Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138332e302f32342d3234203d3e20343032323635.roa
File: 3138362e3234312e3138332e302f32342d3234203d3e20343032323635.roa (raw, json)
Hash identifier: Rv/qJ5pkb56ZPY26B9GRORLL+wfijbkqAXAS3kLfYh4=
Subject key identifier: 7B:8A:7B:F9:BF:8E:7F:B8:D4:69:8D:29:94:88:8B:74:B4:A9:F1:D9
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 6003968E0CBFEECF9CE825D592F2806A3A82E673
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138332e302f32342d3234203d3e20343032323635.roa
Signing time: Sun 26 Jul 2026 09:51:12 +0000
ROA not before: Sun 26 Jul 2026 09:46:12 +0000
ROA not after: Sun 25 Jul 2027 09:51:12 +0000
asID: 402265
IP address blocks: 186.241.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:03:96:8e:0c:bf:ee:cf:9c:e8:25:d5:92:f2:80:6a:3a:82:e6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 26 09:46:12 2026 GMT
Not After : Jul 25 09:51:12 2027 GMT
Subject: CN=7B8A7BF9BF8E7FB8D4698D2994888B74B4A9F1D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:af:72:7d:10:fe:41:e9:25:c0:7c:ab:43:dd:
4d:72:40:1b:67:13:6c:da:8d:bd:81:49:63:3b:86:
50:64:8a:23:60:6c:2f:84:b5:6c:a5:27:04:0f:08:
5c:ac:80:71:35:38:0b:24:98:ce:ab:0c:d0:7d:fe:
89:c8:01:14:a9:b8:81:4b:d0:9b:d7:cd:bf:bf:a2:
28:13:f9:48:5b:f7:98:bf:51:ad:32:e9:27:8b:b8:
d5:59:92:15:9a:94:ea:b0:28:40:6e:3e:ba:51:a6:
a9:2f:82:f8:ca:6d:ac:b4:24:a5:ec:71:e6:c8:7b:
6c:ce:c6:18:d1:a4:e8:84:81:41:01:9f:3e:1d:8e:
04:ef:a9:66:90:b8:d0:30:4b:1b:61:91:c5:5b:3e:
5d:cc:17:30:65:b7:ac:a1:67:8e:fa:7b:b4:81:71:
9e:98:02:9b:58:95:fe:a1:be:69:70:88:8a:76:49:
8c:50:a2:eb:d9:00:77:56:81:42:b4:51:5f:9c:f0:
77:bc:41:b2:b1:73:f1:77:48:01:fb:cc:3e:66:78:
4f:f3:23:4c:e5:ce:5a:18:b3:54:1e:4d:66:39:82:
80:bc:f9:bf:85:22:50:8f:f4:48:70:f4:2d:8a:08:
5e:f5:95:48:4c:40:b5:34:1e:89:97:e8:70:40:34:
f9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8A:7B:F9:BF:8E:7F:B8:D4:69:8D:29:94:88:8B:74:B4:A9:F1:D9
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138332e302f32342d3234203d3e20343032323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.183.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:75:cb:d5:40:75:56:e2:22:60:6b:d4:d5:99:c7:2a:12:12:
ac:6f:43:a5:b3:34:64:a2:77:fd:c5:17:8b:7c:81:08:d9:44:
58:3b:7f:5b:68:7c:de:f4:c8:21:e7:ec:ee:4e:ac:ae:5a:fb:
2e:3d:35:fe:f9:be:22:d5:6f:eb:10:7b:15:4f:09:56:c1:02:
0b:fc:83:8c:38:c2:c5:61:0c:a6:82:2d:25:36:b5:41:59:1d:
e7:be:2b:20:d7:48:ef:79:26:45:aa:ca:dd:05:51:1c:2e:ba:
59:d7:f3:a8:72:d2:a3:fc:1e:7f:f3:65:37:f2:f7:db:4d:15:
fb:3e:0a:c2:21:26:6e:27:3d:10:99:23:95:5d:cf:32:35:c0:
11:8f:40:10:98:ba:46:eb:61:fa:b4:22:09:99:93:fe:82:7e:
21:c3:8a:98:d2:5f:d8:c9:bb:b7:44:bc:bf:d2:bd:fc:e1:16:
2a:63:56:ce:ee:6b:76:95:ee:7d:7c:67:ca:35:20:59:62:70:
26:62:b7:96:f4:48:cb:4b:f3:1d:16:d8:84:f8:9f:54:8a:c9:
bb:6e:ae:f7:11:60:9d:75:1b:1c:d6:28:df:c6:49:2b:c3:07:
22:eb:b5:6e:14:40:76:fc:0e:86:f1:6b:c9:72:a7:08:5d:bd:
d6:72:13:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:34:44 2026 by rpki-client