Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3232382e302f32342d3234203d3e20343032323838.roa
File: 3135322e3233372e3232382e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier: mrDO2zuuaI4p7hMWOkSB33ujs5crzJHIgkgk2QspM+Y=
Subject key identifier: 65:80:4F:92:2E:A5:DC:FB:0C:2D:4F:70:11:42:C8:66:08:1A:1C:57
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 5A4A565FA9EF0ACA62F9B3825D8FD78405A687FE
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3232382e302f32342d3234203d3e20343032323838.roa
Signing time: Wed 22 Jul 2026 15:02:08 +0000
ROA not before: Wed 22 Jul 2026 14:57:08 +0000
ROA not after: Wed 21 Jul 2027 15:02:08 +0000
asID: 402288
IP address blocks: 152.237.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:4a:56:5f:a9:ef:0a:ca:62:f9:b3:82:5d:8f:d7:84:05:a6:87:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 14:57:08 2026 GMT
Not After : Jul 21 15:02:08 2027 GMT
Subject: CN=65804F922EA5DCFB0C2D4F701142C866081A1C57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4f:d3:46:9b:79:16:d2:ff:b6:b1:23:a1:db:
54:0a:a7:3e:ec:72:09:14:e0:7a:7c:d5:01:59:18:
a0:27:b3:31:3d:c1:d8:6b:0f:d0:8e:0b:ed:d6:24:
bb:68:27:77:40:e9:36:f1:7d:1b:f7:ed:c2:96:d5:
a7:85:8c:9e:fa:4f:d0:9e:e2:5c:02:da:19:af:4f:
66:3d:8f:9e:9e:ec:a8:70:1f:b7:1c:28:f6:58:3e:
5e:c1:7e:c5:95:25:87:c4:c7:12:ae:cd:97:12:bd:
95:81:f0:db:82:7b:63:e2:0f:44:d8:9e:e5:d1:7d:
f6:05:47:f4:4f:f1:94:ff:70:ec:c9:7f:23:6b:3d:
78:7c:ec:bc:34:7e:f2:46:9e:b1:47:64:1c:6d:0d:
63:13:da:9c:7d:84:be:ad:4f:14:03:6c:1f:2c:e3:
bf:52:d0:19:c1:7b:4b:68:ea:76:d1:dc:7d:64:f4:
6d:43:20:33:52:fb:7a:63:c7:44:bb:31:ae:23:46:
a4:b6:12:74:95:b7:40:2e:1b:1f:29:67:8b:bd:42:
af:b8:83:c0:4c:2d:88:cf:c8:15:70:b3:e5:d2:af:
9a:ca:b3:27:fd:de:4e:78:5c:07:8e:eb:5e:6e:c1:
1f:61:10:3f:61:fc:7d:c9:1c:b1:7c:01:f7:3b:f6:
91:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:80:4F:92:2E:A5:DC:FB:0C:2D:4F:70:11:42:C8:66:08:1A:1C:57
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3232382e302f32342d3234203d3e20343032323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.228.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e9:19:dd:05:87:be:e7:94:9c:bf:6b:d8:c8:0d:c4:c6:52:
57:12:59:81:a4:5e:e1:77:39:08:67:04:03:b4:4d:e8:61:0c:
be:8a:d6:36:93:8b:4a:99:c5:92:86:d4:23:f1:73:d7:ff:cc:
de:57:b6:f5:22:39:54:b2:78:1a:ff:96:1a:78:11:b5:dc:da:
c7:d7:9b:bf:ae:47:b2:94:40:ce:ef:6e:d2:d6:f5:6b:1d:3e:
e8:fe:f8:95:77:23:75:7e:d3:db:20:f2:8f:f5:27:94:ef:5c:
9e:be:3f:e5:17:e4:10:11:39:43:e6:7c:83:13:6f:57:7a:49:
62:0f:e4:6a:97:68:4d:16:8b:58:33:23:45:ed:34:56:c5:c8:
d1:ed:db:4e:42:32:05:b0:0e:a6:dd:a5:50:d3:0c:f8:15:9d:
f4:21:5e:52:ad:c6:b7:07:e7:48:12:d1:99:62:39:b1:85:d5:
02:36:57:39:43:dc:f1:35:81:4e:5e:94:90:ed:8d:bc:2f:96:
a7:f4:ae:1d:91:63:fb:6a:9d:dc:5b:6c:9e:94:c6:b2:66:6b:
f9:57:d1:7d:74:24:35:ef:dd:3f:f4:7c:e3:c4:61:8c:bf:e3:
39:21:1f:19:df:ff:21:3b:0d:31:c1:6e:ae:19:13:6c:09:1c:
71:bf:88:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:39:09 2026 by rpki-client