Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e302e302f32302d3332203d3e203233393631.roa
File: 3230312e35302e302e302f32302d3332203d3e203233393631.roa (raw, json)
Hash identifier: +F1ZsAeCDkUmUatvGI29jLY4pQqbL/hYPuLOOUj/ncc=
Subject key identifier: 07:C0:58:3B:F5:F8:4A:03:F0:BF:D9:92:AB:2F:C4:28:97:23:A3:6F
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 597F5281E47FB106505DAF2E1CF23714D25D82A4
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e302e302f32302d3332203d3e203233393631.roa
Signing time: Thu 25 Jun 2026 14:15:27 +0000
ROA not before: Thu 25 Jun 2026 14:10:27 +0000
ROA not after: Thu 24 Jun 2027 14:15:27 +0000
asID: 23961
IP address blocks: 201.50.0.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:7f:52:81:e4:7f:b1:06:50:5d:af:2e:1c:f2:37:14:d2:5d:82:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:10:27 2026 GMT
Not After : Jun 24 14:15:27 2027 GMT
Subject: CN=07C0583BF5F84A03F0BFD992AB2FC4289723A36F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:db:b3:07:7f:ea:6a:38:74:4b:1c:f3:63:a8:
d6:60:46:8f:9e:bf:92:8f:6d:3e:36:cb:74:a1:38:
2e:48:a1:df:6f:48:df:a0:61:70:2b:2d:cb:01:50:
f0:98:da:e0:9b:3e:12:a5:2b:a5:dc:f9:0a:04:ae:
d7:64:84:7b:67:99:df:ba:49:62:9d:37:17:7c:1d:
19:6b:8a:d0:f5:2b:f9:3a:c2:28:d4:0c:22:9c:f9:
fc:87:a1:f0:6e:76:9c:c6:07:aa:eb:e2:01:d6:4b:
5a:f6:1b:49:3c:33:a7:68:5b:b5:f5:35:a8:8e:8e:
89:5b:90:8d:8b:c1:44:08:95:30:0f:2e:ac:ed:d1:
3c:22:90:38:3a:1c:00:f4:70:ae:35:3c:18:d6:8e:
10:ce:3f:a0:40:d5:cf:d3:9b:9b:e7:83:38:18:a1:
b2:04:d3:d7:a4:c7:b7:a0:b2:4c:0b:96:bf:6d:38:
7d:b8:2d:e7:91:96:80:af:58:aa:b4:17:8f:e7:6e:
17:b1:52:a3:aa:b4:f1:35:04:08:58:aa:7c:e6:74:
32:71:0d:29:c4:10:12:de:c1:1d:94:dc:63:21:68:
40:e9:6b:96:9f:d7:32:35:72:97:97:21:d2:0e:e0:
c8:04:60:d0:d7:ed:c0:6b:35:c2:17:ed:dd:4a:a2:
57:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C0:58:3B:F5:F8:4A:03:F0:BF:D9:92:AB:2F:C4:28:97:23:A3:6F
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e302e302f32302d3332203d3e203233393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.0.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:bb:b8:2f:7f:ce:f6:a8:02:3a:c7:70:09:d1:24:c1:8c:44:
0f:9c:ed:79:10:95:92:b9:36:07:ae:33:09:10:fe:cd:e4:e5:
76:a1:a3:50:aa:4d:c1:bf:a0:08:ff:8e:4f:32:2a:bf:a7:52:
52:2e:63:1e:08:88:eb:8f:a2:7a:93:5e:f7:f9:e2:06:27:b4:
10:e7:e1:ff:a4:4b:58:d0:f9:4e:64:98:18:af:87:00:f2:52:
e2:f8:b5:ea:3b:ac:37:34:9b:bb:c0:c4:66:b7:91:03:29:7c:
04:27:e9:fc:4e:35:9f:3e:e8:db:5c:16:cd:38:f3:3b:cd:0f:
1e:ad:9d:3c:de:43:87:5f:0f:00:30:bd:8c:cc:90:e9:5b:03:
35:bf:1f:91:21:80:16:6d:16:eb:f0:70:10:a0:21:b7:34:68:
4c:b9:46:75:13:62:7e:3e:81:c1:8e:72:dc:f5:63:4d:fc:9e:
5e:e0:a5:f5:f6:c6:e2:57:de:cd:f1:99:98:82:95:32:24:42:
ff:f8:4a:e9:43:ed:77:f0:2e:fa:85:53:e5:d1:86:85:86:91:
98:63:c8:16:36:7d:f1:7d:1b:73:d5:2e:a8:97:24:a8:5f:b4:
20:52:e4:b4:17:9a:0d:19:2c:ef:a6:db:0c:7a:39:5a:b1:49:
6d:db:74:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:32:40 2026 by rpki-client