Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2034373835.roa
File: 3230312e35302e33322e302f31392d3234203d3e2034373835.roa (raw, json)
Hash identifier: VYf8s9hYseQwyV29jwu003sETn3TRoI1FMgm5gDytso=
Subject key identifier: B0:E6:18:56:06:FF:72:3B:09:3B:AA:C2:6F:49:55:3C:B2:72:E2:92
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 026968F2C5682F29DEBB14802505DE7D4F06825B
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2034373835.roa
Signing time: Thu 25 Jun 2026 14:22:26 +0000
ROA not before: Thu 25 Jun 2026 14:17:26 +0000
ROA not after: Thu 24 Jun 2027 14:22:26 +0000
asID: 4785
IP address blocks: 201.50.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:69:68:f2:c5:68:2f:29:de:bb:14:80:25:05:de:7d:4f:06:82:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:17:26 2026 GMT
Not After : Jun 24 14:22:26 2027 GMT
Subject: CN=B0E6185606FF723B093BAAC26F49553CB272E292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:ce:e1:a9:17:e8:82:73:51:07:16:f2:5d:
be:d7:b3:0f:c2:62:26:a6:c6:80:3a:0d:00:e0:45:
0b:23:ba:d0:da:80:76:f0:e5:ab:cc:7a:86:b7:68:
4c:c2:8a:6d:8f:02:7c:df:ed:be:26:af:5f:32:07:
75:bc:0b:be:23:4c:fa:aa:17:8a:17:b6:27:1c:46:
fb:36:8a:69:bf:54:15:a3:af:f0:9d:98:36:5c:e8:
b7:b7:ec:ae:fd:27:76:ee:29:10:e1:4c:fb:b0:f7:
68:31:8c:2d:9d:15:f2:0b:8f:49:c3:6b:d5:79:ea:
b7:5f:78:63:1d:b6:16:87:21:e9:8b:53:d0:e9:25:
10:07:ae:48:c6:c1:b4:20:ca:fb:9e:ba:88:e0:21:
aa:70:8f:ae:29:89:aa:b3:33:2e:06:9f:0e:bd:5e:
f0:76:3b:86:27:df:95:58:c6:ca:f1:a3:8f:d3:ab:
d7:51:eb:77:5f:69:f4:07:a0:7e:80:f7:89:6b:a7:
4d:8c:be:c9:2d:0e:14:9f:4f:27:e9:51:c0:78:11:
be:ff:ad:01:4f:72:92:43:be:24:58:9e:27:53:74:
8d:09:7e:26:8f:4e:34:fc:92:7b:92:ed:72:d4:58:
20:3c:d6:6e:e1:c2:31:02:09:2d:0d:d7:cf:32:de:
c1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E6:18:56:06:FF:72:3B:09:3B:AA:C2:6F:49:55:3C:B2:72:E2:92
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2034373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.32.0/19
Signature Algorithm: sha256WithRSAEncryption
22:ad:30:58:f7:f7:43:81:33:3f:93:d7:59:3e:b9:b0:af:41:
13:aa:e5:a8:48:8b:9e:03:b5:f7:68:b5:90:83:ed:64:3e:a1:
b1:e2:8c:3e:c8:ab:cc:c6:95:15:30:09:87:c6:96:59:67:40:
a9:93:3f:35:02:c9:23:8c:cf:52:81:b3:2b:cd:85:47:a5:30:
89:c6:2b:92:44:59:56:39:1b:8e:1d:5f:ed:0f:6a:02:b5:cf:
d6:74:e1:d4:c0:b9:61:1f:fd:c7:04:e1:6c:b8:db:15:11:80:
92:c9:a3:ea:73:bd:78:20:20:0c:3f:2b:88:7c:15:e2:2c:8a:
5d:12:20:29:bd:eb:fc:ef:8c:ba:83:00:b5:fe:5c:65:08:6f:
7f:53:a3:73:bf:68:c6:6e:b8:6e:42:b5:44:cd:d4:a3:c4:bf:
06:1f:31:06:05:0a:a3:7b:e3:c9:a2:37:c6:f2:9d:54:10:f1:
56:80:6f:bc:9e:35:4b:db:3a:69:22:76:ab:c4:52:ad:4f:fd:
ea:c2:b5:c5:a2:38:51:d2:1b:6c:ef:ad:c4:87:b5:4f:18:a7:
5d:43:5d:68:ee:c1:f2:9f:23:c2:c2:be:d1:f2:c3:76:4c:ad:
cd:4b:6b:68:76:da:89:11:3d:b0:c9:62:0e:61:58:35:0d:98:
b8:d8:59:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:32:31 2026 by rpki-client