Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2036323333.roa
File: 3230312e342e33322e302f31392d3234203d3e2036323333.roa (raw, json)
Hash identifier: L3ZmOGwSR4jtvYypcnGs8j+vsCTST77Kfs6e0R0lS54=
Subject key identifier: 16:83:A9:A5:92:95:36:9C:C2:C9:C8:9D:EA:61:1B:5E:FD:BB:6E:2F
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 3ACCD0DB87615D2DEE238481C46F9E316B7E27EC
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2036323333.roa
Signing time: Thu 25 Jun 2026 14:20:12 +0000
ROA not before: Thu 25 Jun 2026 14:15:12 +0000
ROA not after: Thu 24 Jun 2027 14:20:12 +0000
asID: 6233
IP address blocks: 201.4.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:cc:d0:db:87:61:5d:2d:ee:23:84:81:c4:6f:9e:31:6b:7e:27:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:15:12 2026 GMT
Not After : Jun 24 14:20:12 2027 GMT
Subject: CN=1683A9A59295369CC2C9C89DEA611B5EFDBB6E2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:a4:3e:24:48:c3:18:0b:04:57:34:eb:49:
23:0e:26:f5:2b:fd:ea:71:21:f5:01:28:ab:dc:4e:
d4:ea:c8:36:9d:af:da:ce:4d:65:40:ac:fe:2b:dc:
2a:cb:cd:c3:7e:5a:2c:60:eb:8e:0c:bf:5a:bd:86:
4c:28:ba:cd:08:44:7a:8f:76:e6:d3:10:37:91:de:
96:61:68:99:29:11:bb:ec:67:6d:9c:f1:6b:5e:cd:
d4:d9:ed:1a:2c:6f:e4:51:03:28:1d:10:39:ec:56:
18:6d:86:1d:d5:a7:20:32:09:21:02:3b:49:85:51:
7e:0d:c6:6c:86:b0:cf:49:d0:b4:ba:88:28:bd:51:
60:eb:cb:ae:7c:92:88:93:78:7d:61:d3:53:ea:c4:
92:65:a6:1e:0e:64:78:35:5b:0b:42:32:ff:1b:d4:
71:58:4f:48:be:78:1a:7e:17:06:81:39:c3:56:18:
78:1c:bc:96:b0:c6:70:c8:7f:fc:78:d9:4b:f7:19:
9a:58:8c:58:cd:d9:b6:d8:40:6c:21:c6:15:b7:25:
ed:af:da:55:03:c6:c3:69:a6:3e:25:fd:a9:81:60:
56:b9:81:8b:79:fc:e5:87:37:1b:fa:5d:7d:5b:0b:
b5:27:c2:7e:1c:03:a3:b3:77:60:51:3d:c0:08:9d:
27:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:83:A9:A5:92:95:36:9C:C2:C9:C8:9D:EA:61:1B:5E:FD:BB:6E:2F
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2036323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.32.0/19
Signature Algorithm: sha256WithRSAEncryption
89:a6:c9:21:2b:9d:bb:13:fb:d4:45:27:f6:11:a5:34:54:30:
36:88:be:c6:e6:2e:0a:9e:01:51:f7:76:04:a1:f2:80:79:7c:
33:21:30:1f:cb:20:0b:83:0b:b8:5b:bd:7d:c4:c0:86:e7:a3:
57:08:b3:25:3d:e6:37:bf:3a:f3:1b:52:ec:e4:f4:aa:8b:e6:
b3:d8:85:e3:0c:b5:5e:a3:69:31:54:43:9d:8f:87:6e:d0:e7:
40:4e:46:c0:56:39:99:ce:c4:ac:48:f9:09:28:a3:e1:7d:1a:
4f:df:ff:31:0e:de:5a:5b:06:96:89:a7:bd:d7:9f:f7:4a:bb:
d4:88:5c:1b:aa:3c:2e:15:94:38:24:a3:18:ef:2f:53:c8:bc:
43:79:ee:fa:d9:71:6b:fc:3c:63:82:7f:0e:12:0d:8d:33:3f:
2d:8f:d7:d5:4d:c1:cd:bd:36:b8:e5:a0:ac:e7:42:b2:db:6a:
70:91:34:2f:f9:cd:32:35:35:06:9b:bf:7b:16:b1:35:20:9d:
3a:f8:ef:80:14:b5:5b:27:bd:d8:93:f3:de:6d:16:14:96:98:
3f:21:0f:50:2a:ff:e0:12:a2:e4:4e:84:7e:3d:9f:19:26:a0:
57:d2:52:cb:34:03:51:08:f8:15:97:d1:06:b5:1f:6c:d0:67:
0d:46:9f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 06:23:09 2026 by rpki-client