Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e3232342e302f32342d3234203d3e203630333236.roa
File: 3137372e3137372e3232342e302f32342d3234203d3e203630333236.roa (raw, json)
Hash identifier: IN+YllwkR1FWZAEbAPZjDy8pp86M2J4Vo+MuthHkyLk=
Subject key identifier: 5F:79:EA:B3:43:EC:29:05:51:33:17:F4:49:59:55:25:A1:07:2E:C7
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 7C016AEC521DDB2CC10E32CD3E1CF1BA40B01402
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e3232342e302f32342d3234203d3e203630333236.roa
Signing time: Fri 11 Sep 2026 13:06:14 +0000
ROA not before: Fri 11 Sep 2026 13:01:14 +0000
ROA not after: Fri 10 Sep 2027 13:06:14 +0000
asID: 60326
IP address blocks: 177.177.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:01:6a:ec:52:1d:db:2c:c1:0e:32:cd:3e:1c:f1:ba:40:b0:14:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 13:01:14 2026 GMT
Not After : Sep 10 13:06:14 2027 GMT
Subject: CN=5F79EAB343EC2905513317F449595525A1072EC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:a9:29:d0:5a:3c:da:88:8e:df:5f:9d:80:
5a:d9:00:95:db:9e:20:5c:99:cd:dc:7d:ff:9b:8c:
70:43:b4:d0:7b:ed:0e:23:9b:cc:eb:de:b7:ac:ef:
c5:df:75:35:31:cc:15:13:2f:19:72:87:3d:10:c4:
58:73:65:57:0a:d2:c0:c3:49:0d:db:f8:9e:e4:ad:
ce:91:3f:a5:7e:01:a3:14:2b:c8:4a:ff:ce:04:a3:
1d:f2:30:8f:1d:5d:6f:1c:75:47:b7:32:98:06:f5:
ac:f1:87:5e:8f:06:5a:8c:a9:5c:76:a8:b3:0e:b3:
6e:2f:3e:9e:44:51:9d:12:ac:a6:3b:f8:0a:36:91:
33:4b:98:96:7d:2a:f5:33:b2:64:75:d0:da:cb:ae:
36:0f:d2:ba:2c:99:b5:ce:09:2a:95:a7:b7:85:db:
fc:cc:5f:27:a1:cd:29:6f:ba:8a:85:9b:b1:32:a2:
fa:cb:40:33:85:36:4f:35:31:b5:8c:86:62:f8:ad:
fa:52:3e:cd:8d:29:39:4e:ba:49:f9:0f:35:ce:e9:
bd:2e:27:ae:29:bd:f8:2e:c8:46:c9:0d:36:ad:1e:
f8:d5:7d:8c:8e:b9:8d:7c:f9:22:a8:d2:da:a7:c4:
d0:9f:e2:72:1e:de:7a:35:f3:8d:06:2b:c7:a4:1a:
d9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:79:EA:B3:43:EC:29:05:51:33:17:F4:49:59:55:25:A1:07:2E:C7
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e3232342e302f32342d3234203d3e203630333236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.224.0/24
Signature Algorithm: sha256WithRSAEncryption
13:06:ed:fe:ab:4c:a1:f3:a1:5d:7f:ef:60:d0:20:ec:ad:0b:
e9:e0:74:90:68:36:aa:b8:2a:a1:09:a3:55:22:f0:83:52:1c:
49:d3:f1:cb:ac:81:29:a9:73:08:b7:81:5b:00:db:a9:7a:dd:
42:66:65:78:6b:bc:ce:24:dc:32:6a:aa:aa:f8:dd:d0:85:5d:
f2:fa:3f:ed:b1:25:a8:01:8d:ba:67:a4:fc:b3:e6:92:d3:97:
ce:80:a3:d3:79:98:6e:2a:39:58:fa:8f:8b:c4:76:94:3e:b1:
4d:6f:df:fd:60:25:21:e1:d5:50:20:2d:39:e7:bf:6f:b4:82:
13:07:3e:99:4c:80:6e:17:c9:e6:19:55:40:83:d7:16:63:bc:
30:a1:79:b8:20:64:b0:a0:73:5d:79:73:67:e1:26:83:4e:fe:
5f:0b:b8:12:e0:90:c1:bb:11:e6:7c:c9:78:e7:2f:d5:9a:3f:
88:ec:08:4a:9e:46:c7:8b:38:cc:82:6f:3f:0a:f0:78:ac:e5:
a3:cc:6b:bb:a3:77:86:45:3e:93:b7:62:d2:67:ea:c2:53:12:
c2:f5:9a:3a:38:30:35:92:f7:0f:8a:ec:ee:e0:4d:85:08:20:
71:a1:f0:52:b3:7e:e1:fa:3a:2a:2a:16:39:c6:b7:a4:1a:1a:
30:ea:ca:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:27:45 2026 by rpki-client