Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e302e302f32302d3332203d3e203335343837.roa
File: 3230312e35302e302e302f32302d3332203d3e203335343837.roa (raw, json)
Hash identifier: cxmy3kIvPh6s/1LnEwWKks49FiEuuQvkqmFi12hPpdI=
Subject key identifier: 7F:40:53:29:0B:35:C8:EB:6C:2D:F8:76:C8:25:52:E9:FB:39:59:A8
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 3A6726308A04B0E710438B92BD0D2EC7BD426598
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e302e302f32302d3332203d3e203335343837.roa
Signing time: Fri 11 Sep 2026 12:50:16 +0000
ROA not before: Fri 11 Sep 2026 12:45:16 +0000
ROA not after: Fri 10 Sep 2027 12:50:16 +0000
asID: 35487
IP address blocks: 201.50.0.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 02:27:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:67:26:30:8a:04:b0:e7:10:43:8b:92:bd:0d:2e:c7:bd:42:65:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:16 2026 GMT
Not After : Sep 10 12:50:16 2027 GMT
Subject: CN=7F4053290B35C8EB6C2DF876C82552E9FB3959A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:5b:71:03:c8:f7:1b:87:b8:4b:24:3b:82:
9a:af:e9:6e:20:94:31:2f:96:ad:7a:78:46:86:d5:
20:f7:1d:a3:01:16:08:f2:0a:0e:44:bf:e4:f5:9a:
f9:2c:f6:ef:2f:b2:79:f1:a4:3e:0e:28:49:6e:6a:
fb:94:d6:56:78:91:c9:49:db:66:78:63:ca:f6:ca:
83:42:71:5b:a3:10:a5:47:41:d3:33:22:53:eb:be:
92:b5:c1:ae:46:1f:03:9a:d9:f0:72:43:18:c7:23:
27:ab:85:6a:ee:21:f7:1c:7b:f6:a7:ac:3f:da:b7:
d3:e6:55:f0:58:61:5c:e3:1e:ab:2b:75:78:44:46:
bd:10:e0:8a:f4:60:54:89:09:25:e9:1d:86:5c:e6:
cc:0b:69:71:06:f2:d0:f8:b7:25:9a:37:c3:a5:1f:
a4:64:1e:f6:65:b9:33:68:a6:eb:3e:f9:55:49:34:
bb:58:bc:2b:1e:ab:89:18:db:23:30:f9:da:43:62:
d5:e8:87:36:d5:8a:0b:f2:29:50:18:c3:9a:3e:fc:
44:1a:1c:ab:5a:97:4c:76:33:6d:1d:a7:53:bf:ee:
0b:53:50:58:7d:61:3d:ba:28:bd:50:ca:82:ed:39:
2e:d1:52:1c:83:85:47:7b:5f:69:44:75:6a:09:32:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:40:53:29:0B:35:C8:EB:6C:2D:F8:76:C8:25:52:E9:FB:39:59:A8
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e302e302f32302d3332203d3e203335343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.0.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:49:f3:28:bc:34:c9:c8:6a:db:ec:08:3d:b3:e7:c5:f9:26:
59:54:39:0a:e8:aa:f8:bf:9a:06:e8:f6:65:83:63:4e:9f:e0:
f1:94:4c:1c:ad:6f:d5:56:1e:12:f4:e2:ea:25:81:87:d3:4f:
c2:db:85:bc:5f:6d:eb:b8:33:aa:e3:b8:90:ef:0c:18:08:1d:
85:61:73:67:39:42:13:29:b4:90:69:42:a5:2f:ae:6d:b8:70:
8a:ef:02:03:a2:42:3b:5a:02:7d:16:67:e4:bb:64:4f:58:9e:
d0:cb:70:c1:8f:e2:0e:29:c8:49:3e:5f:24:95:35:d2:24:39:
14:34:6b:d1:e6:1a:bf:4f:88:0c:27:5b:61:68:54:0b:20:35:
b7:63:19:27:d2:61:12:d5:75:94:72:e8:5f:5f:57:08:96:47:
48:c6:9d:00:68:13:24:c6:03:88:68:03:ef:96:3c:fc:d8:f5:
c9:69:48:8f:4a:a7:b2:85:43:ab:9e:27:6f:71:d1:a9:1e:dc:
b5:09:51:8c:25:5a:3b:13:9f:66:5d:8e:fd:da:45:4c:f4:48:
a2:87:e8:e2:c7:3c:52:f3:05:30:df:01:18:9e:eb:a8:d8:50:
45:9f:e3:9e:da:cb:bd:35:83:04:54:17:78:b0:96:ca:87:88:
e6:fe:46:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:18:02 2026 by rpki-client