Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e352e302f32342d3332203d3e203530303639.roa
File: 3230312e342e352e302f32342d3332203d3e203530303639.roa (raw, json)
Hash identifier: EEXiCogld0jiCpGpaGf8puqkOYyieyMdz+HB/WP5ab4=
Subject key identifier: 64:47:45:BA:62:61:43:C2:A3:2F:E7:C6:CB:B8:1B:FE:E4:38:E9:1D
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 77730FD8173F6CABCD167232DD8BEB5D37833C32
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e352e302f32342d3332203d3e203530303639.roa
Signing time: Fri 11 Sep 2026 12:50:27 +0000
ROA not before: Fri 11 Sep 2026 12:45:27 +0000
ROA not after: Fri 10 Sep 2027 12:50:27 +0000
asID: 50069
IP address blocks: 201.4.5.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:73:0f:d8:17:3f:6c:ab:cd:16:72:32:dd:8b:eb:5d:37:83:3c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:27 2026 GMT
Not After : Sep 10 12:50:27 2027 GMT
Subject: CN=644745BA626143C2A32FE7C6CBB81BFEE438E91D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:72:f1:bc:1d:dd:da:b6:a6:4f:ba:cf:20:7c:
d8:2f:56:ce:ca:51:2a:21:b5:cb:fa:f5:65:55:06:
20:f7:4c:f3:e5:cb:25:b3:5b:2e:41:cb:57:b6:46:
0a:22:34:b4:f8:2b:eb:1f:0b:8d:6c:c9:b3:77:10:
98:f2:3c:a8:ff:5f:b7:1f:67:72:fd:99:0d:98:22:
f1:07:7a:33:8e:6b:a8:1c:25:c6:38:2d:09:0c:68:
9c:82:f9:3b:a2:cd:85:e5:5a:8a:20:7f:86:a0:c3:
bc:76:a9:1d:c1:a6:46:d8:af:d0:46:1c:9b:5a:4c:
e3:c6:be:2d:10:f5:60:17:20:87:9e:e1:ed:52:42:
c0:2c:42:79:06:02:b8:82:c6:22:f0:66:24:98:3b:
3f:85:4c:7f:79:fc:ee:eb:99:03:ea:4a:ab:90:57:
a3:fc:25:d9:93:28:7d:e4:80:9f:d2:57:50:a8:95:
f4:9c:7c:75:1d:54:73:79:42:e2:48:b1:9d:d3:e8:
f6:f0:c6:5d:ee:cb:44:38:f5:6a:0f:07:f3:e5:68:
eb:e4:68:43:bd:0d:c4:a5:a2:17:f8:09:aa:38:59:
79:1d:ef:5d:f7:b0:4f:2b:6a:c6:b7:d3:a3:95:a3:
f3:aa:c3:b1:e0:54:80:b4:e4:47:ac:64:a3:4a:c1:
b3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:47:45:BA:62:61:43:C2:A3:2F:E7:C6:CB:B8:1B:FE:E4:38:E9:1D
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e352e302f32342d3332203d3e203530303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.5.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:9e:69:6f:d3:64:f6:5c:3d:2e:57:c4:5a:14:55:ae:dc:60:
11:c9:6a:89:2e:b4:53:13:f9:78:df:2d:88:c2:b8:fe:d8:e2:
5f:d6:22:e9:5f:13:00:f7:6f:19:8d:c4:d9:f1:ab:43:48:11:
e6:36:73:d8:0d:c1:fe:bd:15:b8:cb:41:3b:69:a0:ff:24:fe:
42:3b:8b:42:9b:55:f6:b9:fa:70:bd:6e:6d:3b:9c:f1:70:65:
a8:0d:db:59:d2:f6:cd:cd:e6:12:bf:f0:e5:f2:d0:78:d8:01:
89:e2:a5:68:cc:b7:9c:8d:f6:f2:6f:c6:e4:ff:74:7b:83:c6:
83:1d:a1:c8:f5:96:3a:94:d7:c6:5c:15:59:60:81:d1:00:94:
22:14:b7:93:ce:c4:1f:29:30:81:a2:eb:6c:13:f7:25:f6:15:
d0:f0:b9:e7:a9:66:1c:06:af:71:cc:6c:0a:8b:f9:aa:3b:68:
02:b3:96:a2:4c:00:97:0d:00:64:f8:f1:bc:4e:8b:f1:80:19:
51:3a:ca:46:72:67:96:45:67:a4:67:28:7e:20:7d:60:40:96:
71:91:7e:b6:ff:fe:e1:17:d8:13:7e:c3:bf:de:92:79:ad:ff:
00:b1:4c:62:35:f1:2e:af:77:4f:d0:b6:35:fb:a6:97:5f:cf:
0b:9e:fe:bd
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUd3MP2Bc/bKvNFnIy3YvrXTeDPDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA5MTExMjQ1MjdaFw0yNzA5MTAxMjUwMjdaMDMxMTAvBgNV
BAMTKDY0NDc0NUJBNjI2MTQzQzJBMzJGRTdDNkNCQjgxQkZFRTQzOEU5MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbcvG8Hd3atqZPus8gfNgvVs7K
USohtcv69WVVBiD3TPPlyyWzWy5By1e2RgoiNLT4K+sfC41sybN3EJjyPKj/X7cf
Z3L9mQ2YIvEHejOOa6gcJcY4LQkMaJyC+TuizYXlWoogf4agw7x2qR3BpkbYr9BG
HJtaTOPGvi0Q9WAXIIee4e1SQsAsQnkGAriCxiLwZiSYOz+FTH95/O7rmQPqSquQ
V6P8JdmTKH3kgJ/SV1ColfScfHUdVHN5QuJIsZ3T6Pbwxl3uy0Q49WoPB/PlaOvk
aEO9DcSlohf4Cao4WXkd7133sE8rasa306OVo/Oqw7HgVIC05EesZKNKwbPNAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUZEdFumJhQ8KjL+fGy7gb/uQ46R0wHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzIzMDMxMmUzNDJlMzUyZTMw
MmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMwMzAzNjM5LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyQQFMA0G
CSqGSIb3DQEBCwUAA4IBAQCpnmlv02T2XD0uV8RaFFWu3GARyWqJLrRTE/l43y2I
wrj+2OJf1iLpXxMA928ZjcTZ8atDSBHmNnPYDcH+vRW4y0E7aaD/JP5CO4tCm1X2
ufpwvW5tO5zxcGWoDdtZ0vbNzeYSv/Dl8tB42AGJ4qVozLecjfbyb8bk/3R7g8aD
HaHI9ZY6lNfGXBVZYIHRAJQiFLeTzsQfKTCBoutsE/cl9hXQ8LnnqWYcBq9xzGwK
i/mqO2gCs5aiTACXDQBk+PG8TovxgBlROspGcmeWRWekZyh+IH1gQJZxkX62//7h
F9gTfsO/3pJ5rf8AsUxiNfEur3dP0LY1+6aXX88Lnv69
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:15:14 2026 by rpki-client