Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2039333132.roa
File: 3230312e342e33322e302f31392d3234203d3e2039333132.roa (raw, json)
Hash identifier: STgFL7liLsO38euVZSjsMjGg1dZmBvsdMPjezZsrGus=
Subject key identifier: 04:09:20:7A:D3:A0:41:EC:27:F0:F0:34:27:CA:A6:72:B8:8F:3F:26
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 5BAF96BE1627AE10EB36B60526E1B24931AC0BDD
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2039333132.roa
Signing time: Thu 25 Jun 2026 14:20:56 +0000
ROA not before: Thu 25 Jun 2026 14:15:56 +0000
ROA not after: Thu 24 Jun 2027 14:20:56 +0000
asID: 9312
IP address blocks: 201.4.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:af:96:be:16:27:ae:10:eb:36:b6:05:26:e1:b2:49:31:ac:0b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:15:56 2026 GMT
Not After : Jun 24 14:20:56 2027 GMT
Subject: CN=0409207AD3A041EC27F0F03427CAA672B88F3F26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:96:3d:10:52:be:62:4e:f1:de:57:70:d3:
a5:68:a2:56:f1:c9:c1:56:e6:1d:47:0b:f4:04:1c:
cc:8a:11:66:0a:7a:07:5f:8f:e8:ba:bd:f2:f3:46:
63:fb:ce:6e:f7:da:5c:58:32:46:07:2b:65:38:b9:
c6:9c:73:ea:e9:7c:d3:6b:cc:ae:cf:72:6a:2f:05:
1d:ba:fa:9d:3a:c3:76:8b:7b:04:95:91:ae:77:8a:
a4:0d:5d:e7:0b:ce:23:d9:88:76:3d:98:1f:8c:7a:
d2:db:76:48:7e:48:6e:97:ea:2f:6e:47:f3:d4:d2:
24:37:8f:64:9e:24:52:38:f4:15:9a:3d:e7:7b:c2:
bf:6b:ef:be:6b:f9:e7:72:d0:b8:40:aa:11:d3:6e:
23:33:f6:3c:b4:0a:9a:61:76:3e:93:f0:92:19:c2:
d8:4e:02:c3:fc:11:ae:39:61:3a:e5:5a:a1:27:48:
cc:a4:8e:6d:4d:8e:01:da:92:af:ff:47:7c:8a:bc:
e4:49:54:8a:98:25:04:4f:98:e2:92:f4:98:ac:de:
79:22:a5:3f:3c:e3:99:af:91:67:ce:29:80:81:6b:
52:80:24:1f:1f:9d:63:b9:07:f9:fd:95:60:80:47:
ac:32:72:77:b8:29:e9:49:84:ae:c9:8c:88:8e:0a:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:09:20:7A:D3:A0:41:EC:27:F0:F0:34:27:CA:A6:72:B8:8F:3F:26
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2039333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.32.0/19
Signature Algorithm: sha256WithRSAEncryption
84:68:0d:ff:af:24:5b:88:36:e2:07:a9:49:60:a1:b1:93:18:
06:10:ed:6d:e7:c9:06:6e:24:7f:34:57:45:24:a5:7e:2c:e4:
88:cb:6f:f7:72:71:aa:f9:db:64:ce:f8:c4:e2:84:34:f1:4e:
d5:d5:00:71:a2:1a:b9:7a:aa:f5:24:2f:1a:00:44:96:e4:c8:
8f:3d:b4:cd:26:e3:6f:5f:9e:00:c1:e5:db:89:59:39:4e:87:
7a:e0:10:ae:0b:fb:d0:93:05:36:c0:66:22:99:68:41:bb:e4:
ef:1c:13:c2:a6:2e:6a:60:95:d7:ee:33:64:53:92:87:5f:8a:
40:c2:f0:f8:67:d3:8d:eb:79:2f:f1:c8:3b:c7:b3:15:de:67:
04:9b:54:aa:48:9a:47:9f:ac:43:78:f6:d6:a1:d6:28:d4:be:
c0:56:03:34:83:06:df:00:3f:88:c3:a2:60:66:b4:d2:56:30:
0c:20:fc:5a:e2:3e:99:56:33:64:0a:6f:6d:c1:3f:d2:98:90:
90:5f:d9:66:21:e7:2d:07:07:3e:4f:ea:7b:0c:cc:64:2d:c5:
08:e3:94:56:e8:0a:7a:c9:e6:ee:38:9f:bb:5c:28:86:76:00:
34:43:e7:47:d9:20:c2:d1:f3:85:89:a4:9c:c8:dd:9b:d6:3b:
c8:48:53:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:32:41 2026 by rpki-client