Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e312e302f32342d3332203d3e203134363138.roa
File: 3230312e342e312e302f32342d3332203d3e203134363138.roa (raw, json)
Hash identifier: mvQmoRedgx4S6LRwa0SlJVlpATt4GGTM28ypKNbLfkw=
Subject key identifier: 1F:10:70:3E:D9:C9:E8:8C:2B:73:57:1A:3B:6D:7C:23:80:2D:C2:68
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 47E77B54B2FFC84D709A6EE55671626A1D20573A
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e312e302f32342d3332203d3e203134363138.roa
Signing time: Fri 11 Sep 2026 12:50:33 +0000
ROA not before: Fri 11 Sep 2026 12:45:33 +0000
ROA not after: Fri 10 Sep 2027 12:50:33 +0000
asID: 14618
IP address blocks: 201.4.1.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e7:7b:54:b2:ff:c8:4d:70:9a:6e:e5:56:71:62:6a:1d:20:57:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:33 2026 GMT
Not After : Sep 10 12:50:33 2027 GMT
Subject: CN=1F10703ED9C9E88C2B73571A3B6D7C23802DC268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:4c:a7:cb:de:aa:e1:59:74:67:5a:4e:27:
c6:cd:e6:10:d5:c5:0d:4a:52:e2:fb:a7:f8:95:eb:
3f:3c:6d:6a:26:96:7f:44:f8:5b:f3:83:27:c1:d1:
fd:b7:f7:86:7b:e6:a5:d6:b5:45:f1:db:4d:ba:0d:
92:f3:a7:b0:34:b6:c0:bc:93:59:47:85:e2:07:0c:
67:c8:0d:e0:53:b9:9b:ed:72:c5:69:d7:e9:b4:2b:
84:c5:bf:f7:98:e0:e4:13:b6:85:4f:f7:00:75:2f:
32:09:58:10:21:74:5b:38:6a:43:8b:46:62:f7:e7:
e7:24:51:ea:82:fb:de:df:f7:15:9a:62:64:8f:be:
7d:2c:30:60:c6:d6:3e:aa:15:49:b3:26:cd:eb:a2:
11:91:82:dc:86:2a:59:96:1f:65:17:69:bc:48:ce:
25:00:d9:a8:ca:22:52:b5:b4:9e:28:fa:72:e7:75:
93:14:f3:cc:4f:98:57:2f:fb:c0:ae:e4:68:dc:f4:
40:90:ec:4d:86:3b:1d:a3:8e:6d:80:eb:05:72:3b:
d2:6f:35:7b:21:dc:26:3e:59:1c:88:03:d1:e9:fd:
de:88:34:35:27:5b:9f:2f:46:8c:ac:d4:42:0c:3d:
8a:46:4e:a8:fb:e5:7f:9e:0f:6f:8d:4e:bb:90:c5:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:10:70:3E:D9:C9:E8:8C:2B:73:57:1A:3B:6D:7C:23:80:2D:C2:68
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e312e302f32342d3332203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.1.0/24
Signature Algorithm: sha256WithRSAEncryption
92:6a:97:ec:7a:9d:3c:90:53:a5:09:78:be:f5:fe:2a:3d:02:
ae:ea:05:97:5e:36:69:87:e1:3d:59:91:e1:91:92:aa:7e:f6:
d7:23:2e:dd:4f:b7:89:d6:8b:6d:70:ea:0f:66:62:5b:b6:5e:
97:bc:b8:1d:20:06:05:0c:d3:f6:7a:46:a0:b0:dc:56:10:ae:
f3:2b:c0:a4:35:aa:a6:ae:b1:f7:c5:7c:28:68:ea:7e:92:17:
54:11:46:5b:a9:ec:a0:05:cd:b6:20:63:07:e7:e7:68:b4:ee:
61:98:03:73:52:36:6d:1b:92:65:60:0f:03:d6:23:32:5d:a3:
71:66:00:0b:72:c8:a6:3d:77:77:03:5f:19:38:ba:41:2e:95:
d3:fc:1b:8e:ad:40:70:63:72:23:01:d3:7e:8a:56:61:9b:59:
d4:c5:47:c3:a0:20:3a:c9:a9:8f:3e:5a:e5:66:fc:27:8a:5b:
92:98:9b:d0:6f:39:06:16:55:2b:1f:a2:f8:5a:25:45:2c:25:
d2:cc:11:34:0e:c0:98:51:01:60:32:b1:06:0a:c7:b0:1b:71:
11:5d:73:58:af:96:7a:8a:50:08:09:63:f2:76:6e:5c:e0:21:
af:5e:57:0e:9f:69:a5:d8:38:1c:52:86:a3:76:b5:f4:34:84:
d3:58:28:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:41:07 2026 by rpki-client