Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233312e302f32342d3234203d3e20343032323838.roa
File: 3135322e3233372e3233312e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier: VDQfkC3ci4PllcpyoQBFEokKuau0nWRWvIKgiw4muig=
Subject key identifier: 27:44:7C:F6:2F:36:20:94:35:13:D3:BD:B7:27:B4:0F:68:CF:5E:1E
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 06E5C92A0E7B0A7E7EEADFCABF6BE9EC43DCF95E
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233312e302f32342d3234203d3e20343032323838.roa
Signing time: Wed 22 Jul 2026 16:49:10 +0000
ROA not before: Wed 22 Jul 2026 16:44:10 +0000
ROA not after: Wed 21 Jul 2027 16:49:10 +0000
asID: 402288
IP address blocks: 152.237.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:e5:c9:2a:0e:7b:0a:7e:7e:ea:df:ca:bf:6b:e9:ec:43:dc:f9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:44:10 2026 GMT
Not After : Jul 21 16:49:10 2027 GMT
Subject: CN=27447CF62F3620943513D3BDB727B40F68CF5E1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:b4:34:06:fb:90:28:be:04:9a:6f:44:07:
35:c5:ab:d5:00:74:70:5f:d4:5c:7a:10:e0:c0:f0:
69:cb:49:d9:97:ca:e4:08:57:46:4d:22:7b:44:22:
87:da:14:0b:29:04:12:fd:10:0c:eb:c0:c6:df:0c:
84:39:8c:19:f8:ad:fd:66:d0:54:a1:bf:0c:4c:3f:
04:4c:62:e7:6f:8a:b0:4e:1e:6a:37:25:b2:c1:47:
a8:68:2c:f5:cd:28:fe:f7:65:79:1c:01:91:47:18:
b7:1b:93:52:9c:50:18:46:84:bc:89:ea:cc:b2:c0:
9a:83:9e:78:9a:d9:26:b2:dd:02:17:69:a6:3c:5e:
88:8a:f7:5c:d2:c9:ba:7b:fa:fe:ca:0f:19:36:c0:
48:d7:3d:1b:39:6c:46:23:1a:0a:03:e1:b1:ed:0e:
1d:59:e8:88:81:df:14:4f:af:40:33:b2:e3:4e:80:
ee:69:c9:58:01:43:93:cd:25:83:05:b5:0d:e6:c8:
ae:84:1c:fd:96:5e:66:1a:7c:a0:6b:62:c7:f3:dd:
da:f6:4f:6e:7b:5f:96:f9:f8:77:78:34:88:48:e3:
8e:3b:8a:a0:6a:7c:ad:51:b5:1b:29:e0:1e:cd:1c:
67:e2:0e:b3:d1:cf:a7:f0:18:19:61:54:46:49:e0:
4d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:44:7C:F6:2F:36:20:94:35:13:D3:BD:B7:27:B4:0F:68:CF:5E:1E
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233312e302f32342d3234203d3e20343032323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:75:c5:98:36:69:1b:f3:96:0b:43:66:07:91:86:20:aa:47:
72:ea:1a:5b:00:80:40:b4:6a:94:aa:75:4a:f8:8d:bb:ff:57:
63:13:f6:f1:3d:9b:42:56:18:cc:82:9e:de:80:13:25:01:31:
52:5a:65:20:13:13:80:73:f0:98:fe:e9:db:1d:19:98:45:1e:
6f:20:88:ac:ef:9c:3a:cb:26:eb:15:4e:9b:34:2e:d3:b7:73:
21:30:d2:a6:b9:52:2c:94:9a:3d:e0:d0:35:8f:d1:78:66:db:
07:3b:4f:38:4c:89:09:39:51:ff:4b:66:42:9a:18:e0:0e:45:
bb:c0:75:43:a9:d0:fe:35:ae:bc:cb:ca:f0:a4:5c:a6:52:32:
b9:79:ca:ef:f8:88:9d:22:10:d8:e5:05:0f:03:e7:6a:ee:a4:
03:51:86:01:44:2b:c7:30:00:00:07:ab:6e:c4:96:01:5b:bd:
62:0d:7a:0f:5b:da:f7:59:77:67:48:14:01:ab:97:e8:87:d3:
ae:62:58:b7:9c:0e:43:2d:d9:0d:75:a0:06:3e:6e:20:ce:ff:
df:02:20:61:fa:bb:b0:ee:ea:f4:01:06:84:54:a8:ca:d6:43:
62:09:8f:52:75:84:35:1a:64:af:29:3e:8d:55:e4:d1:76:47:
5b:79:9a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:38:58 2026 by rpki-client