Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136362e302f32342d3234203d3e20343032323635.roa
File: 3138362e3234312e3136362e302f32342d3234203d3e20343032323635.roa (raw, json)
Hash identifier: Wj7S8HZqcMcglGvbIP8VcztXsKjdKtcscvgQCJ5xERM=
Subject key identifier: 85:7D:1C:B7:DB:09:0C:F0:3C:60:07:B0:C0:66:4D:E9:B6:60:61:EC
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 48FA2BE0753A37C58724BD1A9097037F11A84B6E
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136362e302f32342d3234203d3e20343032323635.roa
Signing time: Sun 26 Jul 2026 09:54:39 +0000
ROA not before: Sun 26 Jul 2026 09:49:39 +0000
ROA not after: Sun 25 Jul 2027 09:54:39 +0000
asID: 402265
IP address blocks: 186.241.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:fa:2b:e0:75:3a:37:c5:87:24:bd:1a:90:97:03:7f:11:a8:4b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 26 09:49:39 2026 GMT
Not After : Jul 25 09:54:39 2027 GMT
Subject: CN=857D1CB7DB090CF03C6007B0C0664DE9B66061EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:73:a4:68:65:c2:ac:32:eb:90:c6:c0:c4:
58:45:61:5c:11:d0:b2:e5:f9:87:07:94:40:d7:31:
a3:03:32:a3:7c:53:25:64:73:6b:d2:d3:df:71:20:
0a:57:32:62:1e:a6:fa:16:b5:c3:76:a9:4a:0d:ec:
2b:57:66:9c:d3:ad:c2:2b:e8:25:53:0c:6b:4b:a6:
b6:94:be:49:e1:9f:af:15:cf:dd:e1:30:89:23:61:
b8:0a:f1:49:4f:d6:8b:f0:69:03:55:eb:f0:b2:cc:
53:62:04:91:6a:ca:87:05:91:55:b3:ff:ff:ae:08:
03:1c:20:08:7b:03:f0:de:3c:e6:d1:39:61:cb:54:
a8:dc:a9:c8:8c:a9:85:5e:8f:79:0d:d2:68:de:3c:
b3:aa:b1:87:a3:ca:21:34:ee:93:c1:9a:a8:3d:fd:
46:9a:89:32:3d:40:e8:88:ea:87:b5:ad:29:15:21:
ae:15:e5:23:b6:14:d1:8d:29:c7:6f:5b:d1:c7:7f:
78:4b:bf:24:1c:5d:8c:29:61:98:82:30:5e:ef:e5:
52:a7:c3:97:c3:f6:0c:30:09:cb:19:8b:c1:ab:de:
b4:0f:69:00:3c:e1:d6:0a:0d:0a:e7:26:b2:32:59:
d6:c8:5d:88:75:fb:89:62:17:f9:30:37:be:da:64:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7D:1C:B7:DB:09:0C:F0:3C:60:07:B0:C0:66:4D:E9:B6:60:61:EC
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136362e302f32342d3234203d3e20343032323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.166.0/24
Signature Algorithm: sha256WithRSAEncryption
88:17:f3:b3:21:15:e1:fa:a8:7d:4f:04:5b:a5:62:06:57:20:
ce:2f:04:d2:1a:a8:dd:7e:9b:21:f8:94:fa:09:00:cb:00:67:
b3:df:c4:0e:f7:4e:db:36:76:c7:0a:90:64:7a:92:8a:21:9e:
77:77:7f:e4:53:6b:ed:db:41:70:2a:c6:c7:0c:ab:5b:c3:3a:
4c:b6:9e:a6:0d:59:07:1d:d7:9b:12:5c:86:74:b5:26:34:10:
dd:3c:39:64:b9:97:06:39:68:b2:94:69:3c:6a:11:ee:d1:a5:
7b:ae:d8:13:6c:f1:10:6d:0c:3f:9c:cb:1c:01:f6:8b:8c:fc:
4d:3f:59:1d:74:4a:51:37:27:8b:db:36:3a:a5:44:e1:8f:10:
fe:4f:5d:06:63:43:38:39:f2:e8:11:81:e8:d7:f3:b9:75:78:
ea:b2:3e:4c:c4:6f:88:26:57:e1:a7:d5:14:0b:d9:18:45:d2:
89:81:2d:dc:9e:7c:03:4c:cd:a7:d8:9b:22:c2:0b:0f:29:e4:
a6:67:a2:6c:7c:7c:5c:0e:e0:a8:a8:09:62:8a:33:d0:0e:40:
b5:e3:eb:68:45:03:e7:65:f8:da:8e:40:fb:cc:72:9b:51:a1:
da:b9:79:10:ee:d5:8a:5e:68:e1:7d:28:21:54:8e:cf:2e:c4:
b3:22:33:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:35:10 2026 by rpki-client