Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3232342e302f32342d3234203d3e20343032323135.roa
File: 3135322e3233372e3232342e302f32342d3234203d3e20343032323135.roa (raw, json)
Hash identifier: dWi9IniZ1IeVVCfFZL1m2d5857OnH3ct/JobTp6qDpg=
Subject key identifier: 78:76:6F:6E:26:0C:F7:A4:00:26:88:2B:B9:C2:27:54:9E:50:54:23
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 54342E3F3021C7492D7CA9EFE504F19E61B00902
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3232342e302f32342d3234203d3e20343032323135.roa
Signing time: Fri 24 Jul 2026 11:17:00 +0000
ROA not before: Fri 24 Jul 2026 11:12:00 +0000
ROA not after: Fri 23 Jul 2027 11:17:00 +0000
asID: 402215
IP address blocks: 152.237.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:34:2e:3f:30:21:c7:49:2d:7c:a9:ef:e5:04:f1:9e:61:b0:09:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 24 11:12:00 2026 GMT
Not After : Jul 23 11:17:00 2027 GMT
Subject: CN=78766F6E260CF7A40026882BB9C227549E505423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:e8:25:3d:6a:14:82:fa:59:8f:aa:28:d8:
fa:fa:72:5a:7b:72:6a:ab:43:7e:87:11:69:78:fa:
59:6a:3b:18:77:1b:43:c2:eb:8e:ce:e8:23:c8:9f:
a2:25:c0:b1:9b:ba:a7:04:80:1c:b0:43:44:4e:af:
1e:2e:d3:de:8a:4e:2c:9c:04:78:de:4c:85:76:fb:
79:8d:26:21:c6:25:19:0f:57:a8:cb:21:b2:2e:78:
21:c9:27:b7:ad:d3:a7:4e:70:d2:21:39:ea:f3:e6:
db:16:a8:79:94:89:60:75:29:ae:24:6f:12:18:7b:
46:36:97:c7:6b:3a:51:ce:e8:0e:72:9e:76:02:9f:
68:eb:18:41:b9:1d:3c:93:66:70:ae:de:91:80:4f:
fa:9b:d7:31:bb:3b:74:8e:dd:12:90:d0:0e:31:71:
49:14:5b:f0:f9:ac:2f:a1:88:a6:f3:5b:f4:40:ad:
3b:8d:0e:71:64:eb:d3:f6:e2:ea:32:90:1f:e2:ff:
d8:31:cf:1f:6d:be:35:23:1e:81:b9:6c:90:11:ee:
ff:6e:89:04:c3:a6:5f:7d:31:b6:c7:03:42:e7:63:
7e:1b:72:e3:90:4b:18:34:ab:2a:bd:b8:8d:55:62:
61:84:b2:b6:a2:95:09:9d:61:fc:2d:0d:98:ab:50:
dd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:76:6F:6E:26:0C:F7:A4:00:26:88:2B:B9:C2:27:54:9E:50:54:23
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3232342e302f32342d3234203d3e20343032323135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.224.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:8a:11:e5:62:fb:e3:04:6a:ee:40:a9:cc:ba:3e:c7:ce:70:
26:cf:48:05:de:c4:bf:b9:f7:fc:d4:38:59:e9:53:dd:b2:d6:
1d:ef:a7:06:83:56:04:63:b7:be:d5:1d:e6:56:cf:92:0f:2b:
44:68:0c:f9:29:60:df:a8:c2:38:93:ae:a3:b1:1c:ab:a1:70:
1e:8b:d8:19:f7:89:a8:63:c5:b0:9c:cd:1a:ff:e4:f4:cc:ac:
25:c2:4d:2b:7a:b7:99:1c:0f:c6:01:49:1b:2c:41:dc:1a:f9:
10:28:01:b2:ad:21:50:ed:89:f6:b2:63:4e:f1:91:e1:ad:64:
20:5f:e6:61:11:52:59:15:07:a4:85:7e:4c:cc:70:94:ad:03:
ce:b7:0b:ac:ed:2c:68:35:47:79:39:16:00:05:ae:83:19:4e:
7b:0e:7e:31:f7:07:d0:44:08:44:21:35:b1:e1:3b:7d:e9:b5:
a0:4b:c5:8a:53:7d:df:25:a8:f8:6b:02:77:5e:f7:f1:aa:ca:
ab:b9:48:26:6c:6e:ca:0c:37:b2:6a:b3:ef:f7:ca:1e:bb:aa:
a7:50:d0:f9:7e:f7:c9:fc:3a:4d:ed:74:f0:e8:d1:a2:37:af:
46:d3:bc:79:71:ea:5a:91:f5:e4:8e:17:34:5b:c4:5f:60:dc:
ff:bb:1c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:06:55 2026 by rpki-client