Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2033323538.roa
File: 3230312e35302e33322e302f31392d3234203d3e2033323538.roa (raw, json)
Hash identifier: B+7eeENIirWUXLBYi6Gdu/QL872sGXdRYHqgd1hn4gM=
Subject key identifier: 02:50:AA:26:2F:22:2F:54:86:C7:9A:C0:EE:AC:21:6B:EB:A6:57:DA
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 453A75964A961F0B83CAFAD2338BC93E561AD0BF
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2033323538.roa
Signing time: Fri 11 Sep 2026 12:50:20 +0000
ROA not before: Fri 11 Sep 2026 12:45:20 +0000
ROA not after: Fri 10 Sep 2027 12:50:20 +0000
asID: 3258
IP address blocks: 201.50.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:3a:75:96:4a:96:1f:0b:83:ca:fa:d2:33:8b:c9:3e:56:1a:d0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:20 2026 GMT
Not After : Sep 10 12:50:20 2027 GMT
Subject: CN=0250AA262F222F5486C79AC0EEAC216BEBA657DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:ff:b7:17:1a:85:9f:2f:0a:4b:52:2d:fb:
14:f0:81:b0:47:e3:cf:e8:80:64:c4:fa:48:3e:5e:
b8:60:b7:8c:29:9f:1e:59:89:d3:61:bc:a8:42:8d:
91:04:15:25:14:5e:0d:39:46:3c:2e:8a:57:89:5c:
e7:7d:ae:c6:39:a4:4b:cd:16:5f:cf:19:18:77:4c:
d3:f1:58:03:7a:0d:8b:48:fb:5c:57:c0:c9:9f:ff:
32:d1:8f:b4:3d:a2:09:e1:3e:df:17:1f:c1:15:c5:
fb:73:51:1a:3f:5a:c7:0b:a9:a4:af:e4:d8:b6:b5:
fa:57:aa:a3:d5:e4:e9:9b:12:11:6c:5d:76:89:e5:
0f:4d:c8:6c:f8:1f:2a:21:c4:98:fd:65:73:6d:d4:
8a:76:7e:d6:c2:4b:60:6a:65:fc:89:18:7f:21:5e:
d1:39:1a:75:c6:04:8f:81:24:01:76:a9:a1:bf:96:
b5:7e:c4:da:8f:39:83:e2:5b:45:cb:ee:ce:1c:24:
87:ec:c6:56:2a:90:92:da:66:9e:9e:7d:f2:c3:ba:
6c:4b:12:8a:96:c6:38:30:b1:bd:ae:88:24:26:fd:
81:52:58:78:8e:13:5a:4c:87:60:91:80:85:63:38:
1e:a5:a2:cb:39:cf:fb:d5:f8:70:66:9b:a9:47:b0:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:50:AA:26:2F:22:2F:54:86:C7:9A:C0:EE:AC:21:6B:EB:A6:57:DA
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2033323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.32.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:3b:2b:19:31:b1:0c:27:b5:0c:47:17:98:92:72:4b:a4:7b:
c9:69:45:ff:49:85:1f:d2:d1:e0:d8:d1:f9:33:b8:11:dc:b7:
da:26:9b:19:44:0d:74:10:eb:ad:09:9b:63:e3:4b:a4:97:24:
a7:25:22:52:26:3a:6b:6c:df:f7:b2:c3:f1:68:a1:b5:27:92:
b7:b4:c8:59:f5:ae:3b:86:cc:a6:6a:b8:af:15:00:4f:2c:01:
2f:56:a5:a7:c2:19:a9:63:df:7a:1c:53:1b:f0:71:ef:88:19:
b5:e0:95:44:3d:43:35:f4:3b:51:c4:74:d9:a2:d5:ec:e4:70:
4e:ee:ec:6e:c6:09:c9:40:36:9d:64:8a:5d:85:59:3c:6b:b4:
1a:bc:17:9f:01:64:20:7b:fe:10:e9:a3:b5:85:8c:34:7c:63:
46:cf:f2:63:34:86:96:bd:ca:99:9a:8f:83:96:ad:44:3b:45:
95:fe:7a:44:c4:ef:cb:4c:d6:c2:a0:88:3d:4d:28:46:03:8e:
de:c8:4f:aa:77:80:86:40:b2:60:16:6d:96:48:20:e7:91:10:
a5:73:a8:f9:82:35:18:39:d2:b9:e5:c7:bf:1c:13:a3:98:56:
c5:ee:20:b8:84:67:cb:92:4f:cf:07:c1:1f:3a:c9:6d:a5:e0:
a7:72:19:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:19:17 2026 by rpki-client