Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3232392e302f32342d3234203d3e20333939333539.roa
File: 3135322e3233372e3232392e302f32342d3234203d3e20333939333539.roa (raw, json)
Hash identifier: 8nuHcUTHIW9xCt0byk5ruJSqaZ977nXxuYOVwH2ngvs=
Subject key identifier: 2E:05:A0:7E:A3:B6:70:85:15:E9:FD:ED:15:8B:A8:C2:2B:76:1D:96
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 58AFE7A47040A67648522FFADAE173D6B7AAD5CF
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3232392e302f32342d3234203d3e20333939333539.roa
Signing time: Wed 22 Jul 2026 16:48:19 +0000
ROA not before: Wed 22 Jul 2026 16:43:19 +0000
ROA not after: Wed 21 Jul 2027 16:48:19 +0000
asID: 399359
IP address blocks: 152.237.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:af:e7:a4:70:40:a6:76:48:52:2f:fa:da:e1:73:d6:b7:aa:d5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:43:19 2026 GMT
Not After : Jul 21 16:48:19 2027 GMT
Subject: CN=2E05A07EA3B6708515E9FDED158BA8C22B761D96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4d:29:c7:c2:bb:7b:95:1d:83:fa:ce:8c:84:
36:71:65:c9:4f:a5:04:98:d5:b3:00:ca:50:eb:df:
6f:a3:44:90:ae:cc:56:56:3e:c3:ac:f8:03:67:09:
44:9d:27:46:49:c6:a4:96:05:f6:9c:b2:8c:95:8c:
f1:d4:24:d7:96:11:f9:f1:4e:70:fc:32:52:9c:67:
28:dd:85:ba:ab:e0:fe:f1:df:89:90:a5:40:82:95:
fc:5e:d9:66:ad:18:5f:92:c0:50:db:bf:51:9f:03:
bc:2b:7c:88:9a:d1:78:7b:11:9b:d9:69:84:a4:d5:
c2:bf:13:db:3c:84:39:6f:a4:89:6d:38:c3:fd:c1:
b4:78:b0:75:79:fa:0d:34:e3:d8:c2:f0:81:02:8b:
de:3a:31:a1:3f:56:e2:88:14:d9:76:b4:50:02:75:
61:fa:9d:db:e3:de:ea:6a:72:fa:3e:fa:d1:cb:eb:
29:09:79:6f:80:06:36:b5:02:b7:5b:9a:a1:7e:68:
3f:97:2b:37:63:9f:92:81:7a:dd:ce:f4:f2:5d:99:
62:fe:9e:5c:96:b1:ed:72:a2:36:a3:ba:d8:4b:bc:
ed:e4:b0:46:00:59:ee:85:27:fb:d1:41:5e:95:08:
d9:bf:6d:2a:b5:3d:c4:84:65:30:a6:79:07:98:70:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:05:A0:7E:A3:B6:70:85:15:E9:FD:ED:15:8B:A8:C2:2B:76:1D:96
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3232392e302f32342d3234203d3e20333939333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.229.0/24
Signature Algorithm: sha256WithRSAEncryption
32:5d:b0:c9:5a:62:e6:d1:49:67:a9:f1:e6:0b:6a:e1:12:51:
08:1e:b3:17:87:50:23:1e:63:7e:2d:37:18:fd:21:ca:8b:51:
48:35:6f:fd:92:48:c0:af:b3:aa:90:8a:17:7f:e6:fc:86:11:
95:b9:43:fb:90:65:28:31:2f:cd:20:3b:05:47:bc:b0:61:13:
fc:63:7a:fe:d5:5c:a4:07:36:c5:c3:7f:7c:8d:95:4c:d0:d0:
49:f9:da:fc:8c:04:f5:50:05:cb:4c:ba:0f:7b:97:01:7e:ee:
11:67:30:bf:82:5d:aa:3b:ac:50:f6:a7:05:8e:27:07:a9:ed:
ac:b0:ea:1d:1a:7f:3f:3f:a3:31:b3:7e:f3:b4:18:37:e1:0f:
fe:17:09:ef:ba:16:04:c5:32:86:39:38:c5:c6:4e:77:86:3a:
e4:81:d7:68:49:08:58:2a:e0:7a:77:51:cb:60:ab:7d:b8:77:
93:ee:8d:9e:d9:8b:b4:59:45:23:79:47:b5:3d:80:b6:ef:62:
40:df:53:bb:ae:f4:41:00:ea:59:3d:58:ef:65:e2:a1:4d:de:
f7:5b:8c:8a:56:8f:f0:12:5a:ce:f2:d2:8b:0a:c7:41:b9:02:
89:eb:ec:49:f5:6e:c4:a9:6b:74:12:9b:5f:62:9c:3c:71:57:
57:45:33:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:08:26 2026 by rpki-client