Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233372e302f32342d3234203d3e20333939333539.roa
File: 3135322e3233372e3233372e302f32342d3234203d3e20333939333539.roa (raw, json)
Hash identifier: 4qSuwX/kTf+Zc0Ts4kisIlJS09Zkiy06N5CCFrhyzhY=
Subject key identifier: A7:16:65:7C:69:29:11:1A:81:51:59:42:02:6A:D5:63:5E:F1:1C:6E
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 3491D9CEE16AF8BCE6668539D2539DD4D4B96A98
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233372e302f32342d3234203d3e20333939333539.roa
Signing time: Wed 22 Jul 2026 16:55:24 +0000
ROA not before: Wed 22 Jul 2026 16:50:24 +0000
ROA not after: Wed 21 Jul 2027 16:55:24 +0000
asID: 399359
IP address blocks: 152.237.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:91:d9:ce:e1:6a:f8:bc:e6:66:85:39:d2:53:9d:d4:d4:b9:6a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:50:24 2026 GMT
Not After : Jul 21 16:55:24 2027 GMT
Subject: CN=A716657C6929111A81515942026AD5635EF11C6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:03:d6:55:ef:1b:4f:2e:3f:04:7f:d9:07:
1c:a7:f9:a0:23:01:74:67:83:60:35:36:0f:62:f6:
ea:60:ad:f6:0b:4e:4f:82:aa:c1:c9:cb:3b:45:df:
e4:a4:7f:4f:2a:3c:a3:e3:b2:d5:20:5d:1d:a4:2e:
8b:0c:4c:84:ea:b7:b9:e0:c3:43:c7:15:eb:15:0d:
51:47:2f:e6:b3:84:7e:b7:c9:f2:44:f6:65:be:80:
c7:8e:79:7f:fa:06:fe:f2:1b:5c:d8:f4:26:17:c1:
59:78:9f:b6:6d:45:21:3f:98:04:4d:4e:37:fc:88:
9e:7a:97:01:0a:6e:77:e1:5e:95:0c:0b:4a:e4:7f:
44:da:ac:e4:5c:9b:a6:16:f1:56:2b:76:75:b2:b9:
57:15:ae:5f:26:75:09:ad:a3:01:7a:b6:e0:8a:ce:
0e:b0:ec:d4:de:ae:02:05:10:9a:72:b3:90:55:74:
d9:ba:8e:b7:2a:06:62:2d:fa:ab:47:e7:c4:9a:ce:
d0:ca:f1:48:b1:fb:a2:c9:8a:e1:97:e9:9d:da:f8:
8d:3a:87:ca:32:a1:77:11:32:00:8f:6c:fb:4a:3c:
d3:3c:5c:e0:87:c6:5f:72:e2:e8:57:5f:62:42:0f:
92:74:61:d4:63:63:08:ef:3e:73:18:a2:01:18:c1:
1a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:16:65:7C:69:29:11:1A:81:51:59:42:02:6A:D5:63:5E:F1:1C:6E
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233372e302f32342d3234203d3e20333939333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.237.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:41:f4:7c:5f:62:2a:34:e4:d6:95:17:be:a8:a8:aa:ec:e0:
3f:65:14:f7:92:64:73:00:4f:fe:fc:a1:3b:49:08:0d:94:9a:
8b:ee:a8:b0:4a:ca:d0:c2:0f:2b:e6:57:de:9f:38:f0:36:f4:
7b:3d:46:02:c8:ed:e7:57:b1:30:63:53:38:2a:1c:41:07:b2:
21:97:3b:c7:cb:41:4a:e1:d4:88:f7:07:fe:bb:f2:74:6c:b7:
a3:d9:46:ca:4c:dc:70:6f:0d:2f:5d:d6:24:d6:eb:29:32:33:
ed:35:99:76:94:be:c6:16:e9:e2:c6:da:96:43:65:0b:2e:b0:
80:ec:55:61:03:08:fb:2e:49:4f:d6:08:ec:54:e7:50:b3:eb:
9d:a5:03:d1:a6:02:65:12:be:dc:58:e4:b2:68:96:ef:01:0e:
16:28:37:31:fd:3d:04:18:fc:f4:bd:c3:8b:04:f6:6b:f0:c9:
fe:9d:4b:ab:ae:84:7a:ef:cb:f2:08:4d:cb:c0:0e:11:89:fd:
04:10:2a:48:a9:96:d6:11:48:46:1a:8e:d8:a4:e0:ff:8c:d9:
d8:71:7b:0e:1c:31:6c:de:63:cc:84:4e:a3:62:0b:54:14:d6:
cb:4d:91:b4:9c:15:be:70:3e:f7:44:f7:58:ac:0f:4f:b3:d2:
c8:d5:30:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:38:15 2026 by rpki-client