Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137362e302f32342d3234203d3e20343032323135.roa
File: 3138362e3234312e3137362e302f32342d3234203d3e20343032323135.roa (raw, json)
Hash identifier: jZM+oRKp+PGavNGn09MLMLVsijLmkiXllkPfyNKNnpY=
Subject key identifier: 14:BF:5F:F8:5F:36:94:52:53:25:C4:5C:9A:91:52:6A:70:9F:A9:B0
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 4EA08BAEA992D6BA0E8E1ACD5B8A61025CD1BF6B
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137362e302f32342d3234203d3e20343032323135.roa
Signing time: Tue 28 Jul 2026 09:33:52 +0000
ROA not before: Tue 28 Jul 2026 09:28:52 +0000
ROA not after: Tue 27 Jul 2027 09:33:52 +0000
asID: 402215
IP address blocks: 186.241.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:a0:8b:ae:a9:92:d6:ba:0e:8e:1a:cd:5b:8a:61:02:5c:d1:bf:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 28 09:28:52 2026 GMT
Not After : Jul 27 09:33:52 2027 GMT
Subject: CN=14BF5FF85F3694525325C45C9A91526A709FA9B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:85:8f:81:68:25:b2:3e:8b:a1:f9:37:4b:71:
8b:01:2a:7f:c3:dd:6b:61:52:1c:c5:f1:6b:a6:cc:
3c:74:0e:63:e0:3a:6a:c2:36:e0:4e:a5:5b:fe:90:
1f:0f:9b:e1:cd:a9:b2:5e:63:9d:8c:38:9a:57:66:
c8:85:f9:4b:c9:d1:16:9d:5f:f9:83:15:2f:b7:e2:
a5:6f:c2:cf:50:bc:d1:7b:66:d2:db:40:e1:e8:cd:
b1:af:7d:04:f3:55:59:a0:f6:64:51:32:00:d5:36:
16:7c:1b:fc:f8:aa:2a:79:0c:c1:1e:0b:fe:5a:c3:
c9:6f:52:c8:3a:6f:e6:32:b7:8f:7f:69:5a:4e:a8:
d9:b6:38:b2:e5:ba:4b:d3:5c:49:aa:f1:fd:26:ff:
79:98:d2:88:11:4a:f4:ea:cb:15:8b:24:2e:47:9a:
dd:eb:00:ca:58:3c:14:c4:dc:f0:5d:8c:4b:d7:9d:
f3:53:cd:a0:3c:7a:ac:c7:60:aa:f3:74:b5:d1:23:
ec:89:b3:13:02:af:aa:36:5b:7e:5c:3c:43:28:da:
4f:1b:8a:97:27:14:bb:6a:60:68:44:bb:fc:c1:75:
99:83:bf:d7:66:35:98:b6:65:12:d2:58:ae:39:80:
98:ab:72:b3:56:45:12:a1:19:53:33:07:46:02:63:
06:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BF:5F:F8:5F:36:94:52:53:25:C4:5C:9A:91:52:6A:70:9F:A9:B0
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137362e302f32342d3234203d3e20343032323135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.176.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:02:45:ed:f8:5b:63:5b:bf:ff:92:71:bd:6f:60:65:ef:cb:
ce:eb:6e:97:80:8c:e7:c8:eb:a8:2a:ab:21:b0:c2:57:3b:48:
87:93:67:c8:30:f1:6f:d9:c6:97:9b:fc:45:d3:8f:5f:9f:ac:
76:6d:11:7c:c3:1d:93:30:ac:d3:fa:bb:dd:06:08:54:be:fb:
a5:ce:e9:9f:22:73:e7:e4:9c:19:4a:77:e3:38:17:da:57:a7:
42:31:d1:18:3b:8d:19:5b:3e:50:00:ce:56:78:7a:e8:10:33:
f7:fc:6c:ba:3f:cf:89:3e:a8:fc:07:c1:5b:c0:85:8b:fd:25:
d9:07:64:03:04:7c:85:ca:b0:19:b8:17:50:a4:fc:8b:ab:3a:
46:bd:b4:34:3e:bd:0d:3a:6c:6e:1d:d8:42:41:d9:ce:0c:39:
47:0d:43:91:2e:bd:f2:2e:1b:d3:09:55:f7:38:74:a2:1d:e8:
7e:7f:3e:4c:27:65:ce:8b:3e:ab:28:36:e7:3d:dd:40:e0:05:
56:0a:97:71:40:fd:3a:2d:53:66:8e:92:c8:c1:e8:bd:6f:ae:
95:ae:e6:26:2f:4e:a2:4b:bb:b0:d7:59:da:79:44:e8:71:9f:
1b:44:01:c6:2f:93:99:8c:db:d1:fa:19:07:6f:8e:4f:26:fa:
57:d4:d5:e3
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUTqCLrqmS1roOjhrNW4phAlzRv2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA3MjgwOTI4NTJaFw0yNzA3MjcwOTMzNTJaMDMxMTAvBgNV
BAMTKDE0QkY1RkY4NUYzNjk0NTI1MzI1QzQ1QzlBOTE1MjZBNzA5RkE5QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXhY+BaCWyPouh+TdLcYsBKn/D
3WthUhzF8WumzDx0DmPgOmrCNuBOpVv+kB8Pm+HNqbJeY52MOJpXZsiF+UvJ0Rad
X/mDFS+34qVvws9QvNF7ZtLbQOHozbGvfQTzVVmg9mRRMgDVNhZ8G/z4qip5DMEe
C/5aw8lvUsg6b+Yyt49/aVpOqNm2OLLlukvTXEmq8f0m/3mY0ogRSvTqyxWLJC5H
mt3rAMpYPBTE3PBdjEvXnfNTzaA8eqzHYKrzdLXRI+yJsxMCr6o2W35cPEMo2k8b
ipcnFLtqYGhEu/zBdZmDv9dmNZi2ZRLSWK45gJircrNWRRKhGVMzB0YCYwZnAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUFL9f+F82lFJTJcRcmpFSanCfqbAwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzEzODM2MmUzMjM0MzEyZTMx
MzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMjMyMzEzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALrxsDANBgkqhkiG9w0BAQsFAAOCAQEAWgJF7fhbY1u//5JxvW9gZe/Lzutu
l4CM58jrqCqrIbDCVztIh5NnyDDxb9nGl5v8RdOPX5+sdm0RfMMdkzCs0/q73QYI
VL77pc7pnyJz5+ScGUp34zgX2lenQjHRGDuNGVs+UADOVnh66BAz9/xsuj/PiT6o
/AfBW8CFi/0l2QdkAwR8hcqwGbgXUKT8i6s6Rr20ND69DTpsbh3YQkHZzgw5Rw1D
kS698i4b0wlV9zh0oh3ofn8+TCdlzos+qyg25z3dQOAFVgqXcUD9Oi1TZo6SyMHo
vW+ula7mJi9Ooku7sNdZ2nlE6HGfG0QBxi+TmYzb0foZB2+OTyb6V9TV4w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:06:53 2026 by rpki-client