Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138382e302f32342d3234203d3e20343032323635.roa
File: 3138362e3234312e3138382e302f32342d3234203d3e20343032323635.roa (raw, json)
Hash identifier: XqR6EBm4nhzGRhio5HEKE4LvwfruEZpU67egGhtaIo4=
Subject key identifier: EF:8D:3D:E5:13:48:38:29:0E:1B:DE:17:0C:94:E8:D0:FB:75:1D:12
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 56FB6B15B178FC7551348941F1631B8CB868ACC8
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138382e302f32342d3234203d3e20343032323635.roa
Signing time: Fri 24 Jul 2026 13:27:08 +0000
ROA not before: Fri 24 Jul 2026 13:22:08 +0000
ROA not after: Fri 23 Jul 2027 13:27:08 +0000
asID: 402265
IP address blocks: 186.241.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:fb:6b:15:b1:78:fc:75:51:34:89:41:f1:63:1b:8c:b8:68:ac:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 24 13:22:08 2026 GMT
Not After : Jul 23 13:27:08 2027 GMT
Subject: CN=EF8D3DE5134838290E1BDE170C94E8D0FB751D12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b9:ea:bd:c9:f4:04:a7:ab:42:55:2f:21:b8:
74:33:c3:33:b9:90:11:aa:0a:21:57:e3:3f:86:eb:
6b:95:c9:39:b5:54:56:36:af:ce:43:e2:5c:08:25:
f2:9f:d4:76:3c:e6:9c:81:0f:fa:86:41:21:c9:cb:
5a:13:8f:34:8b:6a:57:db:34:b5:bd:69:95:21:24:
08:e6:f7:b4:33:c4:dd:ad:dd:d0:95:b1:0b:79:ff:
76:98:b0:41:5a:06:50:1f:64:db:a2:1e:9d:1a:78:
9c:68:7e:0f:0b:f9:53:59:29:7c:23:8e:72:d2:97:
67:4b:25:9f:e6:ec:f2:6e:4b:c4:95:49:b1:1b:48:
7c:76:e0:4c:58:a7:fb:0d:71:1f:ff:e8:b6:29:ff:
0e:9c:5d:81:24:9f:07:db:d1:96:f3:dc:98:fe:bc:
34:37:9d:51:47:0b:0b:4c:ef:3a:c0:86:45:57:4d:
8e:02:63:53:fa:9b:26:a1:17:af:cf:7d:9e:91:af:
14:78:56:8d:77:5a:ac:a4:b9:25:12:e1:26:01:a9:
3b:de:88:52:e7:20:15:49:9e:dd:80:36:f9:a7:33:
30:16:e3:f8:67:01:f0:88:1e:ab:22:79:13:e8:55:
3b:04:ee:fb:d2:b1:fe:3c:9c:b4:64:d7:1b:e0:d9:
1f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8D:3D:E5:13:48:38:29:0E:1B:DE:17:0C:94:E8:D0:FB:75:1D:12
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138382e302f32342d3234203d3e20343032323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.188.0/24
Signature Algorithm: sha256WithRSAEncryption
83:91:a9:a3:61:9b:26:ef:bc:cc:1d:e4:a1:ad:a2:35:f1:f0:
a0:26:50:44:83:47:7d:4e:3e:c3:3a:91:86:4c:ce:8a:4c:f3:
9d:dd:1f:03:f0:e0:1f:1f:ec:4d:6f:a0:ad:ae:11:70:2e:fd:
d6:c5:c7:05:af:00:d5:b6:0d:b7:3c:9e:83:4e:d0:b5:58:92:
5f:ae:da:21:2d:68:a8:f6:a5:69:67:ab:23:56:3c:62:5e:c3:
ec:0b:bb:9b:64:bd:ed:94:68:c3:72:1e:9c:35:00:fa:bb:3f:
f8:52:ce:fc:65:e1:b6:d7:55:bc:eb:44:5e:a9:3b:4e:ce:41:
b8:a9:5b:85:71:1e:66:75:4f:61:10:d5:03:0f:a8:a0:dd:ac:
b1:8b:ae:49:8d:cc:1b:ab:05:0a:ea:fa:f7:3f:81:13:fa:11:
e4:20:94:8d:ad:58:6b:60:8b:bb:52:6e:49:ad:3e:59:a5:1b:
70:bc:fa:08:ab:7c:de:f4:ba:b8:e7:2f:07:d0:a8:d6:e3:ed:
37:59:73:08:57:5c:6c:ba:91:de:21:be:6b:24:93:f4:ff:ea:
2f:83:81:e6:4b:80:70:9e:dc:8f:41:8d:29:ec:59:f3:7c:76:
aa:e5:e9:83:35:d9:15:4a:1d:05:97:73:78:23:07:ed:bd:a0:
3a:61:08:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:34:24 2026 by rpki-client