Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137332e302f32342d3234203d3e20343032333135.roa
File: 3138362e3234312e3137332e302f32342d3234203d3e20343032333135.roa (raw, json)
Hash identifier: TbEKhWNtaBbB+mxVlrVqJk+mn5ZPPzlz9NeZM+MKrGk=
Subject key identifier: C0:83:00:BE:3E:6B:42:C5:1E:9C:60:1C:FF:3D:BF:C2:ED:D9:81:BE
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 76C1D64D617C24FEBEE78E6B0C405F0787C6ED26
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137332e302f32342d3234203d3e20343032333135.roa
Signing time: Sun 26 Jul 2026 10:34:16 +0000
ROA not before: Sun 26 Jul 2026 10:29:16 +0000
ROA not after: Sun 25 Jul 2027 10:34:16 +0000
asID: 402315
IP address blocks: 186.241.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:c1:d6:4d:61:7c:24:fe:be:e7:8e:6b:0c:40:5f:07:87:c6:ed:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 26 10:29:16 2026 GMT
Not After : Jul 25 10:34:16 2027 GMT
Subject: CN=C08300BE3E6B42C51E9C601CFF3DBFC2EDD981BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:4a:9e:7a:b7:6e:ea:e4:2d:76:c2:ec:37:
27:bd:db:84:09:fd:9d:f6:b3:2a:40:5f:18:1d:42:
1e:6e:fb:38:72:c7:1f:ca:a6:94:13:f1:4e:53:ff:
1c:aa:61:2d:cf:06:7e:b3:af:0a:a8:47:08:fa:32:
f3:d3:a4:5d:dc:b1:9d:99:fb:54:b3:cd:49:f5:45:
d0:36:93:ca:bb:15:ec:b2:97:60:c2:6a:ff:80:46:
a0:94:9b:af:5f:c2:7d:2f:08:19:f4:a9:c8:44:46:
0f:ad:5a:33:25:25:97:2d:02:82:a6:70:7c:82:23:
92:a5:3e:3a:7f:d9:ed:17:42:60:10:f7:eb:c4:95:
24:ec:2a:39:82:f0:01:af:af:35:d8:84:cd:4c:53:
7d:60:10:55:da:e9:c3:17:58:44:11:6f:89:29:4b:
61:27:73:2b:92:a9:14:a4:dc:c8:ea:7c:3f:c2:65:
b2:29:ef:e5:ec:3f:5d:c4:26:95:4a:32:7e:93:22:
25:fc:f1:94:40:f8:a6:9d:8b:ed:78:cd:72:af:8c:
8a:02:49:1e:66:1f:a8:c5:80:9f:88:96:b3:98:f0:
cd:72:f3:ea:4a:75:b7:04:76:75:91:8a:74:f3:3d:
d4:79:49:c4:db:54:d7:fa:19:bc:e8:78:73:d6:7f:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:83:00:BE:3E:6B:42:C5:1E:9C:60:1C:FF:3D:BF:C2:ED:D9:81:BE
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137332e302f32342d3234203d3e20343032333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.173.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:41:99:34:ff:1a:82:d5:22:8f:0f:71:aa:76:6e:83:4e:4b:
fc:46:a3:2e:fe:b3:91:99:6c:27:01:06:20:72:1f:bc:36:2c:
97:6e:61:5d:0c:6c:f2:03:a9:1c:d1:41:5c:28:94:22:86:31:
60:44:9a:a9:c9:c3:12:77:f3:a3:f9:3d:a2:7b:e0:65:da:6e:
33:aa:bd:54:ef:8a:55:e4:55:3d:38:22:b5:22:11:5f:2e:8f:
48:ff:46:06:d0:f8:e4:c5:5a:1b:01:9c:2b:1f:da:f4:2f:65:
16:81:e6:08:d7:b4:a7:af:3e:ab:93:84:81:2e:cc:f7:8b:5c:
f4:82:5f:03:86:df:5f:5e:d0:20:9f:0d:30:4f:4e:97:ec:42:
1d:00:e5:1d:80:09:87:53:a2:1a:50:67:d8:26:f9:37:66:2c:
1d:a4:6f:87:21:55:0a:a7:51:8a:ac:f4:b2:17:78:3d:ae:86:
88:d4:bc:45:c5:77:2e:ca:c7:4a:ac:a6:e4:77:bf:06:31:50:
d3:28:f5:32:b9:7d:87:fc:68:6c:4d:58:0c:8b:e6:24:dc:41:
88:25:53:39:74:03:fd:24:61:fa:51:99:8d:f4:4b:21:25:f5:
a6:6a:ed:5b:0c:44:27:9c:75:57:14:6f:ed:c2:a7:a5:f2:e0:
59:6b:f6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:34:21 2026 by rpki-client