Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138302e302f32342d3234203d3e20343032323635.roa
File: 3138362e3234312e3138302e302f32342d3234203d3e20343032323635.roa (raw, json)
Hash identifier: uL+f/QVMvnQ8G2/PrjwwWhYjotF4lABm025F30TFKNk=
Subject key identifier: 71:7B:31:42:FE:8E:82:0E:98:B8:10:EB:53:82:6F:C5:D1:62:5A:40
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 72469E1D726AAE1FE2494728797B0AB15B414F58
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138302e302f32342d3234203d3e20343032323635.roa
Signing time: Fri 24 Jul 2026 13:26:25 +0000
ROA not before: Fri 24 Jul 2026 13:21:25 +0000
ROA not after: Fri 23 Jul 2027 13:26:25 +0000
asID: 402265
IP address blocks: 186.241.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:46:9e:1d:72:6a:ae:1f:e2:49:47:28:79:7b:0a:b1:5b:41:4f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 24 13:21:25 2026 GMT
Not After : Jul 23 13:26:25 2027 GMT
Subject: CN=717B3142FE8E820E98B810EB53826FC5D1625A40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d0:24:00:64:67:cb:d0:b8:65:2d:eb:32:14:
90:89:8b:c7:e3:21:54:51:2e:18:f8:a2:d6:f7:ec:
f8:58:41:28:4f:c2:93:4b:94:71:a0:02:2f:a1:92:
cd:5e:d9:43:b8:53:72:71:50:18:a0:47:10:d1:89:
b3:f4:28:00:39:a9:0c:6c:1b:90:b7:5e:02:fe:68:
d1:d1:e1:c1:79:f9:4e:b7:ba:7e:ad:9d:5c:7a:bc:
c2:af:07:e8:c4:09:55:a0:34:be:44:e5:84:1e:89:
b9:d5:62:f0:70:15:6e:66:4b:87:94:23:d0:aa:9e:
aa:18:03:37:3c:b0:9b:fa:8d:54:0c:65:04:92:2a:
e4:aa:ed:8f:06:e2:24:38:ef:4f:14:94:24:68:0e:
0d:9e:65:07:7b:3d:34:3a:db:a1:da:22:5b:5d:f9:
86:f0:4f:7c:25:75:bd:c6:58:3a:d5:02:fa:bc:a4:
5f:e4:d6:fd:e7:81:30:c6:22:54:59:a4:73:2d:aa:
ab:20:50:3c:4a:b0:a5:e6:54:da:76:c7:50:3b:17:
11:ae:bc:33:5d:d4:70:fe:ed:ff:13:28:d6:70:ef:
58:ad:29:1c:93:0e:18:fd:ef:c5:05:b2:a8:f1:91:
e4:fd:82:c2:d8:76:6b:f6:77:f0:f6:4b:93:14:66:
55:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7B:31:42:FE:8E:82:0E:98:B8:10:EB:53:82:6F:C5:D1:62:5A:40
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138302e302f32342d3234203d3e20343032323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.180.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e6:24:d3:96:46:9f:f6:c9:bf:9c:c1:5f:00:f2:cd:ea:19:
b9:07:53:3e:08:05:b1:cf:1f:34:6a:74:7f:c4:57:82:db:e1:
53:ea:a9:2b:3e:95:2c:ec:f7:22:2a:04:df:8c:bc:f8:40:97:
62:a6:5c:fc:f2:37:79:1b:d8:d6:b1:fa:6a:4c:d2:ad:79:71:
7c:76:a3:64:48:63:c7:97:ed:6b:38:44:31:fb:4e:44:ae:0d:
f8:66:1b:59:73:fa:f2:63:b4:5f:c0:b6:54:91:9a:2e:b4:b1:
4e:21:be:17:37:11:1f:1a:36:07:b3:37:6c:94:5a:09:d2:73:
59:71:d7:91:a5:8f:bc:66:5b:02:71:71:6e:d0:0e:73:3f:a2:
74:5e:1a:4d:f6:dc:73:05:39:5d:d3:2a:60:c3:8f:1a:91:e9:
ed:12:a5:f9:59:46:d6:90:bc:1f:16:30:97:5b:3c:58:2e:e1:
b6:b6:f3:38:c8:3b:0d:f4:53:d7:78:12:cb:cf:a7:52:2f:06:
a5:5f:5d:25:8d:d2:f8:25:a1:53:a0:bc:a1:98:11:b4:7c:3d:
d2:07:84:25:23:14:a0:d3:02:36:9e:6f:fa:08:6f:99:0c:3f:
d5:80:39:b4:45:87:6e:67:fd:b6:f6:bc:15:e0:e2:ee:c1:63:
78:b8:9c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:35:03 2026 by rpki-client