Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e362e302f32332d3332203d3e203233393631.roa
File: 3230312e342e362e302f32332d3332203d3e203233393631.roa (raw, json)
Hash identifier: euZy+waqyb60SlnuetnVVgoAbyBQ93XmRCTGN8lEWCU=
Subject key identifier: 39:05:CD:A0:57:26:86:1B:81:75:20:58:63:CE:B2:42:31:82:2E:45
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 093A1EB2D871CBC82E1B0BEFA6B6EA89348B5DCE
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e362e302f32332d3332203d3e203233393631.roa
Signing time: Thu 25 Jun 2026 14:13:11 +0000
ROA not before: Thu 25 Jun 2026 14:08:11 +0000
ROA not after: Thu 24 Jun 2027 14:13:11 +0000
asID: 23961
IP address blocks: 201.4.6.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:3a:1e:b2:d8:71:cb:c8:2e:1b:0b:ef:a6:b6:ea:89:34:8b:5d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:08:11 2026 GMT
Not After : Jun 24 14:13:11 2027 GMT
Subject: CN=3905CDA05726861B8175205863CEB24231822E45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:d9:10:8f:65:f8:73:e8:67:fc:03:d7:05:
30:19:32:42:51:38:f6:78:a2:3a:62:74:36:ab:a0:
a7:1b:2b:d5:95:70:6d:b3:a0:0d:52:80:f3:af:9b:
87:c1:7c:43:db:0a:5e:0f:42:00:6c:ef:a5:eb:e0:
ba:36:4a:3a:7f:97:d2:60:9e:5b:8d:5a:6a:f2:72:
e3:79:36:31:d8:a7:da:30:4e:1b:3e:d1:23:9a:c0:
e8:3f:9f:1a:25:ab:95:e5:d5:03:3d:a9:f3:30:39:
20:20:b2:9d:83:27:ab:a6:e2:ed:4c:9f:2f:36:d2:
93:0a:76:8b:28:61:47:69:c9:2b:ea:ff:c6:0c:63:
03:7d:c8:ac:d4:17:53:2e:80:1a:7a:67:d1:08:90:
83:ca:a0:4b:12:93:94:d8:af:22:11:9b:18:60:5d:
a0:fe:21:fc:b9:d4:92:ba:63:31:9c:16:9e:5b:aa:
47:e6:42:35:60:15:08:4b:d2:b6:98:1e:8a:5b:c4:
d7:1a:fe:40:c8:e6:e6:27:1f:67:d2:46:18:9c:ed:
07:84:93:15:a4:62:4d:50:1f:9b:c4:17:b6:2e:a1:
ac:33:50:2e:59:7f:1d:34:dc:33:ed:41:6f:07:f5:
20:7b:66:32:84:d3:40:d4:da:e5:44:dc:f1:e3:72:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:05:CD:A0:57:26:86:1B:81:75:20:58:63:CE:B2:42:31:82:2E:45
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e362e302f32332d3332203d3e203233393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.6.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:11:69:2c:90:ea:49:be:fa:90:b9:fc:1b:c8:1a:0c:2b:75:
5d:9b:e0:31:6c:2a:44:61:31:ff:d4:5a:4b:d0:88:4c:4f:89:
0f:b6:d8:ab:37:e1:04:a0:eb:4f:65:20:9c:6a:6a:a2:ce:40:
3a:b3:9d:43:1b:5b:94:da:15:24:26:e3:59:5d:16:7d:4b:6c:
2c:bb:a3:a5:9e:8e:73:fe:6c:06:a3:ce:02:c1:86:f1:62:69:
d2:1a:be:00:fd:6e:9e:12:5d:49:7c:99:dd:a9:bb:7f:0a:41:
d2:20:54:ef:80:dd:2b:37:66:c7:f9:94:aa:e2:e5:64:a8:72:
c8:c4:f0:1c:42:6e:38:ee:ff:47:99:c2:1d:86:9e:bc:d0:82:
d3:ef:8c:e5:8d:93:fe:fe:ea:8d:3d:ea:0c:3f:ac:dd:d2:4c:
76:1a:a7:91:70:88:3b:61:bc:d2:c9:d9:0e:08:e1:0b:3a:e5:
65:80:af:bf:9b:56:8c:b1:a2:29:14:53:cd:08:29:71:8b:97:
4f:24:c5:20:87:48:80:a4:94:19:86:7c:4e:23:99:27:25:e9:
8a:d0:25:d7:ea:de:99:1e:c6:8a:a4:ce:9a:5a:93:9f:1d:e5:
dc:da:ee:77:fb:16:f9:31:da:28:9f:14:fe:e4:4d:7a:0a:26:
98:c1:98:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:33:46 2026 by rpki-client