Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2038383838.roa
File: 3230312e342e33322e302f31392d3234203d3e2038383838.roa (raw, json)
Hash identifier: 88uKKmosMU8QWurDK/eF4tR2RZHe7yQN2jm6tp8Qx98=
Subject key identifier: 4E:79:98:19:8E:70:A5:E8:2E:2B:17:92:E4:2A:EA:9B:0E:7A:90:77
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 752E9EC6EF829EE2E74B8DE74055424E8361A29B
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2038383838.roa
Signing time: Fri 11 Sep 2026 12:50:31 +0000
ROA not before: Fri 11 Sep 2026 12:45:31 +0000
ROA not after: Fri 10 Sep 2027 12:50:31 +0000
asID: 8888
IP address blocks: 201.4.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:53:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:2e:9e:c6:ef:82:9e:e2:e7:4b:8d:e7:40:55:42:4e:83:61:a2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:31 2026 GMT
Not After : Sep 10 12:50:31 2027 GMT
Subject: CN=4E7998198E70A5E82E2B1792E42AEA9B0E7A9077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:e5:43:9e:87:12:09:0e:86:e2:e5:a0:ee:
4f:05:1a:7a:be:10:3a:80:f8:5e:6d:49:b7:f5:dd:
1e:10:14:30:e1:82:3e:d8:9c:ea:83:2f:89:93:f3:
75:60:30:37:fb:1d:ef:ef:e6:71:5f:3d:c4:41:7a:
aa:94:2d:1b:cf:19:ac:f0:65:68:48:3f:d6:75:6a:
d1:52:07:c2:c8:8c:8e:c1:a1:35:07:f4:96:a8:92:
7c:a5:8d:f3:ab:e3:fa:a8:5d:a4:3f:dc:92:3a:46:
54:54:41:90:08:81:ac:28:a8:71:d1:62:25:d6:72:
57:28:aa:4f:5e:aa:80:ae:7e:6c:bb:b5:1a:a4:89:
0e:f6:72:9f:af:18:45:d7:01:96:49:92:27:e0:49:
8d:d2:2e:98:9a:dc:b4:91:86:0a:7c:4a:df:81:f6:
4c:0b:66:33:86:62:15:ad:bf:e5:8f:44:b6:a6:3f:
30:ad:cd:08:5b:56:0b:8e:d4:7c:0e:f9:12:59:a3:
ba:4c:18:ee:f2:29:30:fc:4f:2d:ed:17:94:86:62:
81:c4:d5:b9:46:a6:30:23:72:d6:80:3c:e0:7c:ea:
f9:f6:f2:f1:92:10:f4:83:90:12:09:69:78:d4:b6:
e9:e0:ef:2b:c2:47:17:f6:c5:21:15:54:b4:09:f1:
2e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:79:98:19:8E:70:A5:E8:2E:2B:17:92:E4:2A:EA:9B:0E:7A:90:77
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:cd:2c:5a:a1:68:5c:ca:d6:53:c5:58:10:30:1f:7c:1a:27:
05:f6:fc:f9:8d:11:d4:74:4b:14:1b:f9:e9:98:af:8e:2c:da:
b4:5d:5b:be:21:33:51:18:5f:f9:fb:90:9f:a6:2f:05:1b:9d:
37:51:25:a1:71:36:49:a1:de:5d:d9:35:f1:eb:0f:02:bf:a9:
7f:d2:df:94:41:89:9b:16:93:c1:91:c7:f6:ef:02:1a:f1:c5:
01:a4:41:ef:c4:96:ae:a5:f2:39:5a:c0:55:24:13:6f:b9:7e:
78:95:3f:35:c1:91:e0:5b:e7:c2:07:7f:a9:d9:90:07:97:97:
44:16:b8:59:d3:ac:e0:84:7f:24:23:37:8f:b7:62:f8:c2:03:
b9:63:3b:d5:88:b7:3d:fa:da:32:61:2e:77:b6:47:f0:3d:ee:
7f:50:7b:fe:88:78:cb:6a:2e:d7:b4:62:2f:84:c7:a2:32:e3:
35:dc:2e:10:5e:15:04:03:19:e0:e3:33:73:56:89:b3:0c:92:
f7:cf:c6:54:4b:a6:56:5b:ae:dc:76:d8:3a:b2:c2:8c:c0:19:
e5:b3:37:98:c6:a5:66:0a:e6:92:10:69:81:3b:54:41:36:f7:
82:7c:22:45:61:0f:5e:60:4c:fe:89:ef:bb:fb:65:e3:43:31:
1d:c3:bc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:43:23 2026 by rpki-client