Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e312e302f32342d3332203d3e203530303639.roa
File: 3230312e342e312e302f32342d3332203d3e203530303639.roa (raw, json)
Hash identifier: yCPwiHlSYGyN7DUJMOMTwc4KlrDr6ee2eRkrRvYrukw=
Subject key identifier: 71:D6:AB:29:6B:2D:96:EF:E7:7C:F4:79:FB:7F:67:28:B4:0F:1D:23
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 3BB583F8835F51E47E26CB7D8098ECB1DC6B5961
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e312e302f32342d3332203d3e203530303639.roa
Signing time: Fri 11 Sep 2026 12:50:31 +0000
ROA not before: Fri 11 Sep 2026 12:45:31 +0000
ROA not after: Fri 10 Sep 2027 12:50:31 +0000
asID: 50069
IP address blocks: 201.4.1.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:15:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:b5:83:f8:83:5f:51:e4:7e:26:cb:7d:80:98:ec:b1:dc:6b:59:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:31 2026 GMT
Not After : Sep 10 12:50:31 2027 GMT
Subject: CN=71D6AB296B2D96EFE77CF479FB7F6728B40F1D23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:38:8c:a3:fb:55:45:49:0b:98:d6:44:72:
2e:f0:99:cd:25:25:5d:00:87:55:22:11:f5:2f:22:
fc:5c:e7:5f:df:be:78:3a:2c:b1:c1:a5:d5:1f:29:
cf:4e:25:49:cf:e7:25:aa:dd:6d:69:2e:0c:72:9b:
6d:36:38:cd:ee:5b:37:8e:47:32:0b:94:a4:db:1f:
d6:ed:d3:70:ee:14:b0:54:1f:e3:d7:02:3b:01:07:
5b:17:6f:38:33:8a:90:a7:4f:a5:4e:7f:fc:52:c1:
6a:fc:0b:be:11:7b:c8:dc:db:21:06:ed:54:c0:70:
68:e4:29:6c:44:4b:00:78:97:9e:99:65:7c:dd:4e:
34:88:43:fc:06:22:b6:b6:b2:c1:b0:5b:ff:92:27:
17:bb:6d:ac:ab:c7:dc:be:e1:98:b1:db:e2:f6:eb:
c2:3e:12:c0:a0:56:70:63:8f:4a:aa:40:a5:f7:a4:
03:ed:13:29:68:ca:90:a7:fc:04:ac:58:4c:b8:b1:
50:0d:68:25:d5:8f:1c:18:e8:ec:14:da:de:e2:06:
f3:8e:be:6b:a4:8a:65:80:f5:c6:26:45:82:79:f2:
9e:11:8f:3e:3f:a5:cf:58:5f:7d:7f:cb:89:9d:1f:
50:d4:16:47:4a:06:83:fc:a9:c4:a7:f6:43:77:76:
2d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D6:AB:29:6B:2D:96:EF:E7:7C:F4:79:FB:7F:67:28:B4:0F:1D:23
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e312e302f32342d3332203d3e203530303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ba:59:af:57:b1:46:35:c7:5f:0a:d2:71:ee:04:00:d5:c4:
1a:d7:2b:68:09:80:f0:64:11:df:45:57:0a:35:fe:cd:41:c8:
54:55:db:dd:fc:8c:ec:41:cd:03:87:e1:62:48:58:6e:dd:4c:
ec:8b:f7:59:95:63:6f:d6:e5:10:eb:b9:d5:98:b2:ba:a1:51:
c9:08:e8:25:30:66:27:03:d5:17:2b:37:8f:bc:fb:99:7d:ac:
6f:43:65:e1:09:c9:e3:1e:0a:ee:f1:b1:f3:c1:97:94:17:bf:
a4:a5:03:c3:98:bc:80:9e:f3:8d:20:03:66:9a:b3:6f:20:6a:
8b:1e:1c:0f:bd:74:d3:58:13:ee:2d:dc:61:17:4f:43:6c:37:
00:07:7c:db:b1:21:f1:f5:0b:27:3d:e5:f8:91:3a:09:10:9d:
5e:07:7d:f1:e7:12:ed:77:5e:1a:92:82:e2:03:50:e2:f6:80:
13:c7:1e:63:82:dd:5c:81:10:b5:e4:8f:5e:b8:9c:cc:21:44:
b6:d1:de:04:3a:77:f1:8b:a4:56:cc:29:d2:01:cc:9a:81:05:
de:ff:f0:6b:a1:24:02:ce:58:1a:1d:99:ee:fb:18:87:6a:db:
35:27:e7:c7:fc:21:2c:64:81:13:75:7b:d2:c4:47:90:24:2e:
6d:4d:54:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:40:55 2026 by rpki-client