Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS4785.roa
File: AS4785.roa (raw, json)
Hash identifier: xEb4lcGTOnouvXZ5t0TngodJ5Lfx39yGP9YsK1yTmPg=
Subject key identifier: B7:D3:72:45:E9:71:76:94:37:27:13:83:29:7C:28:A1:6E:91:11:79
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 2BB8B8D6BC37EA52159E0120671D2418EB295AB7
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS4785.roa
Signing time: Wed 29 Jul 2026 15:25:09 +0000
ROA not before: Wed 29 Jul 2026 15:20:09 +0000
ROA not after: Wed 28 Jul 2027 15:25:09 +0000
asID: 4785
IP address blocks: 201.4.32.0/19 maxlen: 24
201.50.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:b8:b8:d6:bc:37:ea:52:15:9e:01:20:67:1d:24:18:eb:29:5a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 29 15:20:09 2026 GMT
Not After : Jul 28 15:25:09 2027 GMT
Subject: CN=B7D37245E971769437271383297C28A16E911179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:46:e4:20:80:46:9a:00:71:e8:2c:70:33:
41:13:48:f3:18:2c:ac:90:4d:4f:f0:f0:6c:4a:af:
c8:44:ef:53:9a:42:99:61:50:15:d0:86:90:0e:7f:
09:ef:b1:85:c3:2e:a4:eb:67:c1:be:3e:4d:2d:26:
f3:82:9c:4c:ff:44:63:80:f0:41:7f:53:c4:74:10:
2d:bc:c3:4c:b3:da:cf:e6:20:af:ee:1c:07:b9:d1:
01:70:fd:60:a8:ef:85:5d:bb:0b:1d:a2:86:37:45:
eb:84:87:b8:21:f0:a7:2b:34:7c:fe:76:2c:51:93:
01:79:e2:8b:47:cc:9c:bc:b4:83:96:76:be:2e:f5:
fa:bd:4a:86:3b:64:83:72:fb:96:2b:ee:18:1f:d5:
1e:61:9d:fb:e4:a8:6e:78:79:1b:53:f5:77:9b:eb:
0a:33:af:c1:bb:5a:8a:31:fc:a4:b5:4a:79:de:68:
f3:23:cb:fc:62:c2:13:b8:44:71:f3:b8:fd:56:ee:
12:3d:7d:dd:cc:b2:28:c8:e5:90:02:df:67:3e:46:
07:69:45:b6:73:73:db:fd:e5:85:8f:2f:3f:39:42:
f6:a9:10:15:bc:a7:16:1c:bf:b2:28:6e:e9:5c:1a:
ec:67:da:63:49:12:1e:7f:ec:ce:e2:e8:9e:f1:44:
9c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D3:72:45:E9:71:76:94:37:27:13:83:29:7C:28:A1:6E:91:11:79
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS4785.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.32.0/19
201.50.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:6e:94:a0:92:f2:c5:ac:00:c7:3a:fd:21:a7:69:1a:c1:34:
30:d0:06:95:4d:9f:a6:94:ea:20:f6:23:cc:cb:5b:20:59:f0:
bd:b4:e2:05:b6:58:9e:7b:bb:41:3e:b1:76:5d:a9:b0:c0:e0:
4d:c3:c6:d5:3d:12:7e:66:9d:15:52:79:27:0a:6b:85:60:08:
08:03:a4:ac:8b:9d:46:9f:b5:39:d3:ab:45:fc:a1:54:89:91:
2a:c8:0a:77:c6:2f:78:65:47:90:7a:a6:db:bf:ec:16:0e:2b:
b3:3c:a9:cd:83:19:03:43:87:7d:12:1d:51:70:61:45:97:56:
93:20:43:df:f5:fb:11:08:b7:df:62:59:c0:b7:98:9c:c9:f1:
c3:a0:44:07:39:d8:d2:93:74:e9:98:68:2a:d9:71:45:08:07:
96:76:53:a6:18:61:7c:ee:0a:5b:f8:c4:5d:38:9c:e9:3a:72:
81:db:fa:9e:0a:7b:09:77:aa:39:b0:61:df:0a:8b:65:f0:a8:
a2:24:89:05:26:5b:dd:53:06:bb:22:db:b1:54:a3:3b:56:39:
fc:58:7c:f1:2f:fe:77:92:21:2e:74:5b:9b:20:08:a6:4f:86:
5b:85:60:a2:e2:9a:d8:b7:e4:2b:59:46:c3:6d:27:54:1d:e6:
0e:3d:5c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:33:26 2026 by rpki-client