Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138372e302f32342d3234203d3e20343032323635.roa
File: 3138362e3234312e3138372e302f32342d3234203d3e20343032323635.roa (raw, json)
Hash identifier: wWJ4baS8uQrGdnQBxIhhVgYKQjZcYXoTlsujS8wznCM=
Subject key identifier: EE:4F:B2:16:AB:3A:FB:D1:51:C0:10:63:39:64:44:DA:8C:93:D4:0F
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 70E867AE2D2FDF628B9B2CBEEFE5990ECC0F3A61
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138372e302f32342d3234203d3e20343032323635.roa
Signing time: Sun 26 Jul 2026 10:32:42 +0000
ROA not before: Sun 26 Jul 2026 10:27:42 +0000
ROA not after: Sun 25 Jul 2027 10:32:42 +0000
asID: 402265
IP address blocks: 186.241.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:e8:67:ae:2d:2f:df:62:8b:9b:2c:be:ef:e5:99:0e:cc:0f:3a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 26 10:27:42 2026 GMT
Not After : Jul 25 10:32:42 2027 GMT
Subject: CN=EE4FB216AB3AFBD151C01063396444DA8C93D40F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:1b:11:6c:3b:26:bd:98:07:3e:46:b0:03:
43:68:09:07:32:64:b0:d1:10:bb:01:db:68:40:e7:
65:ac:69:84:cd:33:2f:82:8d:d9:78:4a:44:25:c2:
42:d4:ff:b1:cf:ad:10:2f:5e:e8:fd:f3:b2:c3:c2:
e2:b0:62:c9:ba:bd:6e:e2:ea:00:10:52:79:64:32:
a4:eb:42:64:99:ad:47:e2:14:61:fc:b3:f7:79:99:
d1:03:0b:04:94:20:e1:43:37:ba:bb:3e:f3:9d:f3:
02:3a:63:6e:e7:fd:4b:08:5e:66:1b:e7:b6:3a:06:
eb:f2:91:65:6b:d6:32:dd:e1:56:13:99:5b:c1:2c:
95:d8:14:2b:ce:57:c9:a1:b6:14:18:ba:6e:18:73:
2d:95:d0:61:35:75:f6:59:af:29:35:6d:81:61:48:
1f:4c:4b:b0:eb:29:9c:6a:d1:1b:98:05:0c:b4:ba:
9e:b6:10:c6:c9:10:1f:43:93:64:d8:35:b8:2a:3b:
3a:2c:87:c1:94:bc:43:7c:7e:0c:16:66:d6:0d:fc:
2e:97:6f:54:0f:96:e4:88:61:36:89:e7:29:a4:65:
3e:9b:ce:81:4d:c3:dd:a3:19:04:cd:d0:8b:ab:9c:
75:0d:06:23:0f:90:99:9d:b4:35:ce:8c:f1:4d:cd:
95:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4F:B2:16:AB:3A:FB:D1:51:C0:10:63:39:64:44:DA:8C:93:D4:0F
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138372e302f32342d3234203d3e20343032323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.187.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ce:44:8e:ae:a8:be:d7:8c:8a:64:0d:13:a0:d5:2a:02:aa:
41:5a:bd:cd:a0:0f:27:68:56:c3:24:80:0a:14:cf:cc:d9:f5:
a2:c9:00:62:04:bf:46:3f:f9:18:9d:22:25:72:86:b7:e6:bb:
6c:82:f7:01:7e:d4:7a:12:06:8c:41:a7:2d:32:36:c8:99:9a:
b6:7e:c0:20:16:89:2a:81:48:5e:3e:08:9b:77:b7:4a:b5:0f:
25:cc:b1:b9:78:21:8d:f2:2b:2f:2f:17:c9:6c:64:c8:01:4c:
ba:11:ac:99:46:6a:64:88:fd:cf:a0:e8:7d:74:a4:7b:38:2d:
31:81:b9:5e:87:ae:dc:83:2e:47:ce:de:47:e9:9d:d6:3d:69:
fa:79:a7:56:bc:d3:39:e0:0d:17:70:38:8e:20:e1:fc:94:1b:
07:cb:1c:17:80:a5:4b:a5:a7:d9:9a:4f:30:f8:3b:62:b2:4f:
61:9c:79:3d:e6:05:e7:89:f2:10:c8:64:4b:2e:d0:14:4c:d2:
d4:a7:79:7d:3d:bd:f8:b3:24:a3:51:9a:24:2c:98:a2:ab:17:
db:8f:66:13:32:bc:8f:95:16:dc:da:e9:57:ae:67:98:62:02:
d9:93:b2:0c:fd:51:92:64:dc:5b:41:28:12:9e:e6:3e:33:82:
32:54:54:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:35:09 2026 by rpki-client