Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3232362e302f32342d3234203d3e20343032323838.roa
File: 3135322e3233372e3232362e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier: OoWbAwgTLyQQ7aGrAh4ot3a5P+rsKWDyWua1gHDNMuk=
Subject key identifier: 33:36:C3:03:64:E6:29:CA:86:42:96:01:71:5C:1F:6D:1D:96:C7:14
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 6B6995651379A0351F45274E66C9FD52172A26F1
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3232362e302f32342d3234203d3e20343032323838.roa
Signing time: Wed 22 Jul 2026 16:45:49 +0000
ROA not before: Wed 22 Jul 2026 16:40:49 +0000
ROA not after: Wed 21 Jul 2027 16:45:49 +0000
asID: 402288
IP address blocks: 152.237.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:69:95:65:13:79:a0:35:1f:45:27:4e:66:c9:fd:52:17:2a:26:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:40:49 2026 GMT
Not After : Jul 21 16:45:49 2027 GMT
Subject: CN=3336C30364E629CA86429601715C1F6D1D96C714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:8d:94:95:98:a8:78:4f:8b:21:50:61:04:
d8:af:8b:49:71:25:83:da:cf:ad:5e:df:d5:5e:62:
bf:91:06:e9:38:84:d9:22:f6:49:46:19:4b:13:9d:
44:1b:d4:69:d1:56:4b:7f:d8:c6:3a:64:11:70:5d:
aa:a4:74:8a:1d:c1:48:7e:36:74:c6:66:e0:6f:c4:
1e:ab:97:44:46:77:ca:d3:ee:78:06:13:9e:44:0a:
ea:8c:77:76:14:85:f8:49:b4:52:b1:91:a7:ff:39:
c6:f6:a4:57:96:d6:6c:e3:07:aa:98:0f:d8:d7:49:
6d:a3:71:88:22:7a:3e:6f:91:6a:09:f4:81:51:08:
de:e6:16:13:f5:52:9f:01:03:46:a3:e6:a3:03:8d:
45:c1:a4:e8:c0:15:cc:18:9e:bd:8d:a3:44:0e:93:
2b:7e:70:52:1a:02:0a:87:91:76:69:74:a9:f4:2d:
2b:02:d1:1b:51:c2:b2:65:15:dc:a1:d0:ee:65:07:
0b:6c:23:17:a6:c5:b3:55:4e:71:01:8d:6f:cc:7e:
98:03:14:9b:61:1a:83:82:92:f5:9f:c3:9f:3e:68:
50:14:7d:80:76:b2:7b:f5:7d:e5:e5:3e:25:7c:d0:
2c:68:9b:31:7c:63:69:f5:2d:98:ff:30:74:32:be:
04:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:36:C3:03:64:E6:29:CA:86:42:96:01:71:5C:1F:6D:1D:96:C7:14
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3232362e302f32342d3234203d3e20343032323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.226.0/24
Signature Algorithm: sha256WithRSAEncryption
39:16:92:59:99:89:05:0d:27:64:31:0b:fd:e5:70:2e:e5:40:
21:b9:b4:73:7c:52:f7:ee:a7:a6:03:b5:7c:c0:36:56:c4:bc:
5d:9e:a5:d7:a5:c7:43:46:01:cb:f5:8b:d8:75:29:b7:47:e0:
32:f4:e6:88:15:0d:56:d1:09:3f:f4:d9:df:31:55:45:a3:6e:
ec:18:c8:19:06:13:84:22:ee:83:c7:60:c1:3a:34:31:72:fa:
93:61:dd:4e:e0:d9:41:36:aa:b0:8a:9d:fb:2a:b2:79:ba:83:
af:dd:68:47:7a:11:25:c9:74:70:1a:a4:f4:00:8e:ed:09:1f:
ce:46:aa:e2:12:f5:c7:be:60:15:60:51:57:cc:87:e8:c4:69:
84:f5:a8:87:6c:40:52:85:e3:26:f2:dd:e7:14:1e:e1:25:4a:
92:6d:17:4a:07:e5:0b:cd:86:8a:65:5d:84:db:56:eb:a4:c3:
ee:78:09:07:50:9b:da:85:66:b6:d0:ff:b0:f5:d0:cf:81:5b:
3a:1e:3e:a3:11:99:d7:4b:0e:6d:cf:99:d0:7f:26:70:d9:7b:
b8:24:a6:e3:3d:f8:e0:a9:02:90:b4:d8:c6:41:be:64:5d:c4:
de:83:df:a4:34:76:8e:91:46:c9:b1:60:b5:b2:d6:bb:ed:e1:
30:8d:c5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:56:07 2026 by rpki-client