Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137382e302f32342d3234203d3e20343032323135.roa
File: 3138362e3234312e3137382e302f32342d3234203d3e20343032323135.roa (raw, json)
Hash identifier: ECOd48HFw86QwKW+MVdx08f6Ug8oU1gSecxAkw9A2Bg=
Subject key identifier: 5A:52:53:0A:C0:B2:0D:56:1E:4F:FD:83:DB:7D:B9:64:08:DC:CC:8F
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 7070F5095FACB6CA7D530C697EA67B3FA5BEEB42
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137382e302f32342d3234203d3e20343032323135.roa
Signing time: Fri 24 Jul 2026 11:17:18 +0000
ROA not before: Fri 24 Jul 2026 11:12:18 +0000
ROA not after: Fri 23 Jul 2027 11:17:18 +0000
asID: 402215
IP address blocks: 186.241.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:70:f5:09:5f:ac:b6:ca:7d:53:0c:69:7e:a6:7b:3f:a5:be:eb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 24 11:12:18 2026 GMT
Not After : Jul 23 11:17:18 2027 GMT
Subject: CN=5A52530AC0B20D561E4FFD83DB7DB96408DCCC8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:5b:c7:97:1d:e3:48:5b:08:b8:dc:40:dd:
5e:da:6b:ce:ab:45:d8:6b:51:af:0d:36:cb:a6:62:
6b:dd:5c:d5:bd:8b:48:88:ee:9b:36:91:39:91:10:
e3:9d:bb:31:43:dc:61:d7:13:cd:72:c8:94:65:74:
36:cd:8a:b5:ee:1a:82:f1:d0:a0:56:54:59:4e:e7:
e3:cb:84:87:82:a2:4e:52:71:1a:fc:34:e5:29:64:
46:6a:b6:f1:ef:b2:f3:9e:3d:19:d2:1b:a2:c3:dd:
2f:a6:3e:a1:c8:49:fb:80:99:97:44:07:0c:d3:49:
62:9b:f2:b1:d8:2a:8f:62:58:8b:33:5b:e2:f3:eb:
a6:e5:0e:c6:cd:4e:2a:7b:0f:9b:03:43:0d:b9:83:
80:ff:61:eb:76:35:a0:17:51:c4:6c:c5:51:af:67:
43:7a:a0:1a:4d:55:38:f1:59:c3:30:a7:d2:3f:2b:
2c:27:da:f3:a3:da:21:75:0b:6d:f9:2b:9d:13:7d:
75:6f:e1:68:a8:d5:f1:94:73:e3:06:52:20:58:83:
c8:af:e3:75:b6:16:d5:86:a1:da:a4:45:e4:f3:1f:
d7:eb:05:d6:e7:b3:06:d0:0c:ba:e6:f0:9a:20:a1:
0a:77:60:9d:17:71:6a:f2:fe:4c:ce:a3:cd:d7:e1:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:52:53:0A:C0:B2:0D:56:1E:4F:FD:83:DB:7D:B9:64:08:DC:CC:8F
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137382e302f32342d3234203d3e20343032323135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.178.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a0:39:24:9f:cc:8e:4c:4c:8f:8a:7f:80:1f:44:1f:df:85:
a6:12:a0:a7:b2:f5:a4:da:57:91:b6:81:77:8f:5b:57:b3:92:
a3:f3:1a:f6:b4:52:a3:f7:4c:59:57:ed:0b:24:b0:6a:db:ac:
6c:7f:ce:a1:7e:1c:3c:d8:9a:eb:54:cd:0a:14:52:70:ae:00:
de:7d:30:ac:dc:63:e0:59:d6:17:74:1f:87:6c:68:30:04:ed:
af:82:d1:7f:53:02:3b:1f:0b:89:f5:e2:33:20:5e:bd:2b:b9:
92:d4:a3:bd:b5:6c:b7:c9:cc:f2:35:0b:76:e9:d2:73:ef:5b:
ca:7d:2a:39:e9:b7:e4:e3:0f:e1:12:51:98:e9:c1:a8:73:42:
f0:6f:cf:0c:a5:9e:72:fd:16:2d:10:46:2b:45:1a:7f:47:3c:
fc:a5:4e:26:e2:d4:e1:fd:2b:f0:13:5a:21:8e:d0:c3:4e:e3:
dc:20:63:37:3a:39:01:a9:a5:e8:a8:17:21:81:76:16:81:6a:
fd:c9:dd:f6:e8:24:9e:9c:96:5e:3f:c3:38:44:4a:bf:6f:7b:
ba:c6:07:79:75:71:31:35:78:4c:92:cd:22:5b:a0:5d:73:e3:
68:cf:dd:f2:ff:11:64:94:f2:e4:68:27:d1:da:84:13:a6:df:
a6:0e:f9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:06:47 2026 by rpki-client