Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2038383838.roa
File: 3230312e342e33322e302f31392d3234203d3e2038383838.roa (raw, json)
Hash identifier: pVbnB+Tzmfg9lko8osiSjt3IxhdyWkPbC3CubUU/TNk=
Subject key identifier: 1F:FF:3F:07:F6:72:47:F0:D0:60:A4:E8:49:D6:51:8F:9D:C3:CE:13
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 413ECD45A4ADE85C7B43FCEA764C1CB29F6FE13A
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2038383838.roa
Signing time: Thu 25 Jun 2026 14:20:37 +0000
ROA not before: Thu 25 Jun 2026 14:15:37 +0000
ROA not after: Thu 24 Jun 2027 14:20:37 +0000
asID: 8888
IP address blocks: 201.4.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:3e:cd:45:a4:ad:e8:5c:7b:43:fc:ea:76:4c:1c:b2:9f:6f:e1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:15:37 2026 GMT
Not After : Jun 24 14:20:37 2027 GMT
Subject: CN=1FFF3F07F67247F0D060A4E849D6518F9DC3CE13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:f5:a8:b8:04:fd:c3:6a:69:30:cb:6f:a4:
90:00:dc:0c:c0:86:2f:09:51:dd:d4:c2:1e:e5:66:
22:fa:54:d7:eb:5c:af:a1:e1:e4:af:f7:11:38:10:
03:6c:c4:ee:34:80:69:dc:47:84:cf:9e:c0:e2:58:
34:13:f2:cf:ea:ab:46:c9:96:03:87:f7:4a:77:89:
76:0a:c2:0c:e2:83:e6:28:bd:f7:3c:a9:1d:a5:3d:
14:2b:88:7e:59:07:79:91:69:ec:bb:90:67:91:7b:
c9:a1:e8:39:61:ab:9f:44:e2:c8:2e:14:91:42:72:
63:00:11:81:e5:eb:ae:ce:eb:ea:31:2e:50:88:1b:
84:bf:1c:11:6a:8c:e5:b7:d0:8c:08:60:2e:bb:e5:
ca:29:fe:ac:52:41:40:ef:d3:7c:2d:34:2b:ba:5e:
c3:c2:fc:23:a3:2d:80:41:03:16:3a:41:0d:96:10:
14:a2:4c:68:6e:ab:16:86:af:af:27:3d:bb:ea:8f:
2e:0e:bd:0c:80:33:60:df:e4:1a:78:2c:d4:67:02:
65:d0:8c:05:f6:0e:86:4b:29:6d:94:70:5b:f9:1b:
c0:45:a0:ce:da:b8:ea:29:df:ee:3c:32:07:bc:92:
20:c3:03:76:0e:8a:15:73:e4:13:90:7f:f5:4b:8a:
fb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FF:3F:07:F6:72:47:F0:D0:60:A4:E8:49:D6:51:8F:9D:C3:CE:13
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.32.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:ae:24:9d:2b:2d:20:d1:75:b0:bf:33:0a:fa:3a:0f:72:fa:
61:8d:1c:9f:8b:8a:2e:81:e1:37:d5:fd:84:04:b8:4e:aa:be:
06:41:53:1d:d2:88:cc:b5:e3:49:d0:33:b7:ec:12:be:ed:7c:
c2:04:94:76:9e:5e:a9:28:11:38:29:73:5d:1c:09:c8:41:54:
e3:5a:69:f3:97:46:49:ca:b5:5d:4f:7b:86:74:4d:99:69:ec:
02:fc:e1:63:97:34:c2:70:ba:9d:0a:29:49:b8:0d:3a:b4:62:
94:b6:c3:67:fe:3f:f3:66:2c:98:b0:b0:23:8a:e9:4f:36:11:
b0:07:75:af:64:69:e9:83:58:2c:d8:74:fd:cc:18:dc:f6:26:
97:ee:d8:3d:18:52:ec:ff:de:c8:75:b4:00:d9:4d:f9:68:6e:
94:8b:e4:25:9f:17:d3:f1:4e:d6:04:15:af:82:52:c4:cd:8f:
ae:7c:d4:e7:2b:6f:13:74:94:75:91:78:cf:1a:ef:cc:91:4b:
c4:fc:f5:ee:8f:cb:62:8e:19:5a:f1:82:c1:b7:b3:80:5c:27:
80:87:82:3e:38:9d:9c:52:2e:62:f4:f5:68:67:d2:df:00:5a:
36:48:ad:18:1c:02:61:0c:06:bf:7b:d4:83:af:93:fb:32:83:
2d:6a:3b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:32:09 2026 by rpki-client