Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138352e302f32342d3234203d3e20333939333539.roa
File: 3138362e3234312e3138352e302f32342d3234203d3e20333939333539.roa (raw, json)
Hash identifier: EU/gz0YwFBP/s1HPBUkUM0d92cmfO5vs8eXHcKc6j/Y=
Subject key identifier: F5:D5:B2:88:57:5A:C9:08:49:B6:75:EE:7D:FC:6D:7C:8C:C2:68:F1
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 20FDDAB5917855BFD3BB4C94BD0B63C56FBE3668
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138352e302f32342d3234203d3e20333939333539.roa
Signing time: Fri 24 Jul 2026 11:14:52 +0000
ROA not before: Fri 24 Jul 2026 11:09:52 +0000
ROA not after: Fri 23 Jul 2027 11:14:52 +0000
asID: 399359
IP address blocks: 186.241.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:fd:da:b5:91:78:55:bf:d3:bb:4c:94:bd:0b:63:c5:6f:be:36:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 24 11:09:52 2026 GMT
Not After : Jul 23 11:14:52 2027 GMT
Subject: CN=F5D5B288575AC90849B675EE7DFC6D7C8CC268F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:30:a9:96:3c:06:29:0b:f6:24:e4:9d:4d:8e:
3e:d8:c5:9b:89:d7:93:82:82:8f:e4:ee:b2:05:46:
ce:d5:09:79:a8:9e:2d:91:75:b7:3a:bb:4b:19:90:
d8:f9:9f:65:3e:de:f4:b0:1f:33:b4:3c:d2:8d:bf:
fc:3a:13:13:d6:92:41:f1:d9:04:0d:2b:70:3f:ed:
b3:02:3e:f5:8a:27:9a:f0:f9:c1:cf:49:88:46:b6:
14:5e:55:51:a5:ad:09:e6:8d:6f:29:a5:e7:9b:2c:
22:b4:30:09:8f:31:b4:d9:0f:f2:47:49:7a:67:58:
5c:f2:19:2c:fe:ab:5f:6c:35:96:c1:1d:1f:ed:2d:
7a:8b:ab:d1:7e:12:3f:03:c7:3d:4f:1c:b5:0e:21:
4e:45:a4:59:de:0f:04:96:74:10:6b:c0:59:da:62:
a5:d0:bb:a7:17:17:d1:0e:22:c4:27:cb:42:63:44:
95:40:e9:81:ba:fb:c4:8b:dc:91:96:6b:db:1c:89:
c4:c4:ed:ed:39:1b:7d:00:04:1b:37:07:92:6c:1a:
dc:be:66:09:85:9a:cd:3a:4d:cb:72:d5:90:c3:60:
c5:aa:d3:da:ef:08:16:e1:e2:25:77:45:0f:13:9f:
30:6b:91:36:24:2f:72:43:7d:2d:58:90:8c:8b:bd:
30:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D5:B2:88:57:5A:C9:08:49:B6:75:EE:7D:FC:6D:7C:8C:C2:68:F1
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138352e302f32342d3234203d3e20333939333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.185.0/24
Signature Algorithm: sha256WithRSAEncryption
94:55:88:8c:c7:a7:c9:e1:41:b7:3e:b9:7c:c5:4f:39:c3:4c:
15:07:87:14:da:23:fa:16:27:0f:6d:fe:f7:bd:3b:e0:3c:3c:
65:53:f3:b4:70:6f:96:e7:72:00:95:48:9e:2d:3a:6c:7f:6a:
0c:d8:83:69:96:09:59:b4:5e:df:38:35:41:68:09:06:08:f5:
aa:d1:51:62:d9:70:b0:e3:3f:91:15:a0:30:fc:b3:7d:65:50:
ec:65:92:5a:d8:02:cf:f3:34:52:16:9d:e5:7d:ca:d0:7f:27:
e6:84:84:ac:ac:33:40:61:e8:98:a3:20:3e:99:15:d3:8e:0d:
95:1f:58:a6:88:d8:49:59:5d:c6:1f:50:e1:8f:be:ff:81:fc:
a7:94:55:86:5f:29:0c:6b:cc:ec:6e:1d:6a:55:23:e4:8e:56:
0c:12:46:07:d0:36:16:2b:7f:15:f1:4c:bc:f4:75:c2:30:85:
9b:35:e8:04:47:fa:89:c4:f2:ff:66:25:8a:21:34:79:4d:a1:
bb:02:d3:5d:61:d2:14:20:cc:f8:93:4a:1e:13:ec:8d:95:48:
6b:0f:12:6d:68:02:d5:ce:46:22:a8:3f:03:0d:a3:94:12:74:
bf:04:dc:28:34:1a:3b:95:2d:c8:86:39:a1:33:d9:5a:69:45:
9d:a3:0d:79
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUIP3atZF4Vb/Tu0yUvQtjxW++NmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA3MjQxMTA5NTJaFw0yNzA3MjMxMTE0NTJaMDMxMTAvBgNV
BAMTKEY1RDVCMjg4NTc1QUM5MDg0OUI2NzVFRTdERkM2RDdDOENDMjY4RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZMKmWPAYpC/Yk5J1Njj7YxZuJ
15OCgo/k7rIFRs7VCXmoni2Rdbc6u0sZkNj5n2U+3vSwHzO0PNKNv/w6ExPWkkHx
2QQNK3A/7bMCPvWKJ5rw+cHPSYhGthReVVGlrQnmjW8ppeebLCK0MAmPMbTZD/JH
SXpnWFzyGSz+q19sNZbBHR/tLXqLq9F+Ej8Dxz1PHLUOIU5FpFneDwSWdBBrwFna
YqXQu6cXF9EOIsQny0JjRJVA6YG6+8SL3JGWa9scicTE7e05G30ABBs3B5JsGty+
ZgmFms06Tcty1ZDDYMWq09rvCBbh4iV3RQ8TnzBrkTYkL3JDfS1YkIyLvTBZAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU9dWyiFdayQhJtnXuffxtfIzCaPEwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzEzODM2MmUzMjM0MzEyZTMx
MzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzOTMzMzUzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALrxuTANBgkqhkiG9w0BAQsFAAOCAQEAlFWIjMenyeFBtz65fMVPOcNMFQeH
FNoj+hYnD23+97074Dw8ZVPztHBvludyAJVIni06bH9qDNiDaZYJWbRe3zg1QWgJ
Bgj1qtFRYtlwsOM/kRWgMPyzfWVQ7GWSWtgCz/M0Uhad5X3K0H8n5oSErKwzQGHo
mKMgPpkV044NlR9YpojYSVldxh9Q4Y++/4H8p5RVhl8pDGvM7G4dalUj5I5WDBJG
B9A2Fit/FfFMvPR1wjCFmzXoBEf6icTy/2YliiE0eU2huwLTXWHSFCDM+JNKHhPs
jZVIaw8SbWgC1c5GIqg/Aw2jlBJ0vwTcKDQaO5UtyIY5oTPZWmlFnaMNeQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:44:02 2026 by rpki-client