Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2036323333.roa
File: 3230312e35302e33322e302f31392d3234203d3e2036323333.roa (raw, json)
Hash identifier: Lv+ZvhTtVlYc/JvDCP4pL2DuKvKs1Y5SiCDu8gR+7Ns=
Subject key identifier: 85:61:35:18:71:8D:E7:74:3B:06:5D:B3:A4:FA:85:8E:E2:63:E7:EF
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 5D92A1AA552C8DEE001B6C102367BA103B89AD4C
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2036323333.roa
Signing time: Fri 11 Sep 2026 12:50:33 +0000
ROA not before: Fri 11 Sep 2026 12:45:33 +0000
ROA not after: Fri 10 Sep 2027 12:50:33 +0000
asID: 6233
IP address blocks: 201.50.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:92:a1:aa:55:2c:8d:ee:00:1b:6c:10:23:67:ba:10:3b:89:ad:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:33 2026 GMT
Not After : Sep 10 12:50:33 2027 GMT
Subject: CN=85613518718DE7743B065DB3A4FA858EE263E7EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:09:87:33:7c:b4:29:9d:a6:af:ef:43:29:4c:
5c:3b:fd:ca:44:23:4e:4e:73:32:e9:4b:09:c7:aa:
d9:e1:50:f6:b2:75:62:2a:df:8e:d2:48:9e:49:0e:
47:71:89:8b:1c:6f:13:ec:ce:96:a3:46:3e:5c:4b:
4c:be:7c:f9:50:3e:b3:04:69:ae:bd:ce:d5:5d:e2:
f4:94:72:e5:ec:df:81:8c:c7:b8:20:d0:39:7f:6e:
b0:6d:be:eb:88:f4:49:52:b5:6c:4a:82:75:24:3d:
27:51:c7:d1:1a:cc:9a:0f:7d:1c:b9:9b:0b:ee:f6:
66:84:25:9e:d4:51:28:00:36:e3:dd:55:8f:76:3b:
e6:4a:1d:46:1c:65:f5:6a:04:26:84:be:50:6e:3c:
1a:7e:98:3e:f2:26:56:30:5b:63:80:1b:ce:08:82:
be:69:e9:5d:87:94:d4:aa:21:e1:61:43:23:e6:8c:
55:1c:b8:73:d9:47:a6:b4:6e:c4:8c:e1:7f:36:84:
1c:1b:a9:0d:5f:46:b1:66:bd:d3:5c:7f:6b:30:f7:
08:a0:52:6f:c3:10:27:27:71:d7:4d:f2:64:55:95:
99:8b:bd:73:77:d0:b1:1d:41:78:b8:16:8a:82:2c:
7f:af:cd:8f:2f:1c:b8:cd:39:21:31:e2:20:0b:8b:
78:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:61:35:18:71:8D:E7:74:3B:06:5D:B3:A4:FA:85:8E:E2:63:E7:EF
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3230312e35302e33322e302f31392d3234203d3e2036323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.32.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:7e:6e:5a:8b:c9:ee:d3:7f:79:aa:fe:52:21:6e:96:41:7d:
2f:7a:ca:d2:90:74:d6:09:fc:d2:96:5c:91:7e:47:6d:f1:a5:
03:77:fe:28:35:2c:01:5d:6f:5d:f5:30:22:28:9d:c5:a8:a1:
af:28:9c:b5:22:7e:73:88:f7:c8:0c:fa:8e:66:7a:5c:fe:4f:
2b:5f:5f:9e:73:b6:0c:64:77:78:98:fd:16:53:0e:7f:8f:e9:
fc:a4:a9:22:ed:8f:02:b2:6c:92:ba:42:66:24:a2:4f:9a:66:
a9:43:87:42:32:d9:ad:35:1c:85:c0:27:3e:20:ff:fc:24:f5:
b8:14:69:e3:99:8b:aa:d4:6d:ce:98:44:a9:75:c7:e2:64:d4:
53:67:1c:3d:14:2b:14:98:00:1b:e1:83:5c:8f:98:a0:26:b4:
84:a4:b4:ab:c5:8c:43:74:6d:35:20:37:7b:b2:03:e5:d5:c7:
48:83:1c:d3:0b:c3:6d:5c:db:5c:5b:c3:07:1e:f2:87:97:ba:
f0:b2:ff:6a:5d:e2:a4:46:d9:b4:13:29:32:e5:0b:af:be:78:
29:25:31:61:0c:d0:1d:8f:02:9f:9c:5f:0f:d9:5a:6d:73:4c:
20:63:9b:72:64:4d:71:5c:75:ff:e4:a3:64:d3:ac:ac:21:e2:
bd:80:b8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:54:31 2026 by rpki-client