Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233332e302f32342d3234203d3e20333939333539.roa
File: 3135322e3233372e3233332e302f32342d3234203d3e20333939333539.roa (raw, json)
Hash identifier: awqEQnGm5UuntUj+pzzi1Du7SnFqc3YME6TUJgWBdr8=
Subject key identifier: 11:40:23:45:67:AC:59:A7:58:56:02:37:34:7A:3C:80:90:79:22:5E
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 1F60567C3E2AD0CAA870254E87445AC40C9484CB
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233332e302f32342d3234203d3e20333939333539.roa
Signing time: Wed 22 Jul 2026 16:52:10 +0000
ROA not before: Wed 22 Jul 2026 16:47:10 +0000
ROA not after: Wed 21 Jul 2027 16:52:10 +0000
asID: 399359
IP address blocks: 152.237.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:60:56:7c:3e:2a:d0:ca:a8:70:25:4e:87:44:5a:c4:0c:94:84:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:47:10 2026 GMT
Not After : Jul 21 16:52:10 2027 GMT
Subject: CN=1140234567AC59A758560237347A3C809079225E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:96:0e:8e:d9:75:88:4d:1b:d6:a4:f3:db:
de:d1:a8:1d:7f:c9:84:30:51:9e:ee:22:19:06:ef:
74:ea:09:fc:db:c0:f5:8b:5c:a7:2a:f6:e8:79:b9:
15:a2:f2:27:ef:32:85:8b:f6:5e:79:76:7c:e3:e1:
37:aa:0c:d5:7e:dc:b7:0f:dd:d7:d3:89:f5:bd:2e:
40:34:8b:8d:fd:c4:7b:bc:8c:ab:d3:f0:d6:7c:00:
02:4e:ad:6a:f2:24:66:0d:08:9f:22:be:f1:9c:c5:
7d:99:7f:27:61:86:12:e8:97:2f:34:09:7e:39:31:
06:e1:bc:43:a1:bc:c3:75:01:b7:10:76:a8:04:6d:
e2:01:98:30:9c:40:9c:ef:4b:58:4f:02:d8:9a:d4:
ad:ed:63:dd:2f:fb:38:9c:dd:f6:10:09:a1:d5:cf:
40:2c:4e:11:2b:90:68:15:ca:29:0c:9e:00:f3:87:
fc:9f:ea:9b:b5:11:ad:73:ba:09:43:41:e5:19:3c:
91:df:b0:f7:65:56:ce:44:5f:ed:e9:c1:83:48:7b:
03:ab:f1:4c:d9:ff:92:06:68:2d:49:88:8b:35:0f:
e5:f3:3e:4f:eb:53:3c:50:b2:f2:78:f3:f8:2d:d9:
54:87:64:f3:10:bd:43:cc:c8:ef:61:6a:8e:19:6b:
60:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:40:23:45:67:AC:59:A7:58:56:02:37:34:7A:3C:80:90:79:22:5E
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233332e302f32342d3234203d3e20333939333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.233.0/24
Signature Algorithm: sha256WithRSAEncryption
32:6a:0d:92:b7:c2:c0:98:5e:f7:61:2f:56:65:1d:0d:ce:aa:
8c:40:c6:49:04:60:35:e2:62:b1:21:6f:ef:7a:eb:67:d3:8e:
9d:df:56:e3:6d:25:83:32:3c:25:1b:3d:79:f7:44:74:ff:8e:
66:d4:56:23:f1:c4:f6:eb:6a:5a:76:1f:da:37:e4:dd:89:51:
27:0a:5a:7d:fe:3c:88:ce:fc:5a:3f:fd:9e:6c:cb:d3:40:2c:
91:ef:d6:c4:91:98:5a:14:1d:81:0e:97:a9:3f:cb:e7:4f:aa:
d2:00:61:b2:96:31:c2:8f:2e:b7:ad:ef:bc:80:28:03:4e:fa:
53:61:36:cc:a6:cd:d5:ba:99:ca:c9:41:bc:e5:32:9d:4d:c7:
c5:53:93:5a:11:25:3f:8a:e1:3a:92:37:1c:18:ba:1a:3c:63:
e6:51:a8:b3:af:35:b0:c5:a5:0c:f3:4e:40:60:67:c3:7b:c4:
5f:6d:3f:ef:ac:75:f5:27:37:4b:a9:fd:6e:c4:88:4e:b6:37:
1c:c8:0b:89:39:46:05:74:1f:a3:df:39:cb:c8:4d:22:e0:d1:
8f:eb:d9:65:d8:25:db:60:62:9f:98:2b:b7:b5:30:30:01:5f:
da:01:c6:ce:ea:aa:11:85:51:2b:32:aa:95:af:29:01:d1:dd:
3a:06:46:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:57:35 2026 by rpki-client