Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e31392e302f32342d3234203d3e20343032323635.roa
File: 3230312e342e31392e302f32342d3234203d3e20343032323635.roa (raw, json)
Hash identifier: tZF09Ef+nblLCip6vclwTFb+CaSioFrdIPnlzvb4eWk=
Subject key identifier: B2:9D:DF:7A:53:48:DE:78:CE:95:2D:D0:3B:31:03:17:4F:5B:92:38
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 5AE2F5B47F546E72507531C7F59E56ACD769E249
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e31392e302f32342d3234203d3e20343032323635.roa
Signing time: Tue 28 Jul 2026 14:07:01 +0000
ROA not before: Tue 28 Jul 2026 14:02:01 +0000
ROA not after: Tue 27 Jul 2027 14:07:01 +0000
asID: 402265
IP address blocks: 201.4.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e2:f5:b4:7f:54:6e:72:50:75:31:c7:f5:9e:56:ac:d7:69:e2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 28 14:02:01 2026 GMT
Not After : Jul 27 14:07:01 2027 GMT
Subject: CN=B29DDF7A5348DE78CE952DD03B3103174F5B9238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:6f:57:99:0b:2c:de:a5:17:f6:c9:9d:57:
15:bc:60:72:e0:9e:93:66:ab:52:f0:74:10:b5:0f:
27:2e:a7:ac:87:63:de:ee:a9:8f:f4:9b:10:d5:35:
f4:c0:18:ce:ed:ef:e3:c6:67:c6:8a:48:ea:a7:dd:
d1:0f:80:0f:6b:ec:b4:ce:b2:bf:78:87:8c:71:42:
81:8e:ed:17:cd:7b:b0:f8:50:5a:fd:0c:b2:20:96:
e9:08:07:27:72:e0:b0:d9:4d:4c:66:21:54:07:4d:
3b:b2:a1:9f:2e:a3:81:bf:12:ff:af:f2:6f:93:bc:
0d:32:b7:01:55:e5:f3:50:80:4b:89:8f:e2:16:0b:
f0:b4:b6:71:84:5d:14:d4:64:75:32:0d:59:71:9f:
5c:19:13:c2:30:fe:8e:de:43:cf:d0:cf:d7:bc:fc:
8b:30:6f:30:51:6c:f6:29:be:ed:84:22:d5:57:08:
cb:7f:62:9c:8d:ac:68:98:f9:db:1d:a4:73:a8:27:
be:b0:89:bd:e5:eb:34:91:50:2a:f3:b3:14:88:22:
ff:8b:55:52:38:2b:6e:29:08:ff:62:e0:bb:82:d5:
54:d9:05:49:95:e3:76:3a:71:41:93:14:b0:53:32:
76:0b:ff:40:d0:26:86:c0:f0:83:d0:fc:25:7b:a5:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9D:DF:7A:53:48:DE:78:CE:95:2D:D0:3B:31:03:17:4F:5B:92:38
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e31392e302f32342d3234203d3e20343032323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.19.0/24
Signature Algorithm: sha256WithRSAEncryption
94:a6:b1:da:01:78:af:b0:0f:c8:b7:5b:1f:95:e9:28:f3:df:
3d:81:bc:1c:10:5e:1d:d6:42:dd:47:6f:4c:7c:12:b5:cc:0e:
18:27:5b:3f:24:97:0f:68:21:b1:ac:df:bc:90:60:e7:22:13:
40:d1:32:25:c2:29:bd:d4:1d:02:ed:3b:d2:74:b7:63:74:fd:
df:a7:b8:44:0d:d0:1f:d8:a0:0f:3f:c3:dc:e8:a5:74:0a:0a:
73:54:b9:e1:8d:95:2c:fc:1c:3b:8d:04:3a:4c:78:e5:61:00:
3f:1b:58:b0:1c:80:35:78:79:f8:7f:4b:74:d5:d6:65:b4:4c:
8a:cc:56:af:f2:bd:9d:52:c5:66:1d:70:2d:08:a3:f2:ba:d5:
7b:72:a6:b2:8e:06:1c:9c:f1:35:d5:e6:98:cd:db:e1:32:72:
5a:12:91:3a:d7:0d:b1:c2:e4:1e:31:4e:5c:3b:b4:7d:e3:80:
92:7d:bd:38:f8:cd:26:9b:ff:51:5b:66:2b:8e:57:a0:1b:69:
e0:9d:10:9a:e4:1a:05:af:db:37:59:f3:2b:17:e4:19:81:f4:
b2:58:cd:b8:c6:f9:93:d0:1b:b3:c0:28:8d:2e:57:fe:5c:b8:
df:4b:21:c6:5e:0d:1a:63:25:d5:23:58:ac:0c:78:7a:05:0d:
91:52:a3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:36:42 2026 by rpki-client