Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137312e302f32342d3234203d3e20343032323635.roa
File: 3138362e3234312e3137312e302f32342d3234203d3e20343032323635.roa (raw, json)
Hash identifier: AIWwcICNrSWFJAeyG6naaFs0SD9VtlfiAoWClbQ/8BQ=
Subject key identifier: 7C:65:4F:51:91:AC:79:36:21:C6:8A:C1:0D:A5:2D:A7:9A:18:08:45
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 6D280CDF68F2963883AC2D0048AB5ABD6B037145
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137312e302f32342d3234203d3e20343032323635.roa
Signing time: Sun 26 Jul 2026 09:52:25 +0000
ROA not before: Sun 26 Jul 2026 09:47:25 +0000
ROA not after: Sun 25 Jul 2027 09:52:25 +0000
asID: 402265
IP address blocks: 186.241.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:28:0c:df:68:f2:96:38:83:ac:2d:00:48:ab:5a:bd:6b:03:71:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 26 09:47:25 2026 GMT
Not After : Jul 25 09:52:25 2027 GMT
Subject: CN=7C654F5191AC793621C68AC10DA52DA79A180845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:17:85:3f:72:b1:47:6d:c0:ec:9c:17:01:
c4:6a:d8:2f:77:41:0d:56:8d:86:ca:b4:75:ab:c4:
95:63:d6:be:bf:d1:89:09:73:fa:e7:1d:05:07:bd:
43:54:d7:71:29:f5:fb:9f:c4:a8:c9:27:fd:fd:5c:
1f:7d:f8:7f:cd:88:04:b0:e3:e4:59:91:5e:20:78:
3f:27:70:08:53:0b:24:54:c3:0a:c7:0c:c2:4d:77:
e7:62:1b:65:f8:2a:94:84:d1:93:85:98:bc:f8:99:
6e:68:d1:ba:99:b3:94:bf:52:a8:7e:26:58:42:61:
69:82:49:8b:f9:76:27:d6:db:f0:97:2b:33:8b:7c:
69:94:c0:7a:80:0f:c6:ce:7d:60:f6:14:25:95:2e:
f4:13:1f:d1:02:3c:e4:e2:8f:d6:14:f5:0e:82:9b:
4d:e1:93:2c:35:c5:c8:6d:04:3f:98:23:f7:71:fa:
0f:90:07:c1:d1:59:e7:57:0d:fe:6a:78:d5:38:47:
c4:fd:9f:b6:aa:b9:12:93:f5:82:7c:73:8e:69:d2:
18:ba:17:7e:00:c7:7f:00:f0:9e:76:92:ca:05:2d:
0a:4e:e1:fa:e2:8d:0a:a5:60:e9:69:0a:75:ea:ce:
5e:0f:6d:ec:56:e1:ba:49:36:c4:e2:c0:34:00:1f:
42:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:65:4F:51:91:AC:79:36:21:C6:8A:C1:0D:A5:2D:A7:9A:18:08:45
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137312e302f32342d3234203d3e20343032323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.171.0/24
Signature Algorithm: sha256WithRSAEncryption
53:fa:54:3a:ab:90:3e:ca:77:06:51:8f:89:73:11:c1:e4:c3:
77:16:3c:1e:34:29:c8:45:76:7d:97:44:d2:5f:17:bc:5e:71:
7f:e4:24:63:2b:e2:6c:1d:cf:71:40:ce:21:b6:8a:be:b0:9b:
fd:17:c8:d3:11:72:cc:44:81:49:07:ff:0d:9e:d4:f7:41:6b:
c7:8c:f0:b4:a3:d8:7e:dd:e3:4d:50:28:e0:ec:20:3c:1d:eb:
fa:1e:4b:f4:d1:10:90:ef:1d:29:af:dc:2c:25:af:84:43:ea:
20:a9:d4:c8:2d:22:a2:3e:7e:83:5d:3c:81:d4:fa:5b:98:c1:
98:0e:f0:c9:9f:a8:b6:70:7d:48:08:3f:bd:17:59:c5:37:29:
51:37:84:1f:bb:51:51:12:0b:a2:70:9e:4f:d8:c2:17:c3:d6:
7a:81:9f:e2:30:d2:39:79:19:3a:b4:02:73:2a:c6:ed:3e:a1:
86:7e:2d:c8:61:36:99:fe:a9:c4:ef:56:5d:20:61:36:48:20:
dd:23:1e:b0:1d:06:00:65:c5:c1:47:60:f0:c2:a0:32:cb:e3:
af:7c:04:85:25:59:34:1e:9a:74:3c:b3:40:31:d1:17:6d:f4:
92:ee:72:77:2b:af:db:ea:40:99:e6:cc:96:ff:07:24:2d:bd:
d2:4c:94:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:33:30 2026 by rpki-client