Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e31372e302f32342d3234203d3e20343032323635.roa
File: 3230312e35302e31372e302f32342d3234203d3e20343032323635.roa (raw, json)
Hash identifier: 0dslTDYDh7bjV+wUsgGMOavHDFwZym35kGBTbwV9928=
Subject key identifier: CD:D3:60:62:63:3E:18:D6:23:F1:C6:A8:F9:52:13:38:16:C3:7B:6A
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 49E162424F2C52F3807BB000A4C5488688E2C99C
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e31372e302f32342d3234203d3e20343032323635.roa
Signing time: Tue 28 Jul 2026 14:04:46 +0000
ROA not before: Tue 28 Jul 2026 13:59:46 +0000
ROA not after: Tue 27 Jul 2027 14:04:46 +0000
asID: 402265
IP address blocks: 201.50.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:e1:62:42:4f:2c:52:f3:80:7b:b0:00:a4:c5:48:86:88:e2:c9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 28 13:59:46 2026 GMT
Not After : Jul 27 14:04:46 2027 GMT
Subject: CN=CDD36062633E18D623F1C6A8F952133816C37B6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:c3:2a:51:1e:88:f0:b9:94:94:3f:0c:d1:
ba:22:58:20:28:c2:c1:07:b9:c5:01:a1:d5:f3:3f:
c4:42:52:fe:27:a1:7d:1c:30:e1:be:03:df:8f:59:
c4:c0:54:b9:41:54:80:c0:73:1a:2e:2f:c6:3c:1c:
6f:78:f5:ca:5b:96:b2:7e:2e:22:b2:b9:ac:fd:6e:
00:58:98:06:c0:5e:ac:1c:72:e9:21:4b:86:7d:89:
75:6b:a7:21:80:bf:de:7a:f7:6f:95:bc:46:8f:b2:
7f:1d:24:c7:07:cf:48:e5:ae:74:9e:4b:94:eb:32:
8b:bc:8f:7b:ac:6e:63:0e:5a:37:b6:66:5a:20:c0:
65:e5:96:48:dc:d8:10:fb:33:40:bc:bb:8b:16:e7:
75:42:91:44:6e:b1:81:b9:74:8a:c1:02:aa:b4:c9:
ff:df:39:a4:cc:cb:b8:3e:da:61:dd:4b:ea:ae:70:
d2:69:90:fd:b0:d8:19:c0:b9:84:1a:b7:9b:ef:85:
e3:34:72:f1:02:91:96:54:df:5c:a0:13:6b:f1:52:
d8:f7:f3:39:39:e7:7c:83:d3:90:ce:29:4b:67:90:
b8:a4:61:da:01:e5:b2:e6:bb:d6:55:b2:c5:b8:d0:
7c:0a:0a:4a:9e:96:46:d1:04:0a:0f:59:d6:f0:0f:
fc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D3:60:62:63:3E:18:D6:23:F1:C6:A8:F9:52:13:38:16:C3:7B:6A
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e31372e302f32342d3234203d3e20343032323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.17.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:6c:20:b6:a7:68:60:b5:09:2e:e0:de:78:f8:db:75:31:a4:
67:3d:b2:3a:bc:ab:b3:23:76:31:af:bf:6e:2f:75:7a:3c:23:
c6:c3:54:f9:45:01:65:38:dd:35:74:b3:e5:f8:47:c0:f1:2a:
6f:b3:72:51:cb:10:32:5c:40:d4:8e:1e:eb:79:e4:7a:2f:b3:
21:bc:7e:ed:04:fa:70:e0:b9:c1:6c:67:0d:af:05:fd:99:b7:
81:4d:98:d8:67:32:cf:90:f7:30:6c:f7:27:c5:f5:a0:d5:31:
21:48:17:51:67:8d:f3:ef:4c:e2:8a:f3:cb:96:e6:5e:ff:fb:
5a:8b:fc:ed:a3:9c:0b:61:b6:46:fc:d0:71:39:30:b7:83:c3:
e4:c0:c5:cd:99:7c:59:5a:0b:4b:3d:fd:e6:3f:b1:fe:7e:7d:
0e:61:e7:39:b3:19:99:da:9b:ae:88:93:20:2c:7d:03:79:8f:
a5:32:da:a0:e3:5d:02:d9:a3:59:b3:2a:37:4a:bb:16:b0:10:
cc:6d:e1:64:7b:47:ca:41:d1:fd:8f:72:ba:3c:6d:85:af:db:
09:fa:83:ae:05:6e:1d:5e:8c:43:da:fe:29:60:97:aa:84:a2:
50:90:a6:0b:63:78:82:de:5e:bd:ac:54:bc:93:e0:85:19:03:
6e:2b:68:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:24:58 2026 by rpki-client