Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137342e302f32342d3234203d3e20343032333135.roa
File: 3138362e3234312e3137342e302f32342d3234203d3e20343032333135.roa (raw, json)
Hash identifier: 4vEg9KzMCZTZYGqdKb/wI8hcgDced1Y+78JjoEctbV4=
Subject key identifier: 90:30:2E:B8:36:75:E2:86:D5:64:AF:01:35:13:0C:6C:D0:C7:DE:8D
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 5FB829392928E9C1005F1BF9EE23315CE46FE9C0
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137342e302f32342d3234203d3e20343032333135.roa
Signing time: Sun 26 Jul 2026 10:29:36 +0000
ROA not before: Sun 26 Jul 2026 10:24:36 +0000
ROA not after: Sun 25 Jul 2027 10:29:36 +0000
asID: 402315
IP address blocks: 186.241.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b8:29:39:29:28:e9:c1:00:5f:1b:f9:ee:23:31:5c:e4:6f:e9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 26 10:24:36 2026 GMT
Not After : Jul 25 10:29:36 2027 GMT
Subject: CN=90302EB83675E286D564AF0135130C6CD0C7DE8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:c2:43:71:02:50:12:11:79:fa:bf:39:21:
3a:12:88:55:38:c0:7d:dc:d9:30:eb:a8:1e:31:03:
89:d8:16:b2:0f:cb:7a:4e:f5:58:bf:67:2b:9e:02:
b0:3d:0e:5a:19:0b:7a:b0:78:7e:2c:df:0b:88:a1:
94:d6:ee:ec:87:01:48:21:2f:b4:cf:2a:f8:1d:3e:
8e:7f:6b:b7:23:b6:df:56:ef:80:4e:a9:26:61:7d:
f3:b3:87:b8:77:4a:ed:e6:ba:b3:94:e9:73:6c:3c:
9f:22:86:4f:8d:a2:32:53:12:27:1e:94:45:80:1b:
f4:fe:5c:c1:7d:32:e7:45:84:e5:a1:40:6a:e1:f8:
85:fb:cc:ea:8d:13:48:7e:99:57:d7:5a:51:be:1f:
37:2d:f6:4d:60:f6:8e:56:8e:a1:db:bf:7c:b8:60:
b9:a4:11:92:b6:fd:07:cd:d5:46:83:24:21:01:07:
14:a3:ef:4e:95:d8:b6:c4:c1:22:45:4d:4d:46:83:
d3:be:51:7e:bd:f5:5e:20:4e:b1:4c:78:4f:19:ca:
fb:d7:02:c0:70:c7:39:88:db:05:d9:e3:94:1d:46:
97:6f:6e:16:92:27:9a:26:80:2e:81:95:79:16:10:
e0:f1:bc:82:7c:f1:d9:fb:a0:57:6f:e9:4e:17:75:
f0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:30:2E:B8:36:75:E2:86:D5:64:AF:01:35:13:0C:6C:D0:C7:DE:8D
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137342e302f32342d3234203d3e20343032333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:38:36:dc:1c:98:3b:64:fd:b3:28:d1:f7:a1:ea:d0:27:94:
1f:43:64:90:5a:cc:d3:e0:93:75:12:c0:a0:58:f2:9b:f2:d7:
b2:f3:d4:03:68:f9:bd:4d:8c:d5:0d:8c:98:bb:f6:5f:13:2b:
80:9a:2e:20:7b:26:d0:38:9d:f3:8b:95:98:f7:1e:19:92:4d:
4f:48:b7:b2:b3:14:4c:35:12:01:09:a5:39:48:cf:dd:e7:cc:
20:e2:d8:46:34:90:d6:4c:a9:06:0f:2c:f4:8f:f8:5f:25:e6:
f3:47:e0:d7:21:37:23:83:c0:13:f0:11:f5:dc:9b:c1:00:16:
c4:4c:92:fa:eb:95:91:84:d5:18:0a:84:c3:97:03:c5:1e:ad:
3c:d1:6e:b6:e7:fe:db:85:fe:8c:c6:04:54:64:d3:7c:bd:2f:
b9:64:f0:fa:30:40:9d:db:12:ce:e0:68:6f:b8:1b:f3:87:64:
db:e0:d3:55:28:17:c3:ca:89:2f:fc:23:35:9e:e2:cc:38:ab:
47:e6:a8:ee:8a:df:34:b3:0e:88:fa:b5:b2:01:d2:d5:f7:d1:
f4:5e:b8:bc:7a:5f:19:35:41:35:ad:bf:7c:91:1e:31:f0:0d:
1a:2f:67:95:2e:aa:71:60:50:86:f6:57:d7:bd:1a:ca:7a:44:
dc:b3:2d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:34:28 2026 by rpki-client