Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3232352e302f32342d3234203d3e20313431373839.roa
File: 3135322e3233372e3232352e302f32342d3234203d3e20313431373839.roa (raw, json)
Hash identifier: 2HCaFRUk4G07Uur7volw75RzRvVTGefRYqUGqXrzfhE=
Subject key identifier: A9:02:02:F4:86:90:0D:4E:55:43:B0:48:06:3E:AC:54:B1:A4:CC:94
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 0CABF7E332C2DEC3405E5E6CA7B2E17D306CDC28
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3232352e302f32342d3234203d3e20313431373839.roa
Signing time: Fri 17 Jul 2026 11:54:55 +0000
ROA not before: Fri 17 Jul 2026 11:49:55 +0000
ROA not after: Fri 16 Jul 2027 11:54:55 +0000
asID: 141789
IP address blocks: 152.237.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:ab:f7:e3:32:c2:de:c3:40:5e:5e:6c:a7:b2:e1:7d:30:6c:dc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 17 11:49:55 2026 GMT
Not After : Jul 16 11:54:55 2027 GMT
Subject: CN=A90202F486900D4E5543B048063EAC54B1A4CC94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:28:90:b9:b6:28:ed:97:91:b6:34:af:d3:
73:fb:8b:fc:6d:31:f5:65:8a:d0:8c:3d:b2:75:82:
2f:84:4c:c0:dd:cc:a9:6b:ed:37:0f:e9:74:21:5c:
60:ab:50:1d:c8:dc:8d:bf:50:21:fb:84:cf:88:03:
97:5e:bb:9c:9a:ff:ad:9e:73:7a:c7:eb:89:e6:af:
e2:b2:28:24:16:a1:2e:05:4c:4f:56:6a:d8:81:dc:
ec:67:eb:e5:0c:87:f7:5f:19:71:e4:e5:a8:7f:98:
13:c3:0c:ed:d8:d4:cb:6d:3f:eb:54:d9:07:1c:9e:
df:9b:08:50:3c:6d:22:1b:1d:10:da:9c:bd:1b:17:
db:42:f6:d5:29:56:b5:22:57:71:e8:6b:d4:4a:ca:
65:09:33:e4:56:10:30:54:18:94:b8:16:8c:e4:0f:
e7:58:67:32:16:df:65:f5:3d:8b:26:85:7f:a0:74:
7c:84:27:3e:1b:13:70:93:98:49:b8:a5:13:39:03:
29:96:8c:06:bd:2a:96:d0:d6:99:37:1a:7b:f0:4e:
1a:de:86:0a:e2:77:ed:d3:5d:f6:76:b7:fb:b5:59:
0e:af:bc:12:87:e5:f2:21:bd:d0:17:50:f4:44:50:
e2:4a:6c:02:54:77:0e:d5:c4:77:5b:79:ea:50:07:
5f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:02:02:F4:86:90:0D:4E:55:43:B0:48:06:3E:AC:54:B1:A4:CC:94
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3232352e302f32342d3234203d3e20313431373839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:72:df:c9:70:3b:50:e3:1b:0c:dc:dc:40:71:93:e5:8a:da:
6d:bf:9a:71:54:3b:d7:36:05:b2:ae:ec:55:d9:4f:87:36:d8:
ce:d5:49:c9:2e:00:cb:bc:e1:d7:00:1d:33:11:7b:e9:0f:78:
94:43:b2:0e:a4:d9:db:15:99:ea:42:69:dd:93:c3:19:53:65:
a5:5a:ff:75:9e:56:95:ca:7b:e8:7c:01:96:2c:60:fe:93:ee:
5c:71:84:bb:06:89:79:17:55:d3:a1:dd:d1:7c:71:55:75:cd:
f8:be:06:47:36:05:35:40:4c:63:1a:4d:2e:95:08:2c:38:f5:
12:1b:d0:ac:b9:49:c5:cd:34:2a:0e:10:02:5b:fe:a4:ea:a1:
71:22:b0:87:84:5e:42:7c:a3:d2:40:09:be:71:33:c1:b0:d8:
25:b3:2e:1a:fa:e9:90:42:7b:b5:13:67:94:93:ae:e2:61:06:
e9:29:32:48:d9:b6:80:8e:b3:d3:c1:5c:6c:05:e7:05:0b:0b:
ac:25:8b:95:57:7c:fb:8e:7f:82:01:cc:52:e8:1d:b7:6d:e2:
9e:49:ad:ae:16:27:e8:9f:7e:5f:e3:b2:f1:6b:40:61:64:20:
44:0e:c2:0d:cd:53:d6:bc:6d:a5:74:58:4b:55:99:23:2f:c4:
56:b1:43:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:38:46 2026 by rpki-client