Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2038383838.roa
File: 3230312e35302e33322e302f31392d3234203d3e2038383838.roa (raw, json)
Hash identifier: Qx4+WcpQ0hv5LDV1f17+0ZgimOb5G3ekQ2BJgumYlfg=
Subject key identifier: 61:A0:0A:D9:B4:59:B8:28:04:5D:9D:1C:97:25:13:67:54:B9:3D:D6
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 5D4DB99399E68A3DAFFB38E84F9AA663736A25BD
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2038383838.roa
Signing time: Thu 25 Jun 2026 14:23:05 +0000
ROA not before: Thu 25 Jun 2026 14:18:05 +0000
ROA not after: Thu 24 Jun 2027 14:23:05 +0000
asID: 8888
IP address blocks: 201.50.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:4d:b9:93:99:e6:8a:3d:af:fb:38:e8:4f:9a:a6:63:73:6a:25:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:18:05 2026 GMT
Not After : Jun 24 14:23:05 2027 GMT
Subject: CN=61A00AD9B459B828045D9D1C9725136754B93DD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:f5:6a:b3:57:fc:d2:7a:45:41:00:5f:b3:
e4:a4:3d:57:a3:57:47:4c:f4:f3:3d:d8:6e:89:54:
d5:24:7e:13:99:0f:05:a9:45:65:ab:a3:44:cd:71:
65:e8:79:67:4f:0f:62:c0:21:b9:cb:11:4c:e9:f7:
08:32:7d:85:9a:77:e1:ba:4e:47:a0:31:11:47:cd:
04:30:71:15:31:97:b9:34:4a:77:6b:6b:e5:a8:49:
31:36:40:0f:a5:f7:dd:c1:c1:25:44:e5:2a:e3:7a:
a0:42:69:f1:35:a7:97:b0:0a:56:cd:96:9e:96:44:
6e:72:4d:88:f1:f1:61:dd:62:a2:10:3b:de:6b:da:
f1:9a:c8:32:c5:2a:59:f6:5b:d6:9e:04:4b:a0:fb:
5c:2a:f2:be:42:7e:53:3d:1e:31:68:bd:ac:a8:c9:
ab:84:ef:8e:e0:17:87:2f:a0:96:0d:c9:6d:7f:90:
b9:df:6e:d3:28:c3:3c:2a:7c:2e:23:35:cf:5b:54:
1b:39:64:b4:68:1d:b6:6c:71:08:8d:47:81:5c:19:
6e:19:10:9f:f8:6c:a3:53:1f:17:52:0c:5c:07:07:
be:1f:3e:48:2e:88:be:ec:08:8a:f9:e6:33:d7:32:
df:e4:82:27:43:92:a7:65:59:25:cd:19:b8:4d:f5:
69:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A0:0A:D9:B4:59:B8:28:04:5D:9D:1C:97:25:13:67:54:B9:3D:D6
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.32.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:cf:a6:5c:40:f0:12:ee:a8:ff:65:a4:a4:99:82:e3:40:78:
53:13:c8:9b:2f:49:64:71:e2:52:d6:40:81:fe:a8:54:de:33:
41:c8:f5:1f:d3:f3:f2:6c:44:17:38:6d:b3:c3:4c:6d:43:9c:
89:bc:f4:b7:b4:82:8d:4a:0d:19:55:84:47:22:7e:38:29:4a:
ee:e4:8f:7d:51:6f:df:ee:19:6f:1d:2e:14:60:c3:ee:a2:a0:
22:57:03:20:6a:1e:29:86:42:c4:05:8b:f1:72:f7:20:b0:c4:
ef:18:d0:f0:ae:be:a1:f8:5d:d7:be:23:99:a3:32:3a:b5:72:
c0:c0:3f:82:75:c3:a7:57:23:ea:35:32:bf:e3:d2:0f:38:44:
7e:58:c0:b5:7c:ea:11:30:ce:82:dc:33:63:2c:e2:92:a7:2e:
3b:82:cf:64:f0:83:a8:50:3c:7b:a0:06:1d:04:d2:de:ac:b1:
01:7a:e3:e1:17:fd:51:72:9c:e7:b5:ae:c8:84:97:da:e0:42:
c9:3d:14:70:6d:f9:dc:38:bd:28:74:52:8b:c8:70:48:eb:40:
39:91:dc:2a:01:ef:eb:6c:53:77:88:4e:4e:53:5c:3a:1f:66:
7e:9d:62:9c:06:f3:22:97:6d:b2:71:a7:35:d1:37:5d:06:35:
aa:9d:ec:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:32:29 2026 by rpki-client