Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e302e302f32302d3332203d3e20393137.roa
File: 3230312e35302e302e302f32302d3332203d3e20393137.roa (raw, json)
Hash identifier: LV5vXg1tBVGVGbGvuwuejlVcIl0gybi5ijTXlVnWnYs=
Subject key identifier: 1D:5B:05:DC:F5:09:BB:B7:28:B1:23:CB:21:58:95:8E:C7:0E:56:5F
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 5E564BC7ECB20ADEFE4499949D880224CA8AE262
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e302e302f32302d3332203d3e20393137.roa
Signing time: Fri 11 Sep 2026 12:50:28 +0000
ROA not before: Fri 11 Sep 2026 12:45:28 +0000
ROA not after: Fri 10 Sep 2027 12:50:28 +0000
asID: 917
IP address blocks: 201.50.0.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:56:4b:c7:ec:b2:0a:de:fe:44:99:94:9d:88:02:24:ca:8a:e2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:28 2026 GMT
Not After : Sep 10 12:50:28 2027 GMT
Subject: CN=1D5B05DCF509BBB728B123CB2158958EC70E565F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:00:4e:63:f0:f8:c5:74:79:fe:64:88:05:
7e:80:04:75:b2:cf:15:8f:c9:b4:92:fa:84:3a:a8:
5d:7b:de:bc:e9:92:0d:5f:b4:95:14:aa:23:a0:40:
d8:6f:96:fa:44:db:38:88:db:07:ec:bf:b0:f0:01:
bc:70:da:31:38:3e:94:77:57:29:56:9c:d4:1e:9c:
ec:d5:14:b3:25:e6:9b:e8:0c:35:45:7f:b4:c7:2d:
5f:e1:36:7e:f0:ab:00:37:83:7f:ef:91:04:36:41:
ce:ba:c0:bd:37:eb:ea:fc:19:f3:8a:9f:65:a5:1e:
f8:1b:99:82:6e:1b:6c:2c:85:67:30:d0:d7:e0:46:
1c:10:f0:d1:3d:5c:7d:52:36:ef:de:16:62:b4:82:
43:9b:b3:3c:0d:b6:84:f6:2a:91:2d:c2:f5:65:d6:
ff:4e:de:2c:a4:60:0d:45:c1:dc:f4:30:5b:13:e2:
e8:14:dd:28:21:ea:6c:93:c3:ef:b4:8d:8e:45:9a:
65:88:89:92:11:d1:91:4b:06:e4:4b:34:f9:27:6e:
89:aa:b6:5f:4b:40:00:51:e5:3b:34:52:5f:3a:0e:
9b:3c:d7:3c:d1:3b:62:8f:e2:3e:e6:d8:ba:02:4c:
c7:c8:da:bc:87:b1:08:51:26:1f:7a:bb:33:31:79:
23:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5B:05:DC:F5:09:BB:B7:28:B1:23:CB:21:58:95:8E:C7:0E:56:5F
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e302e302f32302d3332203d3e20393137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.0.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:e1:43:07:a7:12:c7:76:69:7e:ab:b9:89:bb:47:92:2c:a7:
7b:b7:ac:c5:bd:3c:11:48:c9:a4:a3:ed:e7:7f:b9:a2:16:58:
47:db:a9:6c:79:3f:07:b0:98:df:2d:40:57:48:5a:c7:2a:4d:
de:58:fa:5b:e6:62:e7:1d:c0:6a:b8:98:16:b0:fc:e5:61:b5:
f8:95:5c:56:5c:e2:8c:b1:5a:f6:f8:cb:59:fa:df:19:6a:03:
f7:56:3f:e3:b8:0c:cd:96:87:66:f6:e9:d1:78:37:92:91:4f:
75:97:43:5e:3f:3e:c1:92:9b:63:ad:5d:74:26:4a:83:a2:46:
08:cb:cb:7c:fc:66:b1:f0:2d:96:32:ac:a5:99:5b:83:f6:b0:
11:07:0b:63:53:c7:b8:8c:49:6b:8f:00:3b:66:6e:ef:63:df:
db:b0:0b:39:7b:bf:66:94:72:0a:03:bf:9c:5b:63:b0:c7:61:
a7:f8:a0:3c:e9:59:e5:ca:56:70:01:35:09:2f:82:82:4b:be:
62:9d:44:2e:a8:fa:ef:db:57:4c:4c:6f:60:bf:60:24:1f:73:
c5:0e:7e:1e:00:c2:80:b2:2d:9b:89:8a:53:e2:bc:a3:af:37:
79:fe:00:fc:51:93:17:88:6c:75:f5:13:9b:cb:61:bf:9e:db:
db:d1:a8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:09:09 2026 by rpki-client