Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e302e302f32302d3332203d3e20393137.roa
File: 3230312e35302e302e302f32302d3332203d3e20393137.roa (raw, json)
Hash identifier: z4PVGutDEdoxgIVTjCfq5H84LXPGOy4lv1kUJR7G1iI=
Subject key identifier: 47:1A:37:15:03:2E:B2:6F:98:1E:7B:2D:50:7D:C6:1E:91:59:84:F0
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 65873955E75B534BDAE55AD633E8511C4DE6485D
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e302e302f32302d3332203d3e20393137.roa
Signing time: Thu 25 Jun 2026 14:14:48 +0000
ROA not before: Thu 25 Jun 2026 14:09:48 +0000
ROA not after: Thu 24 Jun 2027 14:14:48 +0000
asID: 917
IP address blocks: 201.50.0.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:87:39:55:e7:5b:53:4b:da:e5:5a:d6:33:e8:51:1c:4d:e6:48:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:09:48 2026 GMT
Not After : Jun 24 14:14:48 2027 GMT
Subject: CN=471A3715032EB26F981E7B2D507DC61E915984F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:3e:50:02:7e:c2:06:70:06:96:49:c3:52:
f3:48:10:86:c6:5a:28:26:49:f3:7a:c7:3f:7f:c8:
4b:53:aa:3d:75:02:c8:a9:73:2e:3d:75:d3:49:d7:
7d:69:a8:b1:7d:06:29:1e:21:51:03:4a:a0:88:3f:
02:cb:30:56:9a:a0:26:26:0d:4b:b2:7a:16:19:c2:
dd:a2:e6:2d:9f:66:dc:67:46:35:a1:e2:53:20:71:
08:3a:e3:87:fd:85:8d:de:58:89:f9:37:bc:1a:06:
40:44:eb:aa:e8:56:be:c9:45:40:09:52:fa:57:20:
1d:5b:9d:64:98:57:cc:74:e6:e5:1e:a4:41:dd:0f:
14:c9:83:6c:25:f5:79:61:d0:f8:21:da:39:2c:f3:
1f:79:3a:a1:71:09:da:5c:30:1e:61:ad:0b:14:84:
6d:56:ad:ae:b8:b5:8d:c9:a2:48:26:9b:a6:92:21:
c2:7e:3d:cb:10:c1:40:b4:f7:64:2a:37:c5:c4:57:
45:63:ce:13:3b:59:e7:ea:f4:1e:e2:e9:cb:b6:ee:
b8:3d:9c:42:e3:08:8d:85:78:f8:cc:28:7a:ef:2d:
62:c8:c0:16:f3:79:bc:68:6b:c8:3e:74:c3:06:b7:
c9:3e:d1:d7:53:1b:e4:b5:62:e2:e1:af:c0:05:97:
cb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1A:37:15:03:2E:B2:6F:98:1E:7B:2D:50:7D:C6:1E:91:59:84:F0
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e302e302f32302d3332203d3e20393137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.0.0/20
Signature Algorithm: sha256WithRSAEncryption
59:06:f0:85:1a:c3:f9:c2:ce:df:fd:30:c7:dd:0c:4c:d8:a1:
50:5b:1e:36:08:03:1f:a3:6e:63:22:f4:06:0a:c9:81:00:d4:
29:ba:67:28:5a:2c:7d:2c:00:09:3e:6c:14:ca:7d:69:e4:b6:
c2:5a:92:30:32:64:02:01:7c:94:82:90:f3:37:e8:96:76:ae:
82:ee:42:a7:c1:ad:38:12:c1:07:a1:26:77:3b:9f:97:eb:ca:
9a:da:9c:56:21:a5:9e:19:7b:d4:7a:c1:f6:f4:3a:1e:62:5c:
3a:92:a7:38:d2:80:c1:d4:f0:cb:8b:8b:83:33:88:65:c1:36:
5e:f0:1b:31:79:4b:53:d5:4f:d5:f1:57:26:95:1f:86:c3:22:
27:0e:58:b8:0b:c7:8f:d3:e8:24:64:b1:32:e0:40:0d:2c:8a:
74:44:04:30:55:67:fd:01:64:40:cd:e0:00:43:b0:c3:df:53:
7d:1a:78:00:5e:9f:eb:92:82:99:da:a6:98:2a:b1:5a:46:39:
5e:a1:ad:10:aa:f3:c5:30:f7:bb:6f:ef:7d:ea:ec:8d:99:e0:
6b:b8:32:fe:1e:ff:4e:28:7b:72:d2:1e:31:b2:55:71:e8:84:
b1:08:d4:6f:c6:80:14:5e:88:73:33:5a:fc:63:e3:70:81:29:
e5:bc:2e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:32:09 2026 by rpki-client