Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138392e302f32342d3234203d3e20343032333135.roa
File: 3138362e3234312e3138392e302f32342d3234203d3e20343032333135.roa (raw, json)
Hash identifier: 5Y+wtcB+7pjI8fxlyX0cSpmH5o1bcspwNy1p1Ke0w7I=
Subject key identifier: 27:C0:C4:09:64:C7:12:F8:33:77:A9:B2:6D:F6:0F:E1:20:ED:54:70
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 3B64656673F0530BCEA332C837FD751E238D0E08
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138392e302f32342d3234203d3e20343032333135.roa
Signing time: Sun 26 Jul 2026 10:30:33 +0000
ROA not before: Sun 26 Jul 2026 10:25:33 +0000
ROA not after: Sun 25 Jul 2027 10:30:33 +0000
asID: 402315
IP address blocks: 186.241.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:64:65:66:73:f0:53:0b:ce:a3:32:c8:37:fd:75:1e:23:8d:0e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 26 10:25:33 2026 GMT
Not After : Jul 25 10:30:33 2027 GMT
Subject: CN=27C0C40964C712F83377A9B26DF60FE120ED5470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:ea:01:73:24:4d:b0:a3:55:4d:45:4d:fa:
8e:02:e7:ae:a1:57:fd:46:d0:96:18:e2:30:2f:dc:
48:33:6c:c7:49:68:a6:33:17:ca:92:9c:7c:23:8a:
e4:66:9c:9d:82:70:d6:fd:87:5e:e0:bf:f8:63:e5:
3c:ea:5c:02:e7:46:21:ec:f8:98:79:3a:ba:07:79:
41:d9:9d:16:85:48:b3:17:fd:60:89:46:2a:e8:06:
62:b7:8c:e6:03:75:45:69:42:0e:e8:44:cc:2b:5d:
23:a1:fe:d6:16:d6:1b:da:41:a5:1f:6b:4f:33:c6:
11:45:77:26:e6:cc:fa:dc:2e:c1:48:9d:23:64:fa:
a0:55:47:f1:30:f1:81:f4:3b:a6:99:ae:94:c6:af:
41:2a:75:bf:6d:d8:80:3c:2f:da:fa:07:2e:2d:7a:
a3:11:f1:8c:2e:64:2b:55:38:a4:94:27:d7:8e:e4:
50:e1:63:58:9f:eb:4b:f4:bc:78:f0:43:e6:d8:3a:
89:b5:e9:d9:f3:38:95:fc:34:d4:19:28:25:87:eb:
84:70:7b:f0:11:af:ef:55:b1:c7:f6:c4:18:55:a6:
fe:2a:ff:e2:d3:02:95:59:84:ad:70:a5:cd:1d:2d:
e9:3d:1e:f4:0b:49:c2:4e:fb:ce:ef:a0:6c:78:dc:
33:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C0:C4:09:64:C7:12:F8:33:77:A9:B2:6D:F6:0F:E1:20:ED:54:70
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138392e302f32342d3234203d3e20343032333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.189.0/24
Signature Algorithm: sha256WithRSAEncryption
28:61:d9:65:1d:61:6c:67:f2:59:05:e0:76:79:e9:c9:4f:c2:
59:50:c4:99:b5:ed:84:7b:79:51:42:97:10:b9:a9:db:c3:e8:
07:8f:66:0e:05:e9:c0:02:70:74:b5:5a:75:ff:f7:99:52:c6:
1e:f1:67:fe:05:02:38:5d:e9:9d:1f:21:08:af:8e:61:f7:b3:
f4:b2:40:ad:76:2a:33:b6:53:85:bd:30:5e:16:18:ad:37:c1:
20:c0:45:c9:c5:4b:b6:7f:21:db:d8:1f:8c:17:73:df:82:a1:
d3:5d:db:ce:15:f6:fd:5c:40:29:2b:a7:2b:de:9e:f1:63:ea:
3b:82:20:bd:2c:16:bd:de:fb:af:03:dd:52:a4:3d:38:4a:14:
b8:bd:42:b2:32:66:50:dd:39:12:0a:37:05:ed:fc:55:2c:a5:
a6:26:3e:0e:d9:f6:b5:ba:6b:97:dd:64:24:77:72:7f:6e:15:
57:5b:f2:a4:67:ce:60:98:34:ab:48:9f:df:b0:83:f2:77:e7:
85:c7:b2:49:28:ab:3a:e7:90:3e:9e:1b:6b:8d:63:23:99:76:
94:10:b9:3b:e9:b4:68:5a:85:c1:f3:46:0c:55:f5:15:09:78:
5d:aa:ce:49:9a:09:f6:d6:ef:e3:ae:82:47:16:aa:60:b6:54:
8e:c7:dc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:08:08 2026 by rpki-client