Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233322e302f32342d3234203d3e20333939333539.roa
File: 3135322e3233372e3233322e302f32342d3234203d3e20333939333539.roa (raw, json)
Hash identifier: Q26+TPWIUYtn1uaogiRCzaizYR3m11+8A/BwemCsDAk=
Subject key identifier: 9C:C1:C8:B0:B4:70:A8:A0:DE:C8:2E:7F:26:52:E4:84:41:5E:8B:EA
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 34580D5A9520A44A89C170B4E232AA4D8FD76FAF
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233322e302f32342d3234203d3e20333939333539.roa
Signing time: Wed 22 Jul 2026 15:03:03 +0000
ROA not before: Wed 22 Jul 2026 14:58:03 +0000
ROA not after: Wed 21 Jul 2027 15:03:03 +0000
asID: 399359
IP address blocks: 152.237.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:58:0d:5a:95:20:a4:4a:89:c1:70:b4:e2:32:aa:4d:8f:d7:6f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 14:58:03 2026 GMT
Not After : Jul 21 15:03:03 2027 GMT
Subject: CN=9CC1C8B0B470A8A0DEC82E7F2652E484415E8BEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:9f:81:86:e1:76:71:e8:38:23:63:0c:f8:
50:53:6c:e7:50:c7:1d:4b:3e:8b:9b:99:7c:ad:e4:
98:f6:74:f8:3b:3e:1d:e0:1f:bf:99:a8:d4:28:35:
28:a7:ca:e1:e3:b7:8c:c6:30:8f:2c:d7:43:ec:f8:
ad:fc:b6:f8:39:97:8c:f2:01:eb:f3:49:e1:71:22:
bc:8b:9c:d9:10:26:02:53:23:99:a5:94:ef:dd:fc:
be:e7:8d:93:1c:bd:58:92:98:1e:95:60:0a:fe:33:
5a:72:f4:0c:14:80:4b:a0:d5:6e:6f:d5:a2:9f:33:
d1:3b:a8:ba:5b:d7:6b:2f:68:29:55:7c:f7:a5:21:
ba:72:a3:69:ee:34:d7:5c:13:3c:06:50:75:20:cb:
ea:6e:bb:0e:ea:10:1d:e0:df:02:2a:84:86:c8:8f:
80:f0:b6:d4:b4:65:74:f5:dd:7c:ae:85:e4:46:b7:
64:ce:1e:e3:6b:21:ae:93:80:a3:ad:04:bb:3b:61:
a0:1e:5c:07:0e:29:2e:23:8a:c1:ad:17:23:fd:73:
2f:e8:58:a9:2c:7c:48:ae:be:41:d5:9a:de:da:00:
81:2c:a0:ce:fb:68:54:65:51:ee:ee:27:15:4b:37:
08:5a:5c:a7:14:40:90:c3:24:64:9a:a2:0f:0f:e3:
b9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C1:C8:B0:B4:70:A8:A0:DE:C8:2E:7F:26:52:E4:84:41:5E:8B:EA
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233322e302f32342d3234203d3e20333939333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.232.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:35:11:c1:35:d4:ac:92:44:8c:0a:f7:a9:88:2c:15:96:fc:
65:62:e3:bf:55:4c:82:c2:6e:11:5c:4c:ea:e3:bb:d6:c8:97:
68:75:70:f8:99:e5:13:d3:5b:e3:e5:c4:67:a1:12:e4:b1:72:
0f:a3:5c:e8:f8:b4:b0:24:86:92:1a:fa:27:66:18:3b:a1:17:
02:36:0e:e6:5f:f5:e5:b1:2a:b7:93:22:e0:3a:50:97:f3:bd:
58:c4:61:23:79:8e:9c:ba:ff:bb:ac:76:ef:0b:e0:30:83:42:
4b:91:05:ca:30:9e:9c:27:db:d7:9b:c0:8d:39:a3:97:40:14:
f9:c5:c7:57:75:bd:61:65:88:0d:15:75:d6:4c:9a:2d:0a:79:
51:2d:e2:7b:68:28:76:d9:15:fe:01:a7:b0:61:38:b5:b1:9f:
1d:e8:a8:64:33:a2:d2:c9:be:64:be:2a:f0:c8:62:34:eb:a1:
d2:b7:23:a2:97:eb:36:32:2e:cf:f7:ca:f3:dc:9d:c9:fe:5b:
62:45:76:c3:6f:1f:13:d0:2b:24:62:df:d9:3a:e3:55:41:60:
7f:64:31:2c:16:b7:65:d5:06:50:86:6c:48:62:f0:96:c5:f4:
5c:8b:2f:49:90:ac:9a:c6:bd:2e:de:8b:78:4f:df:7a:02:24:
25:75:d2:7f
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUNFgNWpUgpEqJwXC04jKqTY/Xb68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA3MjIxNDU4MDNaFw0yNzA3MjExNTAzMDNaMDMxMTAvBgNV
BAMTKDlDQzFDOEIwQjQ3MEE4QTBERUM4MkU3RjI2NTJFNDg0NDE1RThCRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5iJ+BhuF2ceg4I2MM+FBTbOdQ
xx1LPoubmXyt5Jj2dPg7Ph3gH7+ZqNQoNSinyuHjt4zGMI8s10Ps+K38tvg5l4zy
AevzSeFxIryLnNkQJgJTI5mllO/d/L7njZMcvViSmB6VYAr+M1py9AwUgEug1W5v
1aKfM9E7qLpb12svaClVfPelIbpyo2nuNNdcEzwGUHUgy+puuw7qEB3g3wIqhIbI
j4DwttS0ZXT13XyuheRGt2TOHuNrIa6TgKOtBLs7YaAeXAcOKS4jisGtFyP9cy/o
WKksfEiuvkHVmt7aAIEsoM77aFRlUe7uJxVLNwhaXKcUQJDDJGSaog8P47mvAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUnMHIsLRwqKDeyC5/JlLkhEFei+owHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzEzNTMyMmUzMjMzMzcyZTMy
MzMzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzOTMzMzUzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJjt6DANBgkqhkiG9w0BAQsFAAOCAQEATjURwTXUrJJEjAr3qYgsFZb8ZWLj
v1VMgsJuEVxM6uO71siXaHVw+JnlE9Nb4+XEZ6ES5LFyD6Nc6Pi0sCSGkhr6J2YY
O6EXAjYO5l/15bEqt5Mi4DpQl/O9WMRhI3mOnLr/u6x27wvgMINCS5EFyjCenCfb
15vAjTmjl0AU+cXHV3W9YWWIDRV11kyaLQp5US3ie2godtkV/gGnsGE4tbGfHeio
ZDOi0sm+ZL4q8MhiNOuh0rcjopfrNjIuz/fK89ydyf5bYkV2w28fE9ArJGLf2Trj
VUFgf2QxLBa3ZdUGUIZsSGLwlsX0XIsvSZCsmsa9Lt6LeE/fegIkJXXSfw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:51:15 2026 by rpki-client