Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233352e302f32342d3234203d3e20333939333539.roa
File: 3135322e3233372e3233352e302f32342d3234203d3e20333939333539.roa (raw, json)
Hash identifier: aSQfLMS28x8LSpXtgGndYWJbOW4YDIOSa1YHrLMy+Kw=
Subject key identifier: AF:2A:29:0E:A0:6C:80:DA:CC:21:72:6A:1A:86:E9:C7:50:4E:97:1D
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 67CCCB1DBFBE6E7B137FEA8C366F45A9D24ADF37
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233352e302f32342d3234203d3e20333939333539.roa
Signing time: Wed 22 Jul 2026 16:54:10 +0000
ROA not before: Wed 22 Jul 2026 16:49:10 +0000
ROA not after: Wed 21 Jul 2027 16:54:10 +0000
asID: 399359
IP address blocks: 152.237.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:cc:cb:1d:bf:be:6e:7b:13:7f:ea:8c:36:6f:45:a9:d2:4a:df:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:49:10 2026 GMT
Not After : Jul 21 16:54:10 2027 GMT
Subject: CN=AF2A290EA06C80DACC21726A1A86E9C7504E971D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:bd:bb:ca:82:d5:6a:f1:5a:e7:2e:49:c5:
57:79:24:73:15:66:96:96:eb:67:a0:e8:ea:5b:ea:
e0:28:de:8c:86:05:c4:23:39:4c:f9:93:3b:dc:f4:
cc:01:22:b0:5b:14:dd:64:4f:83:ee:82:ef:4e:98:
2b:21:67:72:91:58:02:10:a2:bb:d5:d6:af:94:2c:
31:46:b7:df:e3:b8:00:9e:c3:b6:7e:ff:03:cb:3e:
65:ac:e1:1e:0e:68:03:2b:20:09:f5:36:fc:3a:0e:
51:ef:a2:eb:1d:d5:60:b2:18:f0:8c:e2:c4:92:02:
81:da:98:f5:bc:35:e1:83:1b:6a:3d:a5:93:f7:80:
28:90:54:91:c7:8d:ce:75:86:82:9b:dc:5f:ec:a6:
47:97:bf:47:62:99:ee:42:65:20:22:78:5a:4c:c2:
18:7a:6e:75:55:30:d6:4a:4b:3d:4b:63:6c:14:52:
22:41:a2:b5:84:ca:64:67:ad:a6:f8:12:9b:57:16:
65:ea:08:d4:6f:c0:48:da:13:3c:c7:a6:8d:be:8f:
b0:02:0d:07:3b:ad:c4:ee:e5:de:c1:46:4f:f6:26:
7c:c8:d3:12:55:8b:34:e9:4e:9e:ec:d2:2c:f9:ca:
53:b2:df:f3:68:c1:de:64:4e:3b:c5:13:fc:f9:0c:
8c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2A:29:0E:A0:6C:80:DA:CC:21:72:6A:1A:86:E9:C7:50:4E:97:1D
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233352e302f32342d3234203d3e20333939333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.235.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f4:8a:ba:9c:f8:36:00:0d:d6:4b:0c:2d:6b:e9:96:99:e0:
35:50:64:c5:c2:7c:fd:8d:a0:d5:1c:8f:3e:dd:2c:90:5a:32:
54:0e:1b:45:08:c2:84:7d:32:4f:01:47:f6:60:2a:7d:ad:9f:
98:46:18:b1:26:c4:70:9c:05:54:30:1a:9a:2c:e3:73:68:8a:
b6:da:09:20:b7:c7:3f:7f:9e:4e:b7:a1:26:8d:ac:b3:ae:78:
29:92:55:bb:f5:59:4c:46:fa:c8:67:0b:49:36:6d:2b:e3:76:
5e:f2:9b:84:e7:c8:5a:44:b1:54:db:3d:59:33:9e:9e:aa:02:
cb:12:fc:cb:cb:f5:cc:74:78:e1:5a:ec:1f:e0:fc:4b:f3:9d:
53:23:60:c2:eb:73:a0:13:d4:44:a7:84:be:fa:c7:2a:ab:2b:
93:91:de:f1:14:1c:0e:43:6b:e2:a1:83:6d:8e:7f:9a:f1:3a:
83:93:84:d6:04:0f:cb:36:d2:a4:00:a3:87:8c:bd:63:ed:f4:
81:60:e9:5e:f4:a4:95:0c:93:e1:b9:ca:f2:ee:ee:76:ed:a2:
5c:f7:91:29:e1:34:51:22:7e:78:83:79:5e:00:8e:f0:55:a2:
57:07:62:93:9f:6b:d2:be:d5:22:e9:44:0e:58:b3:d6:92:76:
59:89:54:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:51:32 2026 by rpki-client