Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233362e302f32342d3234203d3e20343032323838.roa
File: 3135322e3233372e3233362e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier: 9MZdr7Xxc2uLKbZYpYffSGK2NoLs4aGJsv2HXQeilhY=
Subject key identifier: BA:FB:12:C3:BD:02:18:E9:F8:B1:95:7D:A2:9D:EC:76:FE:09:6F:B8
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 03B3FB37A48708051326C941CA9BD45F419FAE63
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233362e302f32342d3234203d3e20343032323838.roa
Signing time: Wed 22 Jul 2026 16:54:49 +0000
ROA not before: Wed 22 Jul 2026 16:49:49 +0000
ROA not after: Wed 21 Jul 2027 16:54:49 +0000
asID: 402288
IP address blocks: 152.237.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:b3:fb:37:a4:87:08:05:13:26:c9:41:ca:9b:d4:5f:41:9f:ae:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:49:49 2026 GMT
Not After : Jul 21 16:54:49 2027 GMT
Subject: CN=BAFB12C3BD0218E9F8B1957DA29DEC76FE096FB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:98:60:7d:eb:b4:aa:a1:a2:76:1c:5f:78:
d3:d4:12:6c:fe:01:fc:8c:f9:93:cd:57:bc:09:35:
47:e2:15:f4:a2:88:0d:8c:22:e2:fb:7f:a0:b5:ca:
02:16:fa:bc:cd:94:c1:66:25:4c:51:36:36:45:eb:
6c:57:f9:65:71:85:83:d5:cb:85:1a:7e:86:94:9b:
69:cf:95:14:c1:3e:77:c5:6d:ea:c6:14:41:36:23:
8f:07:8d:98:de:8b:5f:29:d5:e5:97:ae:56:1c:69:
07:86:2f:40:a9:75:3c:eb:b6:03:15:a3:77:18:1e:
80:52:d8:f0:a4:24:55:61:1d:a9:b4:51:4d:2d:f1:
94:d6:a4:04:b3:1d:ac:95:77:f4:79:da:b0:ea:19:
ef:12:1c:f7:be:60:a4:86:89:15:66:3a:08:c7:bf:
7c:0c:93:c5:62:91:36:29:72:b7:2d:24:aa:0f:3d:
18:bb:89:6d:01:0c:5b:1f:32:c6:b9:2e:1d:f0:d9:
83:25:6e:b8:dd:86:9e:4e:10:d9:57:56:ca:db:1c:
91:77:2a:45:d6:e8:b0:ab:14:7a:78:85:f1:a4:33:
c7:52:87:d6:8a:2b:19:60:6e:16:ef:1d:26:e8:dd:
ff:39:a2:1e:a3:2c:e3:a0:49:05:c6:2f:91:68:d8:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FB:12:C3:BD:02:18:E9:F8:B1:95:7D:A2:9D:EC:76:FE:09:6F:B8
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233362e302f32342d3234203d3e20343032323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.236.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b6:97:6d:57:6b:f9:58:a7:f7:d2:57:92:9d:2d:1f:cc:83:
19:54:97:fe:94:1c:5d:a8:d1:19:ab:02:77:06:da:5e:b6:29:
bf:f0:95:a7:cc:ba:71:3f:8f:72:95:2f:49:43:4e:8a:69:02:
5b:3a:6c:27:1f:4a:33:b3:e9:a0:e7:ed:d8:97:0b:64:e0:b9:
0d:6e:f2:1e:d3:3e:a3:71:03:e1:30:b3:0e:07:ae:a2:d1:95:
a4:16:54:0b:aa:d7:e1:d0:08:e5:cb:1d:76:b3:53:3b:a7:fe:
40:e7:a0:dc:de:4b:4d:c4:2d:a5:95:6b:8e:84:6d:58:5a:b3:
59:73:2e:92:b9:99:77:c0:05:db:2a:80:8e:8c:00:da:1b:b9:
d9:04:39:82:39:ee:d5:28:e2:6e:59:23:7e:bd:2f:c8:a8:f2:
65:e4:a3:7c:3b:89:9d:03:ea:a0:fb:5d:0f:3e:86:bd:0e:b6:
2e:c6:2a:81:46:74:f3:7d:ea:a9:eb:44:eb:a6:49:6c:0a:b2:
d5:c3:fd:02:40:9d:36:d4:88:99:5e:0e:f3:fe:25:7f:f7:5a:
16:cb:85:c0:c7:c6:78:a5:28:4d:ec:38:98:52:31:be:00:ca:
95:ab:9b:cf:1b:50:e4:ad:84:89:50:ff:20:99:91:c5:1e:15:
7e:33:3f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:48:57 2026 by rpki-client