Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2039333132.roa
File: 3230312e35302e33322e302f31392d3234203d3e2039333132.roa (raw, json)
Hash identifier: E9r0+upeMyHXE2eOI/KhyZOJ+JIkHAcXuUpBZeroCE4=
Subject key identifier: 7C:2E:8C:33:8D:3A:19:66:90:A0:BD:4E:0F:CE:67:5C:25:F4:68:95
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 518C1E6893B028C42C0C00A0783EE48339430F60
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2039333132.roa
Signing time: Thu 25 Jun 2026 14:23:24 +0000
ROA not before: Thu 25 Jun 2026 14:18:24 +0000
ROA not after: Thu 24 Jun 2027 14:23:24 +0000
asID: 9312
IP address blocks: 201.50.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:8c:1e:68:93:b0:28:c4:2c:0c:00:a0:78:3e:e4:83:39:43:0f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:18:24 2026 GMT
Not After : Jun 24 14:23:24 2027 GMT
Subject: CN=7C2E8C338D3A196690A0BD4E0FCE675C25F46895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c9:f6:db:ec:b2:f2:f9:75:3a:2e:66:72:49:
6a:7e:ba:2d:c4:b6:58:95:bb:fe:16:80:66:40:93:
57:82:be:92:c4:21:ec:4a:0e:89:38:07:2e:81:d2:
f2:9f:19:7e:93:34:5d:d2:27:61:2f:f6:01:52:c8:
9e:31:24:65:fc:13:af:fe:a0:29:c9:ec:c9:14:fe:
60:df:25:6c:a8:0f:38:24:15:8d:ce:20:12:4a:e8:
62:c8:9d:ef:c3:61:fe:89:cd:29:d0:7f:06:be:a2:
22:80:0c:b0:ac:23:97:35:ce:70:1d:4e:c8:90:71:
76:72:c8:50:57:81:5f:c9:9c:e2:b3:f1:41:1f:d7:
72:84:2b:29:65:40:be:13:c7:bc:aa:4a:c7:bb:13:
c8:28:c8:51:a3:51:26:4b:7c:80:3f:1f:d5:41:d7:
20:13:d8:35:ff:dc:89:2b:95:23:6f:26:c2:e8:37:
0c:bc:04:bb:95:69:bb:0c:04:86:c2:51:5d:ad:b4:
ee:5b:28:d0:93:4f:01:96:99:ec:1e:8d:8e:1d:67:
a9:83:b1:3e:f2:63:1c:31:e9:39:9a:e5:3f:d8:c2:
2e:b9:5c:4f:e7:01:34:7b:3e:51:7b:8e:14:ef:82:
73:a3:e1:25:a5:be:61:36:5f:1f:d8:e5:50:a4:32:
ab:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2E:8C:33:8D:3A:19:66:90:A0:BD:4E:0F:CE:67:5C:25:F4:68:95
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2039333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.32.0/19
Signature Algorithm: sha256WithRSAEncryption
49:65:9b:3f:9d:77:8c:4c:c9:ba:09:38:8d:d5:69:9b:80:4b:
20:e1:0f:00:02:98:12:07:3f:95:b0:8c:e5:36:c8:7a:46:55:
80:f0:90:d9:06:21:fb:ec:4e:f0:f7:50:b9:c7:7b:3a:0b:54:
a8:9b:82:ad:7c:78:db:63:99:5c:77:de:e3:4c:13:30:f2:53:
95:42:e7:d9:6c:67:fe:1b:34:90:7d:d2:74:3e:71:72:ae:de:
80:f9:c6:5c:74:06:bf:3a:17:10:ba:1c:73:87:73:93:94:69:
d8:a7:26:f9:9f:1d:30:aa:3c:c8:8c:f0:b9:f0:2b:a7:5f:1b:
19:a1:65:d4:ab:46:99:04:92:1d:e7:f9:4e:43:fa:21:05:75:
d6:2b:07:9f:eb:36:ed:5c:f7:30:97:0a:82:4b:14:51:01:c8:
52:f9:60:be:7a:78:54:3c:20:a6:c8:ab:fc:7f:10:b6:fb:32:
c3:a6:12:71:d4:32:21:8a:e4:2e:6e:cc:54:b1:90:d0:44:01:
10:44:c9:5f:ef:98:26:0a:0a:6f:02:81:94:6d:2c:82:e6:34:
5a:cc:14:fe:4e:8d:05:6e:62:b4:74:ff:fa:31:5c:27:00:68:
f8:7f:b0:d0:6c:38:98:e6:c6:0c:19:40:7b:f6:0b:99:75:e7:
48:d5:39:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:33:45 2026 by rpki-client