Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137302e302f32342d3234203d3e20343032333135.roa
File: 3138362e3234312e3137302e302f32342d3234203d3e20343032333135.roa (raw, json)
Hash identifier: +Pmjviw4GUWXvf5AwvDe47ZB6zVk5rdWI1OIlbS3Z5w=
Subject key identifier: BA:28:A8:94:4C:FA:64:C7:E7:CE:38:88:22:62:7D:3F:E0:98:77:58
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 13D4A88028F52C8B05C47D7F4D48EEC8C7109C81
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137302e302f32342d3234203d3e20343032333135.roa
Signing time: Fri 24 Jul 2026 13:29:55 +0000
ROA not before: Fri 24 Jul 2026 13:24:55 +0000
ROA not after: Fri 23 Jul 2027 13:29:55 +0000
asID: 402315
IP address blocks: 186.241.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:d4:a8:80:28:f5:2c:8b:05:c4:7d:7f:4d:48:ee:c8:c7:10:9c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 24 13:24:55 2026 GMT
Not After : Jul 23 13:29:55 2027 GMT
Subject: CN=BA28A8944CFA64C7E7CE388822627D3FE0987758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a9:fd:9f:1c:4f:8b:e3:03:f3:99:e4:0d:fc:
12:c0:6a:5c:50:53:87:45:e9:b9:58:fd:8f:5f:56:
12:9b:6a:82:51:62:ed:84:52:62:d2:3a:0d:84:84:
79:d8:14:19:0f:3e:d9:84:37:84:bc:cd:ad:48:cc:
e3:56:58:4f:04:24:fd:a3:23:a0:b1:bb:88:ee:29:
4e:58:cb:2e:21:0d:23:1e:60:bc:17:ba:8d:81:9e:
cc:ff:3a:80:40:70:38:bb:3c:a8:60:3f:4f:49:42:
66:fd:d5:44:74:1d:0c:65:75:f9:02:e5:f5:f0:67:
8f:d2:37:b1:94:3a:d5:60:d0:37:ac:71:2b:e0:db:
ef:f4:f6:a8:de:71:62:9b:47:b8:44:ae:17:51:95:
f9:ca:c1:c3:90:58:60:be:f9:73:14:a6:9e:ea:e4:
b0:d2:1b:70:de:ae:71:f7:39:aa:dd:d3:0e:43:8c:
1a:c9:99:ce:a5:0a:dd:e1:77:31:5a:bf:51:2b:6d:
fd:7b:a5:96:2d:3b:f1:46:b0:af:cc:1c:52:4a:39:
fc:e0:81:86:74:3d:31:80:d0:47:86:37:fb:2b:88:
84:09:bd:cb:44:08:e3:3f:07:3b:85:06:19:f3:89:
fc:4b:c9:e9:5e:87:84:87:00:c7:05:d7:69:e9:4a:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:28:A8:94:4C:FA:64:C7:E7:CE:38:88:22:62:7D:3F:E0:98:77:58
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137302e302f32342d3234203d3e20343032333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.170.0/24
Signature Algorithm: sha256WithRSAEncryption
67:04:56:8f:1a:e1:1d:c9:94:07:7c:60:de:f8:05:72:fc:d6:
6a:cb:e9:72:59:4c:f7:8a:35:1e:a6:bb:51:e7:f9:3b:24:c4:
83:36:e1:24:c1:e9:ba:64:4b:12:1c:5e:bd:9b:cd:d5:8d:cc:
d3:36:c0:69:33:d8:a7:da:08:d5:a4:e5:64:68:0b:b8:ff:a7:
eb:f5:62:93:89:8d:f1:74:cb:c6:17:c3:be:a3:e2:02:09:af:
9f:94:47:a5:60:58:d0:a0:fd:27:82:e0:cd:33:0c:74:0e:4a:
5b:ff:f9:da:fd:9b:ba:11:bf:53:91:d8:2b:61:71:e9:91:d5:
34:dc:05:c0:eb:6d:db:26:a7:36:8a:f8:d1:8d:0e:75:95:b9:
87:87:55:99:5e:fb:62:87:37:12:ea:76:58:cb:8d:3b:9a:bb:
85:a4:e8:d9:04:42:8c:e1:f0:3e:d2:c4:91:4e:11:fd:43:ee:
37:36:b5:99:81:96:9e:ab:06:40:45:41:5d:82:bb:eb:87:02:
cf:4b:d9:6d:ae:45:7f:76:3a:7f:e3:90:56:ff:68:1a:78:05:
f0:9b:5b:6c:06:88:fe:43:0b:b6:62:75:9a:9a:2f:4b:c5:67:
f2:0e:f7:1c:0d:e1:fd:10:d5:13:32:7c:a1:6e:da:47:43:21:
0c:5e:0c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:34:37 2026 by rpki-client