Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138322e302f32342d3234203d3e20343032333135.roa
File: 3138362e3234312e3138322e302f32342d3234203d3e20343032333135.roa (raw, json)
Hash identifier: v2SsnpRpV1Z2rKmb/3JTU9Ngl4fFmKZNvUyPrQ2h4jk=
Subject key identifier: 9F:7F:2E:2E:75:43:4B:37:D5:7F:73:57:2E:7F:38:1E:D2:5D:53:E7
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 2E66BEA30AA1978F285E3C07D87749B2035B9A92
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138322e302f32342d3234203d3e20343032333135.roa
Signing time: Fri 24 Jul 2026 12:59:37 +0000
ROA not before: Fri 24 Jul 2026 12:54:37 +0000
ROA not after: Fri 23 Jul 2027 12:59:37 +0000
asID: 402315
IP address blocks: 186.241.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:66:be:a3:0a:a1:97:8f:28:5e:3c:07:d8:77:49:b2:03:5b:9a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 24 12:54:37 2026 GMT
Not After : Jul 23 12:59:37 2027 GMT
Subject: CN=9F7F2E2E75434B37D57F73572E7F381ED25D53E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:23:bc:48:dc:60:dd:c7:84:3f:c0:d5:98:
b3:9d:fa:e9:0e:d9:ed:19:c4:07:07:ad:54:8d:e4:
75:4e:59:6e:7b:f3:63:e6:26:86:68:58:f0:ea:91:
5c:c4:2b:d2:10:b3:b0:71:58:13:39:f0:bc:1f:96:
42:c7:e0:3d:25:0b:15:13:47:d7:fb:fa:66:05:94:
f0:bc:89:c9:46:3f:ab:86:85:81:f7:c4:1a:c6:99:
fb:3a:f3:26:da:b3:97:a7:f6:4b:02:0c:a5:59:05:
bb:dc:78:9a:f4:bf:50:d6:24:51:9f:ac:db:39:b8:
a0:79:b4:74:da:f3:16:f3:66:d1:2f:4a:da:0e:14:
98:d3:4b:66:bd:75:a1:17:3e:c9:e2:27:87:4e:65:
4b:91:3d:b0:df:25:38:c6:2f:8a:a9:7d:b1:fb:7e:
84:60:ab:dd:11:88:38:1b:c9:c7:dc:c3:af:cb:6a:
8a:2e:4c:e2:6f:0a:79:29:40:19:32:99:64:b5:6a:
e1:6f:36:49:2a:cf:14:52:26:bc:c1:b8:20:1f:33:
12:fd:2c:64:b1:d1:d4:c2:80:3d:5b:e9:1b:ba:9a:
91:7c:cd:7b:28:dd:55:0b:88:d7:6c:ff:bd:55:64:
3c:de:18:65:e5:30:46:56:bc:55:16:55:3d:95:15:
0f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7F:2E:2E:75:43:4B:37:D5:7F:73:57:2E:7F:38:1E:D2:5D:53:E7
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138322e302f32342d3234203d3e20343032333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.182.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:27:88:1b:71:67:06:8c:f4:40:28:ee:f3:f9:67:f1:0a:a7:
67:74:e2:56:a9:4a:ba:1a:c7:96:75:1b:6d:6a:bb:a4:2e:14:
d3:ab:9c:59:91:8d:e3:ec:77:f8:31:d1:b6:42:86:d5:24:45:
8d:0f:69:71:37:e8:42:54:68:b2:19:7b:de:66:8a:16:79:3e:
bb:ca:b9:22:f8:bb:ab:c3:9c:68:82:50:00:3c:3a:82:b1:95:
77:0a:0d:15:e6:b9:9a:5b:ae:30:35:42:c5:a4:de:d6:7e:c7:
19:ec:32:2d:b4:1c:f4:e9:0c:93:58:60:5a:77:71:e7:a2:88:
7c:45:8d:3c:49:4c:06:f6:06:f1:1c:11:f6:6c:9e:7d:12:c9:
3b:fe:03:98:b8:d5:23:60:c0:17:89:c8:25:04:17:b2:1a:b4:
08:f4:46:d0:81:fc:2b:27:ab:98:4f:db:71:d0:3d:09:1d:2d:
3e:cd:8b:20:f0:b7:92:74:1e:ba:1b:3e:91:3a:06:0b:f6:5a:
46:88:1a:16:11:3f:9d:b6:a9:a8:28:99:44:9f:10:5a:77:5d:
33:22:d7:bf:6f:b7:2a:e5:c8:e5:eb:29:07:1c:ed:35:b3:88:
26:42:9f:0e:09:6f:7d:e0:13:31:17:0f:1b:7b:a6:ee:46:78:
31:d0:a7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:35:14 2026 by rpki-client