Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e32312e302f32342d3234203d3e20323139343237.roa
File: 3230312e35302e32312e302f32342d3234203d3e20323139343237.roa (raw, json)
Hash identifier: NqRelUFEnQAaZNkKKn/rKOL/yOyYhQ1C8Y+iohFMJyw=
Subject key identifier: CB:16:57:B0:3C:E7:B5:92:43:0C:80:42:2A:65:4C:1C:A2:EA:4E:3C
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 0F5A7B0EF08551DD3548645053F68D582211645C
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e32312e302f32342d3234203d3e20323139343237.roa
Signing time: Tue 28 Jul 2026 14:00:07 +0000
ROA not before: Tue 28 Jul 2026 13:55:07 +0000
ROA not after: Tue 27 Jul 2027 14:00:07 +0000
asID: 219427
IP address blocks: 201.50.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:5a:7b:0e:f0:85:51:dd:35:48:64:50:53:f6:8d:58:22:11:64:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 28 13:55:07 2026 GMT
Not After : Jul 27 14:00:07 2027 GMT
Subject: CN=CB1657B03CE7B592430C80422A654C1CA2EA4E3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:f4:4e:35:a6:0a:61:69:24:95:a3:b2:83:
f3:17:1c:91:0c:29:82:09:b9:8d:1e:77:3a:6d:ad:
d2:c4:07:36:93:fe:68:5f:47:96:b1:6c:52:ec:25:
10:ea:97:18:5e:fd:e3:12:58:59:7b:22:32:c9:e5:
82:c7:d0:3e:72:d2:99:85:14:a7:0e:11:c8:7f:bb:
0e:ef:b4:74:be:53:e8:69:bc:86:c7:12:44:44:44:
7b:76:69:32:95:29:17:cc:1c:87:bf:05:57:ba:b1:
20:c3:91:a3:92:36:f3:de:0f:53:89:39:15:3d:db:
a1:f4:28:b8:f6:4c:20:5e:9a:4e:9c:0a:53:38:e6:
c5:22:84:0a:a9:8e:d3:eb:fa:1e:32:bd:62:fd:77:
59:84:57:5d:ee:15:24:fe:0d:54:56:1f:cf:20:86:
02:a7:9b:72:80:84:7a:75:df:be:3c:bb:f1:95:37:
fd:8b:c6:d7:db:28:6e:17:fe:a2:88:d1:29:69:a0:
45:3d:10:ca:cc:81:42:8b:c3:67:0e:96:0a:86:72:
86:f9:7a:e1:36:87:6b:97:54:45:3d:e7:31:03:e8:
78:e2:3f:40:36:24:89:57:ca:dd:a5:bd:3e:cd:14:
a9:1f:6a:58:64:88:b8:96:c4:fe:15:3a:34:fa:4b:
c6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:16:57:B0:3C:E7:B5:92:43:0C:80:42:2A:65:4C:1C:A2:EA:4E:3C
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e32312e302f32342d3234203d3e20323139343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.21.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:58:9c:31:cb:df:42:90:e5:25:01:79:bc:60:58:c8:da:a7:
1a:3a:88:34:2f:c6:a7:56:18:bf:3d:71:26:81:d6:fc:82:66:
d8:a4:b4:db:58:f8:ee:9c:cd:8a:17:0f:a9:0e:32:8d:01:85:
8f:b4:4f:e3:3a:60:c5:9e:34:60:b5:b6:e7:9e:23:47:02:8d:
d6:55:57:66:71:d0:5f:47:78:3b:16:03:ab:c2:22:4a:be:25:
37:98:13:0b:09:0f:75:e0:1a:28:fd:14:f8:77:8a:b4:de:0d:
0a:58:89:7e:89:36:f0:ee:bd:7d:ee:24:1b:59:47:7e:97:77:
80:2c:a1:f9:28:5c:b7:a9:98:70:bf:50:c0:cd:2e:c6:2b:74:
69:2e:d4:35:5d:74:0a:f7:75:ac:9c:89:5d:ad:08:c4:61:46:
b2:55:b8:62:ec:d9:39:65:db:52:b0:90:b0:c4:75:7f:66:26:
00:0f:ba:5a:22:12:77:3e:c4:07:c3:5f:27:cf:25:95:61:98:
16:53:18:75:0d:c7:0d:8f:7a:48:29:e5:a4:d5:dd:fe:22:44:
e9:a7:ec:91:2e:70:1e:83:b1:71:ef:ed:bb:90:73:a7:5e:81:
6c:82:39:d9:e0:fb:34:30:cd:69:36:05:b5:b3:91:ea:8a:51:
f5:ae:28:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:16 2026 by rpki-client