Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2033323538.roa
File: 3230312e342e33322e302f31392d3234203d3e2033323538.roa (raw, json)
Hash identifier: mPkCpSJR7Ox8U53hcqwZhn2X5roIkg0pkz9RDiEMY8s=
Subject key identifier: CA:E9:8B:2A:36:23:2A:70:AC:7E:E7:61:CF:F9:50:5D:6D:34:D2:9C
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 0134F9F430B7A48C29FE2DCA948766ED8F837EEF
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2033323538.roa
Signing time: Fri 11 Sep 2026 12:50:29 +0000
ROA not before: Fri 11 Sep 2026 12:45:29 +0000
ROA not after: Fri 10 Sep 2027 12:50:29 +0000
asID: 3258
IP address blocks: 201.4.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:34:f9:f4:30:b7:a4:8c:29:fe:2d:ca:94:87:66:ed:8f:83:7e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:29 2026 GMT
Not After : Sep 10 12:50:29 2027 GMT
Subject: CN=CAE98B2A36232A70AC7EE761CFF9505D6D34D29C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9a:91:2f:9e:6a:d7:c2:39:5e:1f:ed:cc:28:
fe:f2:34:5a:0c:c5:e5:46:86:fd:8f:2c:0e:05:79:
85:b3:44:4e:47:8a:fc:ed:59:e3:0a:15:f8:77:e4:
9b:a0:3a:49:46:f0:fe:9d:ca:55:8d:49:f2:0b:7a:
a4:6a:1a:8e:40:53:a0:98:ed:64:1b:58:9a:cd:e2:
06:c0:99:ce:53:38:b8:09:94:4f:4b:18:fe:6a:61:
8e:59:b4:6e:33:2c:0f:14:44:21:21:1b:92:77:69:
77:73:a8:a5:a6:b8:42:59:d6:15:39:36:19:a4:53:
9c:e0:28:a6:a3:fa:bb:6d:cb:95:4a:8e:96:25:d4:
03:89:09:1b:1b:68:bc:b7:6f:c5:d7:46:32:2c:5c:
d4:09:89:3d:74:42:6a:41:2b:38:d2:5c:a2:ff:b9:
75:2e:6c:24:ec:9d:52:f4:41:1b:2c:33:dc:96:ff:
6d:bd:0a:f8:fc:a1:e6:1e:64:4d:d6:ba:04:8d:d2:
46:b4:5d:91:51:a5:d7:95:57:9d:eb:b4:fd:38:5f:
00:dc:4e:37:1f:d8:0b:0c:03:22:a9:88:9a:f0:a1:
78:1a:7f:02:46:15:6d:f6:65:fa:9c:42:42:7d:8b:
9f:5a:67:a5:eb:2c:e8:0e:8a:7b:1b:3b:d6:64:31:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E9:8B:2A:36:23:2A:70:AC:7E:E7:61:CF:F9:50:5D:6D:34:D2:9C
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2033323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.32.0/19
Signature Algorithm: sha256WithRSAEncryption
46:c9:e1:5c:93:da:39:a5:52:7a:f7:de:90:57:c9:52:fd:e5:
0a:65:b7:05:f9:6a:a4:2d:6e:f2:8e:a4:9d:72:9f:80:e8:16:
b1:ab:e6:7d:ca:a9:63:d4:78:9b:c5:f4:f7:a2:fc:96:21:8c:
fe:48:57:6d:d1:c2:96:e1:9e:3a:9a:f6:f5:c3:be:d8:3b:ae:
47:fd:cb:a8:91:68:50:22:49:fd:b8:19:61:ea:83:16:45:1f:
a2:f4:f4:00:19:a2:90:81:d8:74:ac:50:e3:37:fe:25:04:5e:
ec:a0:39:c5:92:b1:99:88:2f:1e:29:e4:48:5f:0e:b0:e1:7f:
65:cd:e6:5e:5a:7e:61:d7:f6:0b:7a:89:1f:40:9a:15:57:33:
a0:f8:55:6b:8f:9f:74:ec:73:3a:57:1c:bf:0c:bd:da:e2:49:
e5:df:b8:70:07:a7:49:12:a3:1f:ea:d6:f7:c0:a6:32:8c:79:
ed:0f:99:af:b1:01:95:2d:e6:3d:7b:92:fa:59:16:db:ee:05:
ec:af:81:82:bf:a9:0d:ad:d4:90:d8:08:91:6b:f5:ef:bc:b6:
1b:17:ae:e1:03:ad:02:64:aa:0b:db:1e:64:46:25:09:92:92:
58:7a:b4:0b:3b:71:53:de:a3:a2:13:87:51:e4:5b:14:09:ad:
0b:9f:c6:b0
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUATT59DC3pIwp/i3KlIdm7Y+Dfu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA5MTExMjQ1MjlaFw0yNzA5MTAxMjUwMjlaMDMxMTAvBgNV
BAMTKENBRTk4QjJBMzYyMzJBNzBBQzdFRTc2MUNGRjk1MDVENkQzNEQyOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCampEvnmrXwjleH+3MKP7yNFoM
xeVGhv2PLA4FeYWzRE5HivztWeMKFfh35JugOklG8P6dylWNSfILeqRqGo5AU6CY
7WQbWJrN4gbAmc5TOLgJlE9LGP5qYY5ZtG4zLA8URCEhG5J3aXdzqKWmuEJZ1hU5
NhmkU5zgKKaj+rtty5VKjpYl1AOJCRsbaLy3b8XXRjIsXNQJiT10QmpBKzjSXKL/
uXUubCTsnVL0QRssM9yW/229Cvj8oeYeZE3WugSN0ka0XZFRpdeVV53rtP04XwDc
Tjcf2AsMAyKpiJrwoXgafwJGFW32ZfqcQkJ9i59aZ6XrLOgOinsbO9ZkMeu9AgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUyumLKjYjKnCsfudhz/lQXW000pwwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzIzMDMxMmUzNDJlMzMzMjJl
MzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMzMzIzNTM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyQQgMA0G
CSqGSIb3DQEBCwUAA4IBAQBGyeFck9o5pVJ6996QV8lS/eUKZbcF+WqkLW7yjqSd
cp+A6Baxq+Z9yqlj1HibxfT3ovyWIYz+SFdt0cKW4Z46mvb1w77YO65H/cuokWhQ
Ikn9uBlh6oMWRR+i9PQAGaKQgdh0rFDjN/4lBF7soDnFkrGZiC8eKeRIXw6w4X9l
zeZeWn5h1/YLeokfQJoVVzOg+FVrj5907HM6Vxy/DL3a4knl37hwB6dJEqMf6tb3
wKYyjHntD5mvsQGVLeY9e5L6WRbb7gXsr4GCv6kNrdSQ2AiRa/XvvLYbF67hA60C
ZKoL2x5kRiUJkpJYerQLO3FT3qOiE4dR5FsUCa0Ln8aw
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:25:47 2026 by rpki-client