Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2039333132.roa
File: 3230312e342e33322e302f31392d3234203d3e2039333132.roa (raw, json)
Hash identifier: l48ICNEOZSUFsv60Oe/8RzlWGIiclCXu4mnDrM98Rag=
Subject key identifier: 0E:D6:29:A7:BF:EC:0A:5E:BF:26:EF:C8:97:BB:7F:74:A5:E2:82:1B
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 50CB64BD2A742FB297F079144BBB4595475ACD9F
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2039333132.roa
Signing time: Fri 11 Sep 2026 12:50:33 +0000
ROA not before: Fri 11 Sep 2026 12:45:33 +0000
ROA not after: Fri 10 Sep 2027 12:50:33 +0000
asID: 9312
IP address blocks: 201.4.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:cb:64:bd:2a:74:2f:b2:97:f0:79:14:4b:bb:45:95:47:5a:cd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:33 2026 GMT
Not After : Sep 10 12:50:33 2027 GMT
Subject: CN=0ED629A7BFEC0A5EBF26EFC897BB7F74A5E2821B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:21:dd:35:c8:4a:8c:4e:bb:28:db:27:fb:85:
c4:dd:ff:b5:e7:24:ec:11:30:af:2d:58:72:26:8f:
89:33:63:91:6a:c6:d3:a4:c8:c1:76:c3:19:50:c8:
51:3b:e4:df:ed:12:ef:dd:48:df:bb:78:1b:31:30:
04:c0:54:94:75:66:d8:4e:08:fe:db:7c:40:f0:6b:
b4:66:89:66:07:cd:ec:0d:57:03:cb:71:31:95:a1:
42:6a:97:3e:d9:76:47:5d:f0:af:a2:e0:41:c7:20:
dd:f6:8d:d0:a1:c4:5d:0f:53:7b:1f:fb:c6:4d:09:
a1:50:73:7b:a7:6a:72:d5:df:bf:b8:eb:3a:6b:09:
c7:b7:2d:a1:f7:3b:08:85:24:77:d6:5c:d0:ff:23:
1c:9a:62:4d:de:74:31:5f:84:fb:e4:c3:ac:e8:66:
b3:98:28:05:08:7a:e2:d1:30:5f:43:f9:58:d4:5b:
25:ae:59:63:2b:c9:17:e2:d5:e4:e0:47:08:87:b9:
61:c4:1d:89:1f:d5:a5:1e:8f:bc:78:d9:ea:82:51:
6c:d8:b7:fb:f5:bb:8d:01:8d:29:95:c9:df:37:9c:
8b:c9:10:45:e6:02:5e:27:47:96:d2:c8:43:af:bb:
7d:e3:a8:b8:cc:a8:c0:ed:d7:5a:80:21:16:e2:6b:
4a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D6:29:A7:BF:EC:0A:5E:BF:26:EF:C8:97:BB:7F:74:A5:E2:82:1B
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e33322e302f31392d3234203d3e2039333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.32.0/19
Signature Algorithm: sha256WithRSAEncryption
21:de:da:b9:04:e9:d3:79:60:3b:71:d6:84:a8:20:fc:b6:63:
f7:e9:07:70:30:71:f7:b1:cb:e3:07:18:6f:8f:e8:5d:2f:82:
49:6a:06:32:8f:3f:e8:77:5c:53:56:b6:86:81:74:52:f9:e6:
5c:01:49:a4:1e:be:f2:09:6f:10:b5:f6:0f:20:73:b0:92:ec:
35:49:d1:6c:3d:2a:7c:33:0f:6c:d2:0f:5a:dc:2c:80:7a:d7:
a9:1d:a1:f7:b8:b8:e2:e8:03:bd:58:e1:1d:c9:b1:ce:da:79:
cc:5b:74:02:fd:17:5f:61:0d:98:e3:35:78:ee:4d:63:38:87:
e6:f6:cc:3a:56:04:c2:6d:d2:30:ad:2f:c0:d2:53:d8:6c:d5:
4e:37:d4:98:03:d1:d0:92:e0:55:3c:9a:ca:26:b9:c7:49:63:
d1:da:35:ce:98:93:5b:68:c1:b8:8e:92:3b:a5:fe:8a:da:07:
e7:49:7d:39:41:bd:c8:35:ac:a4:9d:36:78:dd:66:d7:dc:a8:
5f:bf:5a:96:1f:a8:90:39:7c:ac:8e:3e:ae:81:6b:52:bc:94:
8e:ca:97:91:58:78:09:bc:9c:60:ab:33:63:4a:d8:2d:d9:a1:
b8:e7:c9:aa:88:51:7a:d0:95:8b:25:22:49:15:39:76:57:f4:
cf:33:ec:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:41:19 2026 by rpki-client