Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e382e302f32312d3332203d3e203233393631.roa
File: 3230312e342e382e302f32312d3332203d3e203233393631.roa (raw, json)
Hash identifier: S33h+aDRfgdvF1EOJk6OEOLimNuns4MAvwGMN64MpPI=
Subject key identifier: DD:59:F2:5E:1D:D3:81:07:06:9A:6F:0D:71:38:CA:EA:69:92:B3:5F
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 4407B8E41C50E9657C0DE81654F4AFC9D9BCC6C6
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e382e302f32312d3332203d3e203233393631.roa
Signing time: Fri 11 Sep 2026 12:50:29 +0000
ROA not before: Fri 11 Sep 2026 12:45:29 +0000
ROA not after: Fri 10 Sep 2027 12:50:29 +0000
asID: 23961
IP address blocks: 201.4.8.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:07:b8:e4:1c:50:e9:65:7c:0d:e8:16:54:f4:af:c9:d9:bc:c6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:29 2026 GMT
Not After : Sep 10 12:50:29 2027 GMT
Subject: CN=DD59F25E1DD38107069A6F0D7138CAEA6992B35F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e3:bf:53:e6:16:bc:7b:3d:4b:e5:b9:61:ee:
97:8d:8e:75:39:c5:d4:76:9b:86:15:b3:b3:cc:05:
91:c6:23:99:b5:eb:2d:ac:14:5d:2d:12:19:b6:ed:
e9:14:9d:39:f1:ad:5a:aa:f7:0c:f0:ca:bd:99:46:
3d:d1:1b:6c:7e:5c:cf:7c:78:ef:43:2a:32:54:37:
51:73:4e:3d:02:35:dd:7b:df:49:2b:14:1a:cc:53:
a3:8a:cb:1c:48:61:11:2a:ec:e1:25:b7:79:76:86:
96:7b:30:98:ea:01:e3:74:8c:af:1f:3e:63:20:81:
df:91:07:85:5c:8c:54:0c:1b:96:85:23:67:c8:37:
a4:83:6e:40:9b:34:58:c9:35:3d:8e:12:2f:2f:8a:
af:7b:64:e6:69:44:f4:4f:bd:3b:24:ba:2d:0d:17:
62:de:0f:12:c9:5d:ea:12:0c:ed:2b:5f:d9:e1:7e:
4f:7d:f6:16:09:2b:39:03:9a:7c:d3:e0:94:c2:f2:
f7:e5:79:8c:b5:ef:32:f9:cb:4b:65:8e:86:11:0b:
03:c1:b6:b0:8a:0f:e8:38:73:a1:2a:53:a6:07:53:
31:10:c5:d0:72:79:5b:fb:2c:9b:f5:35:b5:79:8f:
c8:16:72:1b:ea:39:70:c3:17:0a:f9:7a:3e:e0:47:
16:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:59:F2:5E:1D:D3:81:07:06:9A:6F:0D:71:38:CA:EA:69:92:B3:5F
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e342e382e302f32312d3332203d3e203233393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.8.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:0a:5a:98:03:13:5a:1e:61:5b:ec:9d:4f:0c:a2:dc:c7:a0:
2e:b9:ea:f4:4e:25:55:ea:cf:b6:c3:92:c9:f0:e0:e5:49:01:
85:48:91:54:18:0c:8d:1d:0d:28:7b:c3:b1:72:bd:37:f0:44:
09:7f:6f:50:19:09:81:1a:a6:47:e5:79:a9:44:b2:c3:df:3d:
73:a8:79:67:b0:65:6f:de:76:da:08:b4:7d:58:79:e3:6a:08:
24:24:2a:d9:92:13:99:1d:6b:5e:27:31:74:ef:04:d5:21:d3:
75:39:32:e3:56:7b:d1:a2:c2:c3:11:a8:3f:a6:26:c4:ef:f6:
77:0c:fb:26:4f:87:4f:80:48:df:22:21:22:3d:d8:a2:f1:70:
1f:4d:bc:25:59:50:de:73:df:bc:5c:4e:19:ab:2b:c1:96:eb:
ab:47:a2:36:df:c4:f9:17:7e:88:f0:f8:8a:a2:0d:f1:d5:7d:
6e:af:37:83:62:3a:bd:9b:34:ad:d9:2b:37:4f:5e:44:92:79:
ec:a7:e1:bc:46:b4:37:75:84:eb:36:b9:1e:17:eb:f2:44:41:
77:31:43:c3:1a:99:0c:66:f6:94:a0:37:06:72:ae:53:2e:3c:
6c:b5:e5:81:a6:7d:bd:ab:ab:e8:73:d7:7a:48:80:c6:e5:0a:
e7:c6:8e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:11:57 2026 by rpki-client