Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e352e302f32342d3332203d3e203530303639.roa
File: 3230312e342e352e302f32342d3332203d3e203530303639.roa (raw, json)
Hash identifier: vmrTCXOH450MWj2XHL3rGNazJ9eITzwjq+fOKm3KW6k=
Subject key identifier: 37:7E:DA:92:B0:E5:CC:85:C9:8E:33:95:21:FD:D0:E4:31:E7:15:D1
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 5CA2CAB2B14F446411DA8AB1BDB8026BEDA05501
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e352e302f32342d3332203d3e203530303639.roa
Signing time: Thu 25 Jun 2026 14:12:38 +0000
ROA not before: Thu 25 Jun 2026 14:07:38 +0000
ROA not after: Thu 24 Jun 2027 14:12:38 +0000
asID: 50069
IP address blocks: 201.4.5.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a2:ca:b2:b1:4f:44:64:11:da:8a:b1:bd:b8:02:6b:ed:a0:55:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:07:38 2026 GMT
Not After : Jun 24 14:12:38 2027 GMT
Subject: CN=377EDA92B0E5CC85C98E339521FDD0E431E715D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a1:db:fe:46:6b:db:96:c4:b0:d7:cb:58:4f:
9c:48:9e:bb:25:94:e3:ec:6a:4f:17:f5:27:4a:59:
c6:9d:e9:8b:a2:42:70:8b:66:4a:31:fc:5d:f5:4d:
d8:a8:db:61:4d:3c:db:00:31:c4:84:31:0b:da:cb:
5e:19:91:94:64:bd:ab:59:0a:4e:4d:77:0d:17:a0:
94:f8:a2:b5:a0:dc:78:8c:19:1c:87:62:73:d0:81:
4f:ee:c5:88:bc:dd:2a:3a:90:bf:84:fa:2d:ff:f7:
9a:6e:65:50:6c:fb:7b:91:d0:eb:d0:47:72:95:bb:
c9:1e:64:a7:e0:83:75:b6:b5:3c:7e:c0:c8:cc:3c:
49:71:3d:6f:86:8c:af:8e:70:a5:56:b7:b2:cd:03:
86:88:32:0d:06:c1:37:2d:85:46:ce:4d:99:cb:8d:
bd:62:e9:c1:33:f2:5c:2a:74:31:79:cc:06:53:15:
ab:03:3e:c9:0c:ad:fd:7a:87:51:6d:78:5c:c0:65:
c8:d3:23:14:5b:56:e3:be:f0:5e:87:c7:35:ee:84:
b6:6e:67:ab:25:c5:aa:01:7a:e4:7b:cf:78:8e:2f:
21:5c:82:d8:19:95:55:19:03:7e:a8:4b:4d:78:5f:
8e:c7:d1:22:a4:0f:c2:d3:65:05:13:64:9d:32:eb:
23:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7E:DA:92:B0:E5:CC:85:C9:8E:33:95:21:FD:D0:E4:31:E7:15:D1
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e352e302f32342d3332203d3e203530303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.5.0/24
Signature Algorithm: sha256WithRSAEncryption
60:b7:93:01:d5:25:3e:db:76:a5:5f:dc:1d:9f:8d:0f:f9:1e:
a3:40:6c:55:8d:dd:a3:fc:9a:31:4d:a5:50:a2:b9:c9:6c:3b:
7e:c3:1b:fc:ea:0a:77:db:f1:20:23:e1:26:3e:70:61:43:c5:
a0:0e:59:1b:81:11:96:cd:e0:03:91:ec:07:b2:b0:59:1b:a6:
91:be:c3:45:c4:ef:d3:32:c6:82:7c:2f:c8:fc:0e:b5:b9:76:
fc:2e:11:51:c7:70:6e:a7:11:7b:8d:25:5d:cf:97:38:fd:d5:
8a:ab:4c:13:20:c6:5a:67:3c:73:cc:a6:eb:7d:bf:74:49:c9:
d2:88:93:97:45:95:ce:c4:38:0b:be:99:82:84:19:cc:b1:1f:
2d:e1:92:c8:a9:d2:6b:a5:35:ee:59:26:60:dc:fd:4b:dc:64:
b3:95:80:49:3b:bd:cc:2d:69:8d:c3:c3:1a:7a:a7:d0:66:36:
eb:ef:51:11:a2:4b:ea:68:2f:6c:96:70:86:af:8c:e7:11:1a:
d1:5d:06:13:9d:75:5d:56:77:de:30:3d:df:2a:89:4a:92:63:
bd:e2:17:fa:be:a8:fb:e8:fa:9b:11:15:c5:8b:75:ab:9c:89:
7b:b4:42:df:7b:87:14:e5:32:4f:f7:57:50:3a:d0:21:e5:b3:
2e:2a:38:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:32:11 2026 by rpki-client