Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136372e302f32342d3234203d3e20343032333135.roa
File: 3138362e3234312e3136372e302f32342d3234203d3e20343032333135.roa (raw, json)
Hash identifier: jST1pCm0JaZ4n+azoO2USwLEHEajALK94vhg/jaXqZM=
Subject key identifier: A6:80:B4:4C:99:42:B5:CC:3F:02:E5:88:F4:F1:9A:1F:37:09:A7:97
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 5E6BFE83121668DCB2DD2AF202AEAECCC7F2C7B5
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136372e302f32342d3234203d3e20343032333135.roa
Signing time: Sun 26 Jul 2026 10:36:15 +0000
ROA not before: Sun 26 Jul 2026 10:31:15 +0000
ROA not after: Sun 25 Jul 2027 10:36:15 +0000
asID: 402315
IP address blocks: 186.241.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:6b:fe:83:12:16:68:dc:b2:dd:2a:f2:02:ae:ae:cc:c7:f2:c7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 26 10:31:15 2026 GMT
Not After : Jul 25 10:36:15 2027 GMT
Subject: CN=A680B44C9942B5CC3F02E588F4F19A1F3709A797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:c0:74:e2:66:c6:2b:8c:b7:f4:02:23:03:
a5:ca:a4:ab:08:c2:94:a0:c6:25:78:7b:d8:36:4b:
c2:6b:fb:03:8e:27:7c:2c:ea:34:c1:8c:7c:b2:8a:
48:94:c7:e7:19:a4:8b:e4:b0:ff:fc:4e:ab:db:c1:
74:4d:2a:1e:8e:aa:53:02:23:28:82:bc:25:90:5f:
26:60:ba:f1:43:ed:3f:93:7e:3b:9e:08:86:83:27:
3d:46:27:31:a1:11:cf:4e:96:a0:71:6e:05:55:da:
b5:90:88:44:7a:27:1f:0a:ce:2a:13:17:be:67:cc:
91:32:01:52:e6:70:2b:b5:cf:26:23:7c:a3:f9:df:
51:0d:6f:d9:02:74:ab:b2:f5:7a:3b:a2:1b:8a:cb:
d3:40:1c:10:de:46:40:68:73:7b:5e:2e:b9:86:98:
43:04:cc:ca:bd:64:40:45:0d:27:a3:da:17:06:4a:
83:ab:54:24:32:75:f4:eb:05:63:13:09:34:16:ef:
3e:c3:34:f2:fb:05:04:d3:93:a5:5e:ea:9d:de:e7:
87:91:97:89:22:51:a9:83:b5:89:ec:aa:aa:f9:e0:
e8:d9:1c:62:29:99:a5:99:55:6f:fb:43:d5:a4:b5:
a2:fb:35:dc:6f:8c:5a:ac:28:27:a5:7f:1f:3a:0b:
4f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:80:B4:4C:99:42:B5:CC:3F:02:E5:88:F4:F1:9A:1F:37:09:A7:97
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136372e302f32342d3234203d3e20343032333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.167.0/24
Signature Algorithm: sha256WithRSAEncryption
99:71:ae:dd:49:c9:82:25:b6:9b:d3:67:2b:19:5e:44:84:01:
69:31:f4:89:ba:4a:6e:d9:07:0b:ad:db:3a:58:4d:1e:07:48:
7f:37:46:92:04:21:f4:09:47:a4:dc:ca:3e:a4:00:88:b9:34:
33:42:19:97:40:1e:97:24:d1:e1:61:86:72:f4:fb:b6:e6:8e:
26:d7:60:ea:2e:40:a3:e9:f4:b3:64:4a:28:b0:67:bb:c9:c2:
c1:07:c3:35:b6:ca:10:81:d3:50:3f:05:c3:b2:92:43:de:a4:
6c:1a:26:d7:f4:9b:cd:ae:1b:48:d0:35:0f:ef:26:3c:10:fe:
2b:d0:8a:2b:eb:25:22:8c:5b:c4:b4:30:d8:bb:82:d3:02:cc:
04:6d:0b:a5:fa:e9:72:fd:2a:aa:9b:04:69:fd:05:c4:46:4f:
00:64:f0:2d:fa:11:e4:ee:b7:51:ef:0b:fb:2d:9b:e7:9f:69:
0d:fe:10:b9:ba:c9:ed:c8:0b:e2:4e:98:a8:bf:b0:45:14:e8:
1a:28:54:73:f1:17:6c:ef:9b:be:75:f3:9c:93:ad:2c:f9:ad:
cd:6c:4e:76:a9:db:95:af:07:32:4a:6e:7b:d5:12:1f:6d:d6:
4b:49:ef:67:63:10:a9:99:10:04:6e:fa:d9:0f:ac:09:66:a6:
16:b9:bc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:00:29 2026 by rpki-client