Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e32332e302f32342d3234203d3e20323139343237.roa
File: 3230312e342e32332e302f32342d3234203d3e20323139343237.roa (raw, json)
Hash identifier: xjcQipz8KnMuNnEv9Yw3m8IJRd4W8e22X89sL5k376k=
Subject key identifier: 4B:51:57:DF:00:B1:4C:EF:44:C3:72:6C:07:99:10:56:C7:CE:8F:F8
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 0CCD20F891A7C4D8F38115E3FAC112F7A0B297AB
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e32332e302f32342d3234203d3e20323139343237.roa
Signing time: Tue 28 Jul 2026 14:06:26 +0000
ROA not before: Tue 28 Jul 2026 14:01:26 +0000
ROA not after: Tue 27 Jul 2027 14:06:26 +0000
asID: 219427
IP address blocks: 201.4.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:cd:20:f8:91:a7:c4:d8:f3:81:15:e3:fa:c1:12:f7:a0:b2:97:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 28 14:01:26 2026 GMT
Not After : Jul 27 14:06:26 2027 GMT
Subject: CN=4B5157DF00B14CEF44C3726C07991056C7CE8FF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:39:93:bc:b8:26:f1:04:85:91:67:4f:b8:
60:97:f4:80:aa:af:0e:ea:94:77:73:c0:b6:28:bd:
ba:fd:2c:21:4d:f4:52:ad:87:17:76:a1:9c:16:00:
51:47:cb:c2:16:b2:7f:5b:b0:f7:12:3a:48:dd:2d:
a3:2e:d9:78:dd:1b:28:41:33:de:fa:82:6e:c3:60:
1c:ae:9b:73:86:af:57:da:ae:dc:c8:4e:4b:9d:a7:
02:56:d4:78:3e:47:cb:97:7d:8a:7e:77:8e:c1:96:
aa:11:83:48:c3:1e:7c:62:6c:cd:1f:a9:d9:c5:5e:
25:3d:fb:7d:c0:b2:d3:23:6c:41:83:df:72:d4:eb:
a1:83:e8:10:2c:34:55:48:e2:75:80:2f:51:fb:1a:
9b:f1:f9:23:e0:5a:b9:9d:78:3f:3e:9d:a0:cf:7a:
2d:3a:3f:bb:18:80:69:cc:06:6e:92:22:fe:63:0f:
cd:8f:cd:db:9d:e8:91:b1:56:39:68:77:43:33:68:
f1:7a:75:37:ec:c8:eb:27:77:99:92:fa:36:0c:20:
7a:09:12:39:d9:ae:e9:53:0b:2f:1d:d5:40:4f:56:
99:e3:14:24:30:a1:cc:a4:4b:55:b6:dd:fb:57:de:
fa:10:2e:f7:64:a6:2d:4a:da:4c:28:a2:08:72:7a:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:51:57:DF:00:B1:4C:EF:44:C3:72:6C:07:99:10:56:C7:CE:8F:F8
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e32332e302f32342d3234203d3e20323139343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.23.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ff:18:bc:38:3b:97:cc:fd:0f:28:eb:d5:6b:a5:ce:4e:45:
da:86:c2:0c:66:7a:ea:fe:c4:12:dc:e8:b5:6d:2f:7d:25:77:
66:9a:f8:78:70:4b:df:a0:6f:da:41:f7:b6:4a:d8:d9:26:5a:
e1:56:0b:74:c3:28:ee:02:50:7c:2d:97:eb:0a:59:1e:6c:d9:
ba:0f:bf:dc:9a:d4:bd:32:87:e8:2a:af:a3:a9:f1:0e:d9:5e:
e6:37:55:a1:b9:7e:2d:0e:2e:40:40:54:b7:76:3d:de:06:11:
ad:cd:c6:42:e9:22:27:22:14:49:da:5e:11:fa:aa:ad:7e:38:
84:2b:8e:40:82:a9:07:5e:fc:9a:75:49:13:5d:c8:26:3c:5e:
24:81:b5:5b:ba:58:63:75:ea:10:cd:dc:f2:52:97:c0:fe:ec:
b4:0b:b4:92:84:1a:fa:b9:2f:b9:71:ff:b8:d4:29:ae:e7:bf:
08:74:a4:2b:7d:d7:82:3c:19:d8:5b:e9:26:1a:02:ea:e2:e3:
ac:81:7b:b1:2f:13:d2:10:3d:4c:e2:60:76:33:57:6b:4d:1a:
e2:47:40:f3:55:89:52:40:14:d4:c8:5f:ea:52:55:19:7c:88:
e6:14:b4:2d:db:e3:68:64:6c:9f:a8:b9:1d:5b:79:ca:2c:ce:
4f:f5:49:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:21 2026 by rpki-client