Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2033323538.roa
File: 3230312e35302e33322e302f31392d3234203d3e2033323538.roa (raw, json)
Hash identifier: p2rlzKqKuRNnmlBqr9AtttLd6b9MGn/Dfcsl88R7dFw=
Subject key identifier: C8:89:0B:D7:6E:E3:A4:A0:39:57:D7:B4:51:83:78:A7:C7:2C:70:AF
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 6810B13F728272F729460C1AFB39F8109C29EFDA
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2033323538.roa
Signing time: Thu 25 Jun 2026 14:22:07 +0000
ROA not before: Thu 25 Jun 2026 14:17:07 +0000
ROA not after: Thu 24 Jun 2027 14:22:07 +0000
asID: 3258
IP address blocks: 201.50.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:10:b1:3f:72:82:72:f7:29:46:0c:1a:fb:39:f8:10:9c:29:ef:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:17:07 2026 GMT
Not After : Jun 24 14:22:07 2027 GMT
Subject: CN=C8890BD76EE3A4A03957D7B4518378A7C72C70AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:eb:78:ff:74:11:8a:be:b6:1b:b4:e4:9a:
21:ee:1f:ae:2b:cd:ba:83:56:54:33:bb:c8:12:f1:
b7:a8:a7:17:b2:d6:8b:74:f2:2f:1f:dc:cc:c5:8e:
30:eb:ea:72:e8:f0:25:11:d1:6f:c7:5d:93:ef:bb:
1f:d7:1a:f5:52:2e:b8:4f:6e:c6:a1:e3:8d:b2:33:
e8:bb:9d:95:6e:5d:47:ff:7b:6b:6a:69:bd:d1:9b:
56:90:57:19:5e:c0:16:8c:7a:8a:02:ec:ee:36:0a:
8a:99:c1:90:eb:03:12:3b:fd:66:5d:8b:9c:48:55:
d7:04:8e:fb:45:f3:6e:32:64:22:32:a9:a4:5d:bc:
a3:22:3f:5c:06:18:d5:81:b4:21:80:c2:1d:40:c8:
7f:b7:91:ef:b7:6c:12:a9:46:fa:f5:75:d6:f2:de:
4a:fa:f3:ad:d5:27:8c:b7:06:fd:5d:ec:57:64:e6:
a6:1b:2d:51:9a:4f:81:87:74:5f:b3:df:80:c3:5a:
e2:cf:e1:0e:7e:3e:ce:0a:e1:6d:ea:10:a6:a3:e3:
aa:ad:8e:b2:bc:a6:cb:f0:5b:bf:d3:e8:86:67:06:
0c:35:21:71:52:95:9e:15:70:c8:fa:5a:f8:3c:1f:
24:7b:1b:4f:d5:96:23:bc:7a:c5:72:f4:e0:37:3c:
7c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:89:0B:D7:6E:E3:A4:A0:39:57:D7:B4:51:83:78:A7:C7:2C:70:AF
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2033323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.32.0/19
Signature Algorithm: sha256WithRSAEncryption
67:f1:74:22:fe:74:80:e9:e0:84:0f:1b:c8:f7:fd:03:21:8e:
8c:d8:aa:d4:51:93:04:e7:2c:63:21:55:dd:f0:08:ab:d2:72:
19:a9:a0:7e:d0:25:0c:6b:4c:77:79:8b:bd:86:d4:64:ed:3b:
93:2b:6a:d9:0c:62:ee:bf:67:f9:d4:1d:ed:04:2e:a8:cb:47:
58:1c:51:d6:ae:50:3e:c0:1f:bf:48:57:66:52:67:50:e3:a3:
34:7f:cf:1a:5e:e5:7e:1f:91:2c:d7:7d:77:f5:25:11:b0:57:
d9:f5:37:40:d8:e8:68:4b:6d:11:c4:f4:7c:f8:d8:be:fb:df:
7d:3b:5a:5d:9b:a1:41:94:ef:4d:7c:d4:6c:e7:7c:09:a0:4a:
7c:5e:ff:c5:ad:89:bc:ac:47:28:d3:9d:da:97:c5:dd:3a:82:
80:75:0c:3c:60:9f:25:62:83:2e:a9:e7:41:72:84:b6:12:30:
4d:30:67:0c:f9:13:0e:e8:56:f2:20:7d:41:fc:fb:44:83:4a:
b0:4e:b7:ae:92:06:83:32:32:bb:de:76:36:b9:95:64:26:7b:
ea:67:cc:a0:15:98:66:1e:85:8a:4f:93:a2:47:85:50:45:f4:
fc:0e:61:c8:96:ac:b0:42:43:33:cf:25:25:f5:3e:00:b4:62:
51:65:45:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:34:22 2026 by rpki-client