Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e382e302f32312d3332203d3e203233393631.roa
File: 3230312e342e382e302f32312d3332203d3e203233393631.roa (raw, json)
Hash identifier: AM3V8s/Q7tdl3XMe//qvhvUIDuaqxoXnYQqOe4Kgqww=
Subject key identifier: 8B:A2:98:8F:DF:64:AC:59:90:C7:64:13:00:89:4F:0A:FE:2C:70:E8
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 49DBB9E9A90F39756FAC4088082B073D6F84FF4E
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e382e302f32312d3332203d3e203233393631.roa
Signing time: Thu 25 Jun 2026 14:13:29 +0000
ROA not before: Thu 25 Jun 2026 14:08:29 +0000
ROA not after: Thu 24 Jun 2027 14:13:29 +0000
asID: 23961
IP address blocks: 201.4.8.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:db:b9:e9:a9:0f:39:75:6f:ac:40:88:08:2b:07:3d:6f:84:ff:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:08:29 2026 GMT
Not After : Jun 24 14:13:29 2027 GMT
Subject: CN=8BA2988FDF64AC5990C7641300894F0AFE2C70E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:33:52:0c:9f:64:46:cd:e3:d9:cd:69:e7:22:
68:1a:eb:89:3d:d2:ad:14:9d:0d:bc:ea:c4:1e:a2:
19:f5:fd:0a:7b:ee:dc:1a:70:3c:0d:41:fe:c2:ca:
4e:e0:84:96:7d:18:d0:07:df:df:09:6f:33:85:5d:
b6:3f:23:f3:6b:22:1e:5b:4b:12:cf:75:44:e5:e0:
d7:9a:26:b5:c1:38:d3:2f:f3:84:b0:e8:0b:d0:75:
74:ab:2a:34:30:9f:ce:f2:09:c4:55:05:0a:e1:31:
cb:1f:52:a9:8a:14:19:8b:de:9a:29:c8:2e:1a:44:
c4:e2:bd:59:a3:07:9a:6f:8e:b7:f9:dd:6a:88:8a:
51:4e:61:24:21:f1:c6:3a:8b:5f:0c:33:25:77:55:
05:7c:87:b1:e3:b2:6e:65:4a:23:39:ca:33:d4:6f:
29:b3:d0:e9:8a:b0:16:9d:f2:e6:05:31:3f:7f:20:
53:4b:6e:f9:0b:07:15:70:e7:79:2f:78:6e:41:16:
97:18:bc:49:e7:dd:f1:8f:e9:62:b9:98:ae:67:5b:
3e:b3:73:76:68:47:f7:3c:4f:a1:60:c4:92:ce:a3:
c2:8b:c2:60:c4:b1:9c:19:97:39:03:31:c2:7b:d0:
09:f0:e1:35:09:ec:bd:15:0e:65:e8:68:04:ca:38:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A2:98:8F:DF:64:AC:59:90:C7:64:13:00:89:4F:0A:FE:2C:70:E8
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e382e302f32312d3332203d3e203233393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.8.0/21
Signature Algorithm: sha256WithRSAEncryption
02:ad:b4:0f:fd:4f:a9:a4:5e:34:8f:8a:fa:8f:c4:7b:23:4e:
10:dc:e6:be:fa:23:7c:3d:06:a8:57:62:d5:ab:5e:f8:6e:22:
61:55:73:f8:c0:b3:46:a2:ed:24:63:83:eb:6e:54:25:d2:97:
42:db:cb:48:b9:77:44:d7:28:a3:82:ea:ab:ca:c1:f0:76:c0:
2e:b4:b6:fe:b3:a8:7f:31:29:24:b0:f0:36:8a:c1:a8:68:d8:
3a:e2:b4:8b:0a:36:9f:08:3d:07:30:ff:3b:73:d2:0e:c1:7d:
71:bf:f8:85:87:10:7c:e3:62:58:af:db:5b:4c:f8:8c:af:30:
2d:6c:65:f2:36:13:fd:69:0a:8c:37:fd:d5:7c:9a:2b:70:cf:
a1:72:66:e4:28:70:01:76:e2:60:67:60:c3:28:00:d4:6c:2f:
b6:d1:3b:b1:5b:e2:0c:66:dc:f0:42:d5:0e:01:6d:d2:3a:e3:
95:ea:d1:73:59:38:c1:27:91:eb:a3:14:df:a7:05:2e:49:9b:
b1:1f:94:1d:4a:37:90:12:e5:32:96:2a:18:a0:99:b7:91:6c:
e9:fe:e5:d2:a8:04:10:dc:69:b4:fc:48:6a:37:39:1d:f5:1d:
35:d1:8f:73:98:56:75:92:1c:36:1c:85:80:06:a2:79:f0:d4:
c2:70:03:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:34:14 2026 by rpki-client