Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e302e302f32332d3332203d3e20393137.roa
File: 3230312e342e302e302f32332d3332203d3e20393137.roa (raw, json)
Hash identifier: 3XwO613XjTcJvibqlowu29uDf0sqrqGl9LF3k3R7qN8=
Subject key identifier: 49:23:06:B0:CA:9A:C0:70:D1:6A:38:7E:42:85:0C:3E:94:86:32:D1
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 696B03E4399B4B3D27E9D19E041FC0A05EA8A3DA
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e302e302f32332d3332203d3e20393137.roa
Signing time: Fri 11 Sep 2026 12:50:31 +0000
ROA not before: Fri 11 Sep 2026 12:45:31 +0000
ROA not after: Fri 10 Sep 2027 12:50:31 +0000
asID: 917
IP address blocks: 201.4.0.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:53:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:6b:03:e4:39:9b:4b:3d:27:e9:d1:9e:04:1f:c0:a0:5e:a8:a3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:31 2026 GMT
Not After : Sep 10 12:50:31 2027 GMT
Subject: CN=492306B0CA9AC070D16A387E42850C3E948632D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:15:61:1b:3f:ed:d0:9e:bf:fe:ed:51:72:4b:
86:fb:00:6c:43:3e:24:76:cc:bd:db:bb:82:57:ad:
b2:b4:f9:15:e8:dd:0c:ce:71:78:4f:01:73:b5:90:
7d:0d:48:78:66:bd:2c:6a:f5:f1:84:aa:55:a6:f1:
6c:f3:35:16:7b:5b:bd:c1:82:4e:a2:7a:85:5d:fc:
f5:dc:50:ab:4d:a6:5a:64:e9:26:a1:6a:e0:90:3e:
2f:ed:85:39:07:9c:cb:68:a6:7f:48:ad:6a:92:1a:
16:76:ad:b6:be:f9:35:12:8f:14:ed:92:71:21:0a:
c6:fc:25:f9:f9:f6:1b:29:4a:63:9a:26:d6:31:e9:
d1:81:73:64:66:12:3a:33:13:60:25:d1:34:f6:47:
58:7d:06:6c:04:0c:fe:74:20:26:cf:19:78:64:20:
50:4f:73:cd:38:a6:b4:23:85:98:96:86:3a:d9:30:
dd:b7:2f:c1:70:5b:63:a2:db:3a:75:66:f1:68:90:
7e:24:30:39:68:68:f0:bf:0c:20:af:ce:96:69:e3:
28:bd:44:1f:e7:a9:f5:b2:4a:0a:83:9c:07:27:d5:
88:cb:7a:f8:64:d5:25:bc:6d:f6:34:ce:29:5c:7c:
98:81:0d:88:64:aa:f7:9e:c8:d9:5d:07:5a:94:56:
cf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:23:06:B0:CA:9A:C0:70:D1:6A:38:7E:42:85:0C:3E:94:86:32:D1
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e302e302f32332d3332203d3e20393137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.0.0/23
Signature Algorithm: sha256WithRSAEncryption
26:49:9f:1c:ac:85:5c:a8:41:c2:9f:32:9c:f7:5b:36:5b:35:
4c:e6:95:1b:48:eb:36:ee:78:bf:1a:fe:8f:2c:c7:2b:03:3f:
bc:62:53:7d:d1:5b:89:1a:b0:23:31:d0:1c:00:f0:52:dc:9b:
2a:12:fc:50:c2:3d:c8:30:22:2c:37:8b:ab:0d:10:9d:25:b6:
77:1c:b3:43:42:3f:d1:f6:e3:1d:d3:29:57:43:b0:d2:b8:5f:
b3:4f:be:89:18:8d:ea:23:a6:c5:67:86:78:a0:2c:dc:6b:92:
5e:57:92:4e:f0:3c:dd:69:1c:a1:1e:db:24:7a:b1:04:62:0a:
3d:65:53:b2:14:f1:2f:a0:44:84:08:d5:93:c4:94:a4:2a:95:
9d:52:7f:9d:71:2a:14:98:0c:27:12:82:f8:61:07:b0:b0:ab:
40:2b:76:9a:cf:5a:13:ee:4b:91:53:9a:13:12:62:92:34:a4:
b5:10:03:23:03:ff:1e:73:a5:cc:71:36:df:05:2b:72:a0:04:
5b:60:90:81:e3:7d:a4:de:23:c0:cd:fc:c8:cf:48:11:50:96:
62:20:7b:28:e4:9e:0d:58:8b:a0:30:28:6f:77:a1:e7:6d:86:
51:ec:a8:23:99:42:8a:2e:c6:f1:cd:c5:57:17:54:44:a3:f8:
5b:06:fc:5c
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUaWsD5DmbSz0n6dGeBB/AoF6oo9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA5MTExMjQ1MzFaFw0yNzA5MTAxMjUwMzFaMDMxMTAvBgNV
BAMTKDQ5MjMwNkIwQ0E5QUMwNzBEMTZBMzg3RTQyODUwQzNFOTQ4NjMyRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMFWEbP+3Qnr/+7VFyS4b7AGxD
PiR2zL3bu4JXrbK0+RXo3QzOcXhPAXO1kH0NSHhmvSxq9fGEqlWm8WzzNRZ7W73B
gk6ieoVd/PXcUKtNplpk6SahauCQPi/thTkHnMtopn9IrWqSGhZ2rba++TUSjxTt
knEhCsb8Jfn59hspSmOaJtYx6dGBc2RmEjozE2Al0TT2R1h9BmwEDP50ICbPGXhk
IFBPc804prQjhZiWhjrZMN23L8FwW2Oi2zp1ZvFokH4kMDloaPC/DCCvzpZp4yi9
RB/nqfWySgqDnAcn1YjLevhk1SW8bfY0zilcfJiBDYhkqveeyNldB1qUVs8rAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUSSMGsMqawHDRajh+QoUMPpSGMtEwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzIzMDMxMmUzNDJlMzAyZTMw
MmYzMjMzMmQzMzMyMjAzZDNlMjAzOTMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHJBAAwDQYJKoZI
hvcNAQELBQADggEBACZJnxyshVyoQcKfMpz3WzZbNUzmlRtI6zbueL8a/o8sxysD
P7xiU33RW4kasCMx0BwA8FLcmyoS/FDCPcgwIiw3i6sNEJ0ltnccs0NCP9H24x3T
KVdDsNK4X7NPvokYjeojpsVnhnigLNxrkl5Xkk7wPN1pHKEe2yR6sQRiCj1lU7IU
8S+gRIQI1ZPElKQqlZ1Sf51xKhSYDCcSgvhhB7Cwq0ArdprPWhPuS5FTmhMSYpI0
pLUQAyMD/x5zpcxxNt8FK3KgBFtgkIHjfaTeI8DN/MjPSBFQlmIgeyjkng1Yi6Aw
KG93oedthlHsqCOZQoouxvHNxVcXVESj+FsG/Fw=
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:44:35 2026 by rpki-client