de:f2:a3:45:ed:20:68:47:
f9:18:50:b2:e9:75:7c:1e:e5:5f:a6:c0:1a:51:17:a7:9d:fc:
e8:99:95:f9:f3:a0:a4:5c:c7:98:77:71:a6:f6:d9:52:2a:e0:
9a:41:34:03:78:24:53:ca:8a:91:c2:76:bd:4c:20:3a:02:6e:
9b:2f:ed:b3:df:57:da:a5:70:57:21:38:de:4a:8a:de:52:77:
ba:10:ed:6b:ca:6e:3b:7d:0d:79:90:27:46:94:9e:33:8d:d9:
23:59:c6:f6:53:ac:a7:0f:c5:42:ea:82:c9:88:e3:ed:08:d9:
0a:16:d9:bb:06:7f:ec:2f:21:2a:d6:95:40:4a:3f:e2:25:fe:
0b:f1:70:e3:b6:1e:7b:1a:ee:e7:5a:c3:93:e9:3c:6b:08:b9:
ed:d2:e3:1d:8f:12:f3:a1:11:b2:57:a4:6b:a6:14:3d:8b:74:
b0:7e:8f:a9:a4:39:03:96:84:23:70:72:e5:da:11:eb:11:41:
fd:c6:aa:79:c2:75:32:e6:8e:8c:dd:2b:87:cc:44:6c:51:d6:
45:00:01:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:31:59 2026 by rpki-client