Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233342e302f32342d3234203d3e20343032323838.roa
File: 3135322e3233372e3233342e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier: Kf8UANx0waKnCytN+5y+lMj+FQgbXczdCx0K4PgSxQU=
Subject key identifier: 30:E8:C9:CF:B7:5B:3C:EF:83:D4:2B:FB:5A:A6:08:DA:47:2C:F8:A2
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 7B9B6EFDA1DC6309B7A76D311F30DECF36D922C4
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233342e302f32342d3234203d3e20343032323838.roa
Signing time: Wed 22 Jul 2026 16:53:23 +0000
ROA not before: Wed 22 Jul 2026 16:48:23 +0000
ROA not after: Wed 21 Jul 2027 16:53:23 +0000
asID: 402288
IP address blocks: 152.237.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:09:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:9b:6e:fd:a1:dc:63:09:b7:a7:6d:31:1f:30:de:cf:36:d9:22:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:48:23 2026 GMT
Not After : Jul 21 16:53:23 2027 GMT
Subject: CN=30E8C9CFB75B3CEF83D42BFB5AA608DA472CF8A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:98:61:db:2c:ee:de:3f:4c:4e:c6:af:60:
b7:3e:b7:31:72:1f:23:1a:c6:da:01:60:50:6e:1c:
5b:fd:a2:62:74:80:ff:19:b5:b6:85:10:5b:6d:0e:
7e:97:39:67:b2:68:18:30:12:ae:19:96:c2:75:74:
55:0a:f1:cb:e4:f4:6f:23:ce:12:67:4f:fd:f1:8c:
39:fb:a3:77:e4:b1:7b:9a:f6:62:f6:52:d2:77:2c:
bf:51:96:f1:b0:38:90:9e:1f:f3:d9:84:34:bd:d7:
6a:ed:47:c5:15:d7:3d:3b:cd:ff:8a:e5:a3:b5:a8:
24:92:c6:82:89:2c:2a:48:c0:9f:8a:45:de:d6:10:
7b:2d:9f:6a:6a:ae:44:21:fc:63:70:ff:08:05:87:
b0:93:32:20:aa:c2:33:5c:30:44:bf:f9:02:79:90:
3b:8f:09:70:b0:a4:89:6e:41:aa:2a:18:f8:cd:3e:
75:fb:37:a2:cb:85:ac:87:ee:87:e7:88:b8:1d:12:
27:51:66:b6:bd:81:99:a5:ab:9c:a9:4f:a0:5d:65:
8e:0d:81:24:6c:87:b9:1d:99:46:20:51:2e:fe:bf:
59:27:f7:80:ef:50:a7:15:d1:fd:c3:66:5f:fc:05:
30:f6:34:2f:c5:32:68:25:53:3e:4b:f0:68:10:cb:
1f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E8:C9:CF:B7:5B:3C:EF:83:D4:2B:FB:5A:A6:08:DA:47:2C:F8:A2
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233342e302f32342d3234203d3e20343032323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.234.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f5:bc:a8:6c:f5:8a:2d:00:6d:2e:f9:ce:b1:81:53:eb:11:
c7:d8:87:ef:f4:3d:4b:ba:35:fe:2e:bc:e5:90:ab:be:37:6b:
99:b4:90:82:10:65:92:a7:ff:0e:72:2d:6d:d7:79:d0:d8:49:
80:81:eb:ae:9a:72:6f:b2:d8:74:c5:9e:04:a7:d7:c7:f2:1f:
60:22:64:8e:09:fd:24:8a:4f:b8:56:aa:48:78:92:68:b3:ab:
dc:3c:98:d2:e5:a7:86:f7:fa:3c:47:76:0f:5c:d2:f1:62:fa:
5f:c3:f1:1b:d8:11:08:46:30:1c:78:8a:b6:dd:a2:70:89:18:
54:03:e2:c1:19:07:94:7f:74:32:ef:28:e3:32:e1:93:25:0f:
d5:b1:7c:0c:14:1f:b4:54:65:78:90:2b:4d:b6:df:11:55:e1:
27:1a:94:f1:a5:f4:ff:df:51:39:a8:6f:f0:c8:18:a8:5a:07:
d7:a4:49:34:a6:3c:a8:2f:4a:17:fc:fa:11:e4:2f:79:30:0b:
55:10:43:84:42:65:5d:70:63:db:2c:c9:0c:d0:ef:c6:23:47:
e7:20:09:14:77:9e:90:ee:48:8b:53:ca:76:08:fc:9a:04:72:
01:6c:18:cb:81:24:c4:da:a1:5d:30:e9:34:a3:0c:43:64:2e:
63:d6:fc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:13 2026 by rpki-client