Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3139312e302f32342d3234203d3e20343032333135.roa
File: 3138362e3234312e3139312e302f32342d3234203d3e20343032333135.roa (raw, json)
Hash identifier: bTxMFeKDHodhqCYLtkAjOWmlQw1zoDv9r4ceh4ZLVTA=
Subject key identifier: FB:E5:07:A5:72:9C:24:7E:D3:6F:6C:BB:90:1F:AC:9C:1C:13:69:C2
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 69520FC3AA0B22DF909120EB66CC860F3FB7C6BA
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3139312e302f32342d3234203d3e20343032333135.roa
Signing time: Fri 24 Jul 2026 13:29:15 +0000
ROA not before: Fri 24 Jul 2026 13:24:15 +0000
ROA not after: Fri 23 Jul 2027 13:29:15 +0000
asID: 402315
IP address blocks: 186.241.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:52:0f:c3:aa:0b:22:df:90:91:20:eb:66:cc:86:0f:3f:b7:c6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 24 13:24:15 2026 GMT
Not After : Jul 23 13:29:15 2027 GMT
Subject: CN=FBE507A5729C247ED36F6CBB901FAC9C1C1369C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:c1:78:d3:c5:58:bb:6d:70:b3:b2:c3:1c:
5e:2d:06:7a:a7:67:80:9a:99:9c:7a:ef:e1:62:8c:
a2:95:8f:79:ed:b3:58:43:79:b6:12:2a:df:92:00:
4a:7d:c7:41:1f:fd:85:7b:66:ad:34:ee:fb:ec:17:
64:3c:ab:24:a0:ce:56:22:85:29:dd:53:1f:c2:ad:
83:a8:7f:ff:a0:80:09:49:8f:1a:dc:c3:45:e7:d7:
5d:75:a7:a8:ba:ee:c3:29:fd:22:19:a3:fc:bd:42:
3a:3c:1d:e3:ed:f4:a7:72:2b:b3:e8:07:b4:df:ad:
af:11:92:c2:95:bd:19:d9:dd:a2:fa:f4:fd:14:03:
0c:e8:aa:64:2f:08:90:9a:d4:81:4f:0d:ce:fb:f5:
9a:df:b2:a1:ea:68:bf:2b:d1:7f:20:09:0d:23:ef:
ee:a1:8c:9f:44:29:ff:e9:d8:dc:e1:3f:68:33:8d:
e3:df:38:1d:6c:25:f7:1d:c3:68:5f:fa:78:4e:1f:
c0:c3:77:af:52:5f:19:03:64:58:09:d4:7b:5c:91:
ae:27:74:2d:1d:bc:71:72:12:6c:33:d5:5e:8d:47:
f8:d3:fb:0b:b2:3f:87:87:d2:c4:a2:17:67:f0:53:
2a:65:f6:6f:88:62:c2:f4:a5:60:db:be:aa:61:fd:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E5:07:A5:72:9C:24:7E:D3:6F:6C:BB:90:1F:AC:9C:1C:13:69:C2
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3139312e302f32342d3234203d3e20343032333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:2a:87:65:18:55:0f:58:fa:72:57:c5:be:f1:b0:ef:bc:e6:
50:18:2f:61:0b:d2:d2:76:78:71:98:1b:d2:13:2b:81:45:5f:
e4:63:d8:4d:cd:2c:f7:90:d9:0c:98:68:15:46:04:ec:cf:bc:
59:37:ba:68:04:9c:a8:9d:f3:85:9d:d4:5a:48:07:90:9d:54:
06:bc:ba:30:ec:24:24:14:5b:c6:fc:34:7e:29:0a:01:74:d7:
b1:20:d1:0f:51:26:e2:de:09:0e:c8:1c:98:f2:83:6c:1c:d1:
fd:8d:62:25:8d:d6:39:56:07:bc:b3:c0:b7:b5:d1:37:39:fb:
73:3b:e3:7c:c2:10:48:41:4e:5f:56:df:cf:5f:29:7b:7b:c6:
cf:89:07:02:80:8e:ff:60:49:5a:76:b0:38:0e:b6:b3:7a:c9:
08:d2:8c:c1:eb:24:7a:f9:d3:17:38:d2:fd:d6:fd:a6:e9:89:
9f:ee:52:8d:fb:38:5c:ac:d2:38:dd:40:62:4d:a5:4c:0a:0b:
8d:c4:0e:4d:af:c4:8b:21:c3:db:46:81:ed:6b:9b:19:94:bb:
b4:3a:c2:19:c6:8d:c3:57:ce:49:62:59:91:60:a0:00:0a:2a:
5d:5f:48:a2:87:95:9c:cc:5b:da:d5:89:11:a8:cd:68:24:aa:
7e:05:3c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:48:51 2026 by rpki-client