Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137322e302f32342d3234203d3e20343032323838.roa
File: 3138362e3234312e3137322e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier: qChHLw07fYGMuqx9RptwoXpa00sH9o6DEsty2PISkrc=
Subject key identifier: EE:6A:A0:3B:95:00:C7:CF:55:1D:52:EE:28:69:C5:21:47:55:A6:EC
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 5D59E69C3BEF3BD198707A3C4C7CBA574197EFF8
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137322e302f32342d3234203d3e20343032323838.roa
Signing time: Fri 24 Jul 2026 11:13:46 +0000
ROA not before: Fri 24 Jul 2026 11:08:46 +0000
ROA not after: Fri 23 Jul 2027 11:13:46 +0000
asID: 402288
IP address blocks: 186.241.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:59:e6:9c:3b:ef:3b:d1:98:70:7a:3c:4c:7c:ba:57:41:97:ef:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 24 11:08:46 2026 GMT
Not After : Jul 23 11:13:46 2027 GMT
Subject: CN=EE6AA03B9500C7CF551D52EE2869C5214755A6EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d8:eb:cf:c9:19:40:c1:42:7e:11:b9:53:67:
ec:b5:d0:9a:9b:7c:7b:d2:c6:05:ad:61:0b:ae:aa:
78:b8:4b:b6:b0:80:84:86:80:f5:e6:97:00:e9:cb:
ea:37:d2:fd:07:2d:92:45:be:a6:9e:ed:d0:06:75:
f1:c0:57:a7:b0:2a:69:95:ee:7b:fc:5f:4e:70:1d:
46:8e:1f:38:fd:ec:cf:49:ac:18:48:19:86:0a:0a:
95:1e:10:c2:0b:b8:c4:52:eb:c2:a5:5d:c3:63:d3:
45:5f:e1:9e:66:56:a4:ba:e2:8d:ff:dc:39:36:54:
6e:2f:07:ed:c7:7d:3f:e8:9b:9f:62:96:d6:d8:6a:
30:eb:58:d8:cf:a3:c9:b5:4a:9a:92:2c:ba:c8:2b:
71:69:ad:bb:64:2f:79:33:8f:7f:d1:67:cd:de:28:
00:b0:ad:5c:a3:f7:91:a1:c9:5e:da:1f:31:32:b9:
46:3d:4b:a4:1e:72:33:8d:6c:d5:2f:92:db:0e:2c:
34:09:4c:72:76:12:5f:2a:63:b3:d9:20:fb:a0:1e:
26:ba:f1:90:84:d4:f6:82:e1:f7:62:5c:87:34:f6:
5f:b6:74:69:d3:1e:39:8c:de:a6:be:18:bd:a4:5e:
1f:50:2e:17:c4:b6:7b:79:91:36:df:e4:7e:ad:fe:
8f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6A:A0:3B:95:00:C7:CF:55:1D:52:EE:28:69:C5:21:47:55:A6:EC
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137322e302f32342d3234203d3e20343032323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.172.0/24
Signature Algorithm: sha256WithRSAEncryption
85:40:69:49:7e:22:61:95:fa:e6:22:5a:c5:a4:b2:df:07:0d:
d4:c0:7d:29:cb:66:77:52:f9:f8:da:08:32:8b:46:03:10:92:
fa:7c:e9:2e:c6:1e:fc:46:08:1c:35:9f:41:8f:60:0a:f3:81:
40:96:ed:68:aa:9b:86:a8:26:e9:9e:a3:a3:74:03:56:1f:72:
07:71:0f:63:b8:04:4c:12:ad:67:a7:25:19:40:de:63:c2:42:
a4:46:fd:4a:6d:00:17:00:c0:5b:3c:95:6c:a0:e0:aa:c9:ca:
57:48:ec:94:e8:a7:ef:38:c2:d8:7b:03:99:83:d7:37:ef:49:
d8:b2:6c:79:59:51:6f:38:58:38:c3:ab:4c:16:8e:67:a3:5b:
fc:00:c5:a5:45:8e:66:dc:72:a3:a1:bb:f8:a0:df:f3:90:70:
89:36:e4:8b:a3:b1:bd:d2:a4:23:30:69:29:2f:a8:fa:e0:7a:
a0:14:e3:75:54:69:e2:1c:d5:4f:3b:c5:8f:c0:77:b0:dc:42:
42:f8:14:d8:63:22:d1:43:5c:a1:90:a1:9f:5f:92:c5:53:e5:
bd:9f:e9:5d:ff:5e:e2:57:7e:ad:46:f5:50:e7:3f:f2:87:e6:
94:b0:cb:50:d9:24:b5:9e:5e:6f:8e:a0:6a:a3:64:0b:55:d7:
8c:5a:19:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:08:39 2026 by rpki-client