Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e32392e302f32342d3234203d3e20313532383638.roa
File: 3230312e342e32392e302f32342d3234203d3e20313532383638.roa (raw, json)
Hash identifier: kmsBDzsnwyHdGv+rO0Qbk/HUighsYsLV+sJwxZ29NUo=
Subject key identifier: 5A:4F:D0:A9:56:DF:4F:68:E5:BE:B0:CB:7B:04:AD:70:12:AE:DE:9B
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 435F4D69480F90816290BE04311ACBC273ED42EA
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e32392e302f32342d3234203d3e20313532383638.roa
Signing time: Tue 28 Jul 2026 14:05:54 +0000
ROA not before: Tue 28 Jul 2026 14:00:54 +0000
ROA not after: Tue 27 Jul 2027 14:05:54 +0000
asID: 152868
IP address blocks: 201.4.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:5f:4d:69:48:0f:90:81:62:90:be:04:31:1a:cb:c2:73:ed:42:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 28 14:00:54 2026 GMT
Not After : Jul 27 14:05:54 2027 GMT
Subject: CN=5A4FD0A956DF4F68E5BEB0CB7B04AD7012AEDE9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:6a:6c:a1:df:24:eb:31:c1:d1:06:56:62:
d0:2e:3f:3f:ee:9c:10:f6:96:0d:d1:82:90:87:d2:
f4:b7:cc:6b:f5:65:15:8a:71:32:28:c4:df:38:48:
c7:ee:d1:5d:51:92:d0:a1:a2:6b:32:0f:bf:a9:4b:
1c:ef:b8:58:04:31:be:2d:74:47:53:36:a2:f3:4a:
78:e3:21:8b:05:ae:d4:2b:be:0a:e8:ff:db:a8:9e:
ca:da:98:87:5b:a4:b9:61:7c:04:25:52:62:f8:26:
7f:74:a1:3d:19:d6:f2:4c:ce:6e:eb:42:37:e3:45:
ed:87:b9:cc:1e:cf:3a:1d:c2:4d:d0:b8:ba:3a:87:
93:2c:3e:9f:06:1b:91:75:ac:00:57:4d:2e:2e:fd:
50:6e:e4:87:6a:96:07:a1:df:d6:8d:8a:d6:c9:41:
35:90:09:97:76:01:29:84:e8:3c:74:64:eb:7f:df:
41:76:9a:de:38:c9:09:c4:17:69:c4:a7:84:c3:a0:
09:b6:37:55:6c:18:a2:3c:3a:46:cb:ba:07:af:7c:
41:90:0b:26:16:6a:79:1c:12:b2:47:a9:01:0f:51:
f2:19:74:cb:e2:a0:56:b0:1e:99:16:5b:21:b4:36:
e1:0c:4a:b0:3b:f6:a9:f4:c9:4e:c4:32:e1:d5:af:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4F:D0:A9:56:DF:4F:68:E5:BE:B0:CB:7B:04:AD:70:12:AE:DE:9B
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e32392e302f32342d3234203d3e20313532383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.29.0/24
Signature Algorithm: sha256WithRSAEncryption
36:85:c6:33:f5:5b:3b:c4:50:4a:21:7c:0b:f7:7e:3f:88:40:
0d:4e:b3:b8:6b:ce:cb:a3:62:6d:c0:38:de:be:9a:41:c1:de:
52:92:82:81:e6:9e:db:3e:3e:6d:40:5e:4b:96:c8:49:26:27:
32:7a:12:be:2e:dd:f9:e4:c7:5c:04:1d:c1:b6:f2:c7:48:50:
09:1a:70:ba:51:62:84:cf:84:60:25:ac:25:3b:1a:9c:cd:d8:
79:d4:88:6d:2f:e6:61:7a:ec:b0:16:6f:69:cc:84:df:89:70:
81:0e:ab:9c:df:53:e5:76:bb:29:23:ac:fa:9f:dd:9d:73:ff:
5e:a5:e6:f4:9c:74:06:2a:fc:a7:dd:39:96:e2:17:ed:86:a5:
17:3c:4e:21:d4:30:98:d9:2d:84:09:5a:68:b1:ed:71:79:a7:
b9:f9:59:75:8d:46:f0:a1:20:97:f4:ed:99:0a:29:14:5d:22:
f1:1f:f3:e7:4f:28:e2:1a:51:2a:30:9c:c6:25:e8:e6:5d:e3:
9d:aa:0e:d8:2f:0b:de:e9:28:94:e2:da:62:92:63:13:7b:1f:
9e:7e:a5:dd:db:26:10:21:9e:dd:15:31:ff:5d:8a:34:1c:f1:
d2:cd:7e:63:6d:c0:61:30:43:99:26:81:39:be:fa:91:c8:6e:
88:9f:bc:a5
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUQ19NaUgPkIFikL4EMRrLwnPtQuowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA3MjgxNDAwNTRaFw0yNzA3MjcxNDA1NTRaMDMxMTAvBgNV
BAMTKDVBNEZEMEE5NTZERjRGNjhFNUJFQjBDQjdCMDRBRDcwMTJBRURFOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIk2psod8k6zHB0QZWYtAuPz/u
nBD2lg3RgpCH0vS3zGv1ZRWKcTIoxN84SMfu0V1RktChomsyD7+pSxzvuFgEMb4t
dEdTNqLzSnjjIYsFrtQrvgro/9uonsramIdbpLlhfAQlUmL4Jn90oT0Z1vJMzm7r
QjfjRe2Hucwezzodwk3QuLo6h5MsPp8GG5F1rABXTS4u/VBu5Idqlgeh39aNitbJ
QTWQCZd2ASmE6Dx0ZOt/30F2mt44yQnEF2nEp4TDoAm2N1VsGKI8OkbLugevfEGQ
CyYWankcErJHqQEPUfIZdMvioFawHpkWWyG0NuEMSrA79qn0yU7EMuHVr8tFAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUWk/QqVbfT2jlvrDLewStcBKu3pswHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzIzMDMxMmUzNDJlMzIzOTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzYzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMkE
HTANBgkqhkiG9w0BAQsFAAOCAQEANoXGM/VbO8RQSiF8C/d+P4hADU6zuGvOy6Ni
bcA43r6aQcHeUpKCgeae2z4+bUBeS5bISSYnMnoSvi7d+eTHXAQdwbbyx0hQCRpw
ulFihM+EYCWsJTsanM3YedSIbS/mYXrssBZvacyE34lwgQ6rnN9T5Xa7KSOs+p/d
nXP/XqXm9Jx0Bir8p905luIX7YalFzxOIdQwmNkthAlaaLHtcXmnuflZdY1G8KEg
l/TtmQopFF0i8R/z508o4hpRKjCcxiXo5l3jnaoO2C8L3ukolOLaYpJjE3sfnn6l
3dsmECGe3RUx/12KNBzx0s1+Y23AYTBDmSaBOb76kchuiJ+8pQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:00:56 2026 by rpki-client