Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e302e302f32302d3332203d3e203233393631.roa
File: 3230312e35302e302e302f32302d3332203d3e203233393631.roa (raw, json)
Hash identifier: x1nzhHbSXkkPXE9Cj4iypMmjIOnW38aYFhMxIaEDc4c=
Subject key identifier: 15:41:25:FF:31:C2:0F:55:C5:BF:FA:53:83:9D:F0:CD:86:D3:88:2A
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 76F9996C37D88F4E5CEE06191ABB250BD3A6A7AC
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e302e302f32302d3332203d3e203233393631.roa
Signing time: Fri 11 Sep 2026 12:50:21 +0000
ROA not before: Fri 11 Sep 2026 12:45:21 +0000
ROA not after: Fri 10 Sep 2027 12:50:21 +0000
asID: 23961
IP address blocks: 201.50.0.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:f9:99:6c:37:d8:8f:4e:5c:ee:06:19:1a:bb:25:0b:d3:a6:a7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:21 2026 GMT
Not After : Sep 10 12:50:21 2027 GMT
Subject: CN=154125FF31C20F55C5BFFA53839DF0CD86D3882A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:e8:75:79:7e:8b:e0:77:c4:0a:ff:17:75:
8a:fe:1e:bb:2b:50:f0:c4:1d:42:07:3a:40:71:78:
fd:3c:6c:55:09:57:2c:c2:2e:58:d1:67:99:2d:ad:
5e:9c:83:fe:11:dc:c5:05:6e:b5:7d:32:7b:7d:ca:
27:33:1f:c9:b1:e3:cb:1e:30:88:47:a7:b2:c3:f9:
d2:7f:e1:d1:2d:48:68:6e:c4:77:b9:71:19:86:1e:
90:c7:9f:79:1c:c2:93:46:fd:77:e0:c2:59:83:87:
d4:9e:3a:2f:5f:41:d3:83:02:40:10:9f:69:a8:b1:
ac:5a:ca:0f:8a:45:ec:34:4a:a6:d5:88:b1:c2:83:
4d:1e:6b:4d:fd:52:6f:eb:47:02:62:74:8a:3a:f3:
c2:6c:c6:65:b1:4a:14:b8:47:18:7c:18:4d:f9:ed:
ee:da:bb:63:f6:4c:d7:c6:31:f1:63:1c:6f:25:15:
b9:cf:e0:e9:ac:e0:24:c9:54:f4:4f:4b:ed:ec:94:
02:f8:c5:ff:01:0b:f5:82:b4:59:8f:e1:da:84:fa:
20:4e:03:a2:fb:59:52:7e:59:b8:2d:b6:00:6d:21:
86:6b:cd:0d:4c:9c:8e:92:4b:dd:a3:fb:94:41:8d:
a2:da:d6:57:79:97:af:da:24:ea:10:bf:33:7f:a1:
a6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:41:25:FF:31:C2:0F:55:C5:BF:FA:53:83:9D:F0:CD:86:D3:88:2A
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e302e302f32302d3332203d3e203233393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.0.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:89:98:7c:ca:c4:4f:d9:d9:42:04:c5:58:f0:6a:23:a0:d6:
36:92:8b:40:a9:2d:b3:8a:60:d9:8a:0f:37:7b:eb:5b:d6:42:
ca:dd:4a:db:88:07:c8:91:70:99:d4:bf:cf:8a:8b:94:c0:d5:
30:2c:71:d2:c9:81:07:8f:e6:4a:ad:a7:98:7e:88:cf:d4:f4:
8a:61:5b:31:99:09:b3:6b:e1:f2:ec:c6:27:5c:1b:49:8e:a2:
e7:b1:49:a5:1d:33:01:ac:ce:dc:35:4f:49:e6:70:49:c5:0a:
3e:41:57:06:c8:71:ec:cc:d6:f0:2e:89:de:70:fa:ff:00:b3:
3d:8a:59:20:a7:66:f1:8b:22:e8:40:9f:78:15:dc:31:f8:8a:
2b:b1:88:49:03:f1:c1:45:5f:b2:60:62:1f:87:9a:28:7e:68:
82:0a:71:88:0c:bf:28:6b:4b:ab:c6:be:bd:cd:66:32:54:24:
2f:af:4c:59:04:a1:6a:83:b4:8f:2c:28:f7:9e:dc:0f:87:3d:
fe:9b:2c:32:91:68:5b:3c:08:78:f2:98:33:e8:48:74:78:d6:
75:8f:87:71:6c:d3:2c:27:13:36:2d:9b:42:8c:b0:0e:0b:23:
83:e1:d4:e3:65:42:c9:80:32:a1:d3:3e:43:bf:fa:6b:9d:05:
fa:97:f0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:17:09 2026 by rpki-client