Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2036323333.roa
File: 3230312e35302e33322e302f31392d3234203d3e2036323333.roa (raw, json)
Hash identifier: gCK0H9Ehrk1MuV2FOgxtMG67KEqHsKdcLYBO1kgXJdU=
Subject key identifier: 0E:6A:87:94:5E:BA:03:4A:3F:08:6E:90:CF:CC:F8:74:B4:9E:01:0A
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 39AFBE1D4E8D99BDCC214B693F86F480D4CD143B
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2036323333.roa
Signing time: Thu 25 Jun 2026 14:22:39 +0000
ROA not before: Thu 25 Jun 2026 14:17:39 +0000
ROA not after: Thu 24 Jun 2027 14:22:39 +0000
asID: 6233
IP address blocks: 201.50.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:af:be:1d:4e:8d:99:bd:cc:21:4b:69:3f:86:f4:80:d4:cd:14:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:17:39 2026 GMT
Not After : Jun 24 14:22:39 2027 GMT
Subject: CN=0E6A87945EBA034A3F086E90CFCCF874B49E010A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e8:0b:f4:19:b1:57:a1:a6:d1:49:a8:58:40:
ae:e2:81:0d:5d:22:59:43:be:a3:82:36:3c:de:c4:
f9:41:1e:a3:38:6e:4f:3f:d8:a3:94:3b:b4:27:b3:
b3:83:7f:13:fb:ba:e3:b6:5e:09:29:8f:00:1c:55:
e7:e0:b1:3a:b1:50:16:25:53:f7:4a:42:ef:a8:f7:
47:b9:16:5a:f9:8a:35:5f:cc:6f:cd:00:d2:fe:3e:
e7:37:ae:3f:f2:04:82:82:b7:09:d6:10:1f:30:db:
b4:63:19:47:54:ef:cb:f4:92:8c:0d:a3:44:22:13:
3d:eb:b8:34:b0:60:8f:bb:38:82:3c:8b:c7:84:0c:
26:8b:aa:7e:d9:28:3d:df:be:38:0b:3b:7f:14:09:
a5:71:42:1e:42:af:23:8d:f7:2e:d5:9f:7e:0a:42:
a1:24:55:cd:f8:4c:0d:33:ee:c5:a4:6c:c7:bb:41:
6d:e6:29:f0:ca:00:2b:e3:98:ef:fd:fc:87:d1:64:
e0:39:9e:54:de:52:ca:37:30:48:3d:e0:40:f2:a0:
ce:e1:ef:d2:8f:ea:82:ef:3f:63:89:25:9b:3f:1a:
d0:63:2d:55:9e:57:57:ec:3a:41:15:71:02:cd:f3:
84:26:ee:96:47:26:e6:73:03:3b:6c:05:b9:4c:83:
d5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6A:87:94:5E:BA:03:4A:3F:08:6E:90:CF:CC:F8:74:B4:9E:01:0A
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2036323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.32.0/19
Signature Algorithm: sha256WithRSAEncryption
26:1b:b6:eb:45:7f:e9:9a:e0:1b:ac:42:1a:ec:a6:a2:90:fb:
c9:97:fa:66:2c:5e:2a:aa:e5:6c:ed:94:6d:d2:ab:14:54:59:
80:d5:e9:82:cf:71:13:f1:a3:15:39:46:0b:9c:67:78:8d:cf:
e1:08:e1:0c:8b:e4:48:9c:82:53:e3:bf:c4:62:67:e9:91:ba:
c2:d9:62:ae:c0:c5:80:84:69:74:f0:ea:c4:89:20:6a:7d:46:
4d:33:4f:43:25:e6:38:ea:a1:9a:57:de:d2:66:39:72:4b:84:
45:fb:99:dc:68:96:b8:52:74:8b:7c:46:d2:7f:96:2b:8a:d9:
df:88:6a:6e:56:d1:fa:2c:17:3d:1c:8c:d0:94:60:f6:93:9c:
85:a8:91:bd:91:b0:e5:89:9f:52:82:01:a3:e8:c2:11:4b:64:
1b:99:61:a0:8e:80:e5:b6:f8:01:c9:26:be:2c:ba:11:38:5f:
ec:e9:dd:9f:dc:eb:1a:f9:fd:d3:ef:04:7d:41:28:a9:c5:a8:
89:50:9e:01:ad:42:e9:70:a8:d9:b5:cf:f2:e5:10:d9:e2:92:
be:8f:3b:e8:59:ef:b1:49:dc:a2:33:0a:52:b0:59:62:91:5a:
e3:5d:10:63:14:71:f8:6d:e8:9f:9f:8d:5a:ae:0e:05:45:cb:
ea:d8:b0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 06:23:32 2026 by rpki-client