Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2034373835.roa
File: 3230312e342e33322e302f31392d3234203d3e2034373835.roa (raw, json)
Hash identifier: HzdUv+l0E/f7AUZqSmhM8rTExNCjiFWuqHPsfDzLrYM=
Subject key identifier: E1:B7:86:CE:80:A6:C5:7B:D9:36:AD:99:73:5D:A0:DE:99:A6:63:5A
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 41A1FCB4FEF8191646CD3DAD42003A4587CB41B7
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2034373835.roa
Signing time: Fri 11 Sep 2026 12:50:25 +0000
ROA not before: Fri 11 Sep 2026 12:45:25 +0000
ROA not after: Fri 10 Sep 2027 12:50:25 +0000
asID: 4785
IP address blocks: 201.4.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:a1:fc:b4:fe:f8:19:16:46:cd:3d:ad:42:00:3a:45:87:cb:41:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:25 2026 GMT
Not After : Sep 10 12:50:25 2027 GMT
Subject: CN=E1B786CE80A6C57BD936AD99735DA0DE99A6635A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:6c:e8:62:b9:c2:10:4b:3b:c5:b9:2f:0c:
0a:83:54:bc:de:a5:bb:9b:5f:32:c9:0f:e9:aa:29:
43:d0:9d:8a:31:4e:70:0c:ff:7a:45:1b:e2:b1:19:
da:48:87:fe:3b:1f:26:36:ee:19:7c:b2:2b:b2:e1:
57:0e:61:55:11:f8:9d:aa:19:0b:d7:68:e4:dd:39:
6a:3c:6f:eb:d4:56:49:48:16:35:34:d1:ae:ae:79:
c6:12:2d:c0:08:eb:57:dd:a3:78:68:f0:10:11:61:
a2:9f:8e:7f:23:6e:76:9d:d7:0a:17:0f:14:02:47:
35:44:99:84:c3:a4:47:60:9f:67:e8:ee:85:ba:2b:
6a:66:50:32:00:79:fc:64:3f:34:7b:95:5d:70:87:
15:fe:e6:ae:79:9a:e6:45:12:a3:28:96:df:84:32:
e0:45:8d:83:63:f2:4b:23:5e:ab:49:69:36:69:77:
ed:5c:e6:10:e2:40:51:32:d7:30:8d:ef:ea:8b:66:
fb:95:e7:1b:71:49:0c:da:38:46:0a:3d:e1:b9:bf:
f7:ae:d4:ce:b9:6a:88:35:f3:ff:c2:99:1b:55:5f:
5b:f2:6f:a2:bf:6b:d3:0c:dc:cc:8d:0e:6d:61:ff:
53:3d:23:9e:ee:5a:89:d2:92:09:af:fc:e8:b9:cb:
fb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B7:86:CE:80:A6:C5:7B:D9:36:AD:99:73:5D:A0:DE:99:A6:63:5A
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2034373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:69:7e:70:ae:18:8c:b9:e8:bb:cf:3a:eb:b7:16:1e:a3:2b:
73:f9:4c:67:6b:d8:98:41:75:08:63:c2:c5:29:c7:cf:7d:03:
8f:e2:96:ec:66:ec:c8:09:5a:be:3e:fe:4c:b1:c6:c6:49:36:
3e:b4:95:c3:61:71:ec:18:54:0c:c9:61:74:b2:41:b1:9b:ee:
4a:1a:5d:68:2b:08:1d:4a:9c:08:a4:1a:fd:18:bf:20:29:39:
12:02:e4:d6:bd:9d:8a:7f:14:18:64:aa:ac:db:8b:ab:cf:e4:
93:7a:7d:3d:79:26:8f:eb:30:0b:1c:13:f7:07:04:53:e5:f1:
4a:e1:4a:04:0f:37:db:cc:d3:3a:4d:39:51:09:40:20:e7:52:
18:7b:e5:57:e4:f9:3f:75:27:a1:be:a5:d0:5d:ff:d1:af:da:
fa:60:4c:1c:f6:cc:a6:86:4b:ac:42:b0:ec:f5:4a:8e:2c:50:
f0:e6:42:9b:ce:06:2d:36:13:dd:fa:84:9b:60:31:0c:d8:d7:
f4:95:d4:b5:cd:5d:57:24:57:2a:67:0d:8f:1d:8d:0a:b4:8b:
5c:e7:2b:70:3c:4a:e0:be:53:62:57:19:c4:b6:1a:e4:86:9f:
7e:e6:4a:62:a3:54:fb:9d:42:47:36:ae:33:ee:d4:76:77:e5:
b0:75:b3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:13:45 2026 by rpki-client