Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33302e302f32342d3234203d3e20313532383638.roa
File: 3230312e35302e33302e302f32342d3234203d3e20313532383638.roa (raw, json)
Hash identifier: MTvZCZIVJ0KBFLzUvnsMiJi76xwdqjPYDYZIqIuw8LU=
Subject key identifier: 5C:35:4F:9D:EC:FE:A6:C5:27:3A:5F:87:43:51:E4:02:ED:48:9E:08
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 659658DE6305F2FE192CD9041374608C1CA1C1E7
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33302e302f32342d3234203d3e20313532383638.roa
Signing time: Tue 28 Jul 2026 13:59:31 +0000
ROA not before: Tue 28 Jul 2026 13:54:31 +0000
ROA not after: Tue 27 Jul 2027 13:59:31 +0000
asID: 152868
IP address blocks: 201.50.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:96:58:de:63:05:f2:fe:19:2c:d9:04:13:74:60:8c:1c:a1:c1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 28 13:54:31 2026 GMT
Not After : Jul 27 13:59:31 2027 GMT
Subject: CN=5C354F9DECFEA6C5273A5F874351E402ED489E08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8c:1a:d0:47:7d:c7:d5:09:c7:fb:63:93:e4:
be:2e:00:d4:71:a0:ad:85:1f:b0:47:1c:75:19:29:
b9:90:44:96:2d:bd:77:7c:67:9a:4d:36:f6:a0:17:
71:be:a5:13:79:e8:7a:9e:b8:14:4a:d4:6a:93:8b:
43:23:ef:b4:51:b4:fa:30:72:f8:42:e4:c9:ec:cd:
77:61:c6:6e:48:0e:ea:3c:39:e7:1c:03:3d:0c:5e:
4c:24:f9:ce:cb:7d:bc:73:a2:3e:be:55:22:6d:11:
77:4c:74:52:94:0b:29:77:c6:e4:8a:3b:9d:b5:dd:
f5:ae:4e:f2:28:b4:20:b5:5d:70:dc:85:95:6e:e0:
e5:fe:37:84:a8:0d:c7:c7:8b:7e:8e:8b:52:bf:f0:
bc:22:d0:37:27:5f:36:d6:71:b9:84:b7:10:08:8e:
c5:bb:4e:f1:61:2c:fb:ef:5d:b4:f1:a5:b7:97:21:
4d:b6:a3:bc:ed:53:de:19:a2:6e:5d:7d:ce:b4:ce:
da:c5:fe:99:bc:3a:c2:09:64:45:5c:6d:6c:74:6e:
be:66:e5:c5:bf:88:b9:fa:3c:65:2b:98:0d:13:b3:
01:50:11:3e:33:78:e9:8f:62:4c:7e:15:dc:0b:a7:
25:ba:62:2d:db:5c:da:ff:d8:6c:61:37:da:42:0f:
82:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:35:4F:9D:EC:FE:A6:C5:27:3A:5F:87:43:51:E4:02:ED:48:9E:08
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33302e302f32342d3234203d3e20313532383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:27:cc:cd:b7:28:52:32:f3:7b:d1:4a:85:a3:61:d0:36:8b:
7e:32:78:d5:9d:e7:8e:b1:91:57:27:36:ef:b4:3c:cf:c7:a9:
f7:8b:a0:6d:c6:7b:32:f2:6a:ee:19:99:40:56:a8:1f:bc:ad:
81:e4:a7:b9:08:2b:a1:e2:32:8f:78:f4:77:8a:ec:41:82:e9:
42:46:6f:76:76:d1:af:2d:6d:2a:d3:bd:03:de:15:d6:95:84:
9f:a4:dd:3e:b7:9e:29:11:20:0d:0f:33:37:2e:de:6c:34:0f:
76:e9:23:9f:94:94:94:8d:74:05:06:9b:cd:c7:fd:77:b4:72:
a5:24:e1:74:74:94:65:8d:70:da:7c:ad:40:e3:8d:59:2a:c5:
08:92:1e:be:bc:41:ea:a9:39:76:95:ee:86:39:7e:e3:a8:6f:
c1:00:93:c3:12:f5:58:d5:f7:53:87:fc:66:09:59:88:5b:7a:
9f:22:4d:7a:cd:04:a9:1f:6a:f4:7f:6d:26:5d:87:1d:dd:69:
ac:c5:d9:5f:a9:3b:b2:fe:72:f3:d3:72:b5:c7:2f:d2:85:08:
f1:62:8d:07:b0:e5:50:1b:1f:67:b9:9d:0f:e4:61:10:c4:4e:
4a:2e:28:79:25:cd:65:18:a3:03:82:f7:2c:d0:45:a3:a0:16:
37:81:bc:0e
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZZZY3mMF8v4ZLNkEE3RgjByhwecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA3MjgxMzU0MzFaFw0yNzA3MjcxMzU5MzFaMDMxMTAvBgNV
BAMTKDVDMzU0RjlERUNGRUE2QzUyNzNBNUY4NzQzNTFFNDAyRUQ0ODlFMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCajBrQR33H1QnH+2OT5L4uANRx
oK2FH7BHHHUZKbmQRJYtvXd8Z5pNNvagF3G+pRN56HqeuBRK1GqTi0Mj77RRtPow
cvhC5MnszXdhxm5IDuo8OeccAz0MXkwk+c7Lfbxzoj6+VSJtEXdMdFKUCyl3xuSK
O5213fWuTvIotCC1XXDchZVu4OX+N4SoDcfHi36Oi1K/8Lwi0DcnXzbWcbmEtxAI
jsW7TvFhLPvvXbTxpbeXIU22o7ztU94Zom5dfc60ztrF/pm8OsIJZEVcbWx0br5m
5cW/iLn6PGUrmA0TswFQET4zeOmPYkx+FdwLpyW6Yi3bXNr/2GxhN9pCD4IRAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUXDVPnez+psUnOl+HQ1HkAu1InggwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzIzMDMxMmUzNTMwMmUzMzMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzNjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
yTIeMA0GCSqGSIb3DQEBCwUAA4IBAQA9J8zNtyhSMvN70UqFo2HQNot+MnjVneeO
sZFXJzbvtDzPx6n3i6Btxnsy8mruGZlAVqgfvK2B5Ke5CCuh4jKPePR3iuxBgulC
Rm92dtGvLW0q070D3hXWlYSfpN0+t54pESANDzM3Lt5sNA926SOflJSUjXQFBpvN
x/13tHKlJOF0dJRljXDafK1A441ZKsUIkh6+vEHqqTl2le6GOX7jqG/BAJPDEvVY
1fdTh/xmCVmIW3qfIk16zQSpH2r0f20mXYcd3WmsxdlfqTuy/nLz03K1xy/ShQjx
Yo0HsOVQGx9nuZ0P5GEQxE5KLih5Jc1lGKMDgvcs0EWjoBY3gbwO
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:00:57 2026 by rpki-client