Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e312e302f32342d3332203d3e203136353039.roa
File: 3230312e342e312e302f32342d3332203d3e203136353039.roa (raw, json)
Hash identifier: ox9/J9tAboo2XRgTvirVB5Q0oV+/xLNvFO2aInogmMg=
Subject key identifier: 00:DF:BC:B9:69:D7:CC:CA:E7:A8:EE:D3:F9:9F:E5:BA:BF:C4:5A:C8
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 60EED277F0CBB0FDC8C00AD9AE35262F81604341
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e312e302f32342d3332203d3e203136353039.roa
Signing time: Fri 11 Sep 2026 12:50:20 +0000
ROA not before: Fri 11 Sep 2026 12:45:20 +0000
ROA not after: Fri 10 Sep 2027 12:50:20 +0000
asID: 16509
IP address blocks: 201.4.1.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ee:d2:77:f0:cb:b0:fd:c8:c0:0a:d9:ae:35:26:2f:81:60:43:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:20 2026 GMT
Not After : Sep 10 12:50:20 2027 GMT
Subject: CN=00DFBCB969D7CCCAE7A8EED3F99FE5BABFC45AC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d7:ff:30:fd:f4:4b:94:63:5e:34:5c:d0:f2:
28:10:de:36:c9:d3:b7:6c:10:b2:ee:b8:05:92:fa:
37:66:04:0a:e0:a5:28:91:45:27:96:d7:70:d7:7e:
b4:41:35:9d:b8:d5:6a:ec:f3:2b:6a:6a:8a:be:7c:
54:8a:86:26:6d:05:ee:30:06:5a:3f:4f:f9:87:cd:
4d:65:31:13:58:40:75:78:b3:a3:ac:79:27:ef:af:
9d:4e:14:0d:3f:09:68:82:89:86:ad:39:2f:42:30:
22:11:67:c8:18:a9:32:95:e5:2d:80:14:36:af:ff:
8c:89:5b:ba:2d:11:83:b2:80:43:fa:f1:7c:be:d9:
9a:75:df:a0:45:e6:cf:28:89:65:9e:47:c8:7f:72:
7a:23:0c:ee:64:f6:7a:80:a7:8a:c3:8e:db:90:30:
d0:a0:66:e6:05:9a:fb:17:bb:86:46:e7:8c:38:b8:
46:ea:2c:2e:bb:6b:2d:4a:cd:50:b1:20:d4:33:2f:
6d:ec:e6:0e:48:0a:3f:a4:00:38:5a:d6:1d:4f:86:
02:a2:f2:f2:43:8f:a1:76:5c:d7:8a:ac:f6:37:02:
aa:9f:f8:c7:a6:aa:b6:67:20:88:8a:1b:01:c3:4a:
86:bf:9a:9e:55:1b:96:69:4d:27:a7:a8:bd:d8:28:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DF:BC:B9:69:D7:CC:CA:E7:A8:EE:D3:F9:9F:E5:BA:BF:C4:5A:C8
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e312e302f32342d3332203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.1.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f9:a9:f3:be:77:4a:22:11:1a:52:63:81:db:d6:8d:d0:58:
b3:17:8e:2d:28:4d:fa:b1:de:71:3e:96:69:6f:dd:4d:3c:7e:
47:ca:b7:78:e9:40:da:a3:f4:9a:c6:2b:23:3d:44:d4:af:d7:
21:c5:ec:f3:90:2e:c2:03:90:6b:c1:8f:69:de:8c:d1:3c:ec:
e1:b6:dd:fa:bb:31:f1:97:6e:8b:c1:a6:92:a0:ac:60:9a:c4:
b5:05:2f:b7:3f:c8:fc:5a:74:5d:66:ff:f1:49:17:9d:5e:2a:
bf:49:a7:31:72:16:de:fb:b7:fc:46:1b:b5:2b:fb:ba:67:00:
25:7c:3a:1e:dd:a2:42:70:78:df:c4:12:40:06:ca:8f:5d:68:
a5:07:6a:4f:a3:48:53:a1:1c:56:2c:6d:c8:ef:b7:4b:bd:a0:
73:b8:82:01:9b:ab:98:02:c5:e7:1f:a4:cc:3b:7c:63:ad:62:
26:47:68:19:6b:5b:1e:b1:d3:55:e7:38:92:9c:a8:07:c0:4a:
4a:9f:7f:75:ae:86:6e:80:b1:ef:0c:a7:3f:13:72:9b:c0:8c:
e8:4e:79:dd:8c:c9:fa:e7:4c:f1:d8:16:3d:0a:45:b9:17:02:
c9:f5:bf:a0:de:f7:22:9d:20:8c:67:dc:89:03:3a:c4:4d:cf:
5a:d3:ab:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:49:18 2026 by rpki-client