Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233392e302f32342d3234203d3e20343032323838.roa
File: 3135322e3233372e3233392e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier: ci36Y53NiUC5fEbd9kG6vvkP8tgmy87AoJc4sd5GGPg=
Subject key identifier: 9B:9B:53:61:43:28:2C:E4:51:1B:52:30:01:F2:CE:FE:60:AB:C5:21
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 39F4563E6301AFD9D9C8CEC278907DA093FF9449
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233392e302f32342d3234203d3e20343032323838.roa
Signing time: Wed 22 Jul 2026 16:56:10 +0000
ROA not before: Wed 22 Jul 2026 16:51:10 +0000
ROA not after: Wed 21 Jul 2027 16:56:10 +0000
asID: 402288
IP address blocks: 152.237.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:f4:56:3e:63:01:af:d9:d9:c8:ce:c2:78:90:7d:a0:93:ff:94:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:51:10 2026 GMT
Not After : Jul 21 16:56:10 2027 GMT
Subject: CN=9B9B536143282CE4511B523001F2CEFE60ABC521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:91:83:b6:7c:63:f6:20:06:fa:bc:1e:8c:
d8:e3:b9:f3:8c:9c:4d:60:80:cf:42:17:c6:fc:78:
e1:0c:12:fc:b5:3a:38:75:e5:a5:7e:ba:2c:5a:7e:
f2:e9:c9:2d:07:02:17:46:a3:e1:ba:aa:b2:f6:53:
89:d0:07:48:e8:43:71:7e:e1:98:fa:0a:0c:54:dd:
dc:a9:f3:5c:13:05:ac:e1:5d:d6:8d:11:59:ca:77:
4e:f6:70:39:06:6f:29:8f:05:b3:b0:75:02:a9:9f:
e7:dd:f3:f2:1b:cc:7c:bc:20:39:0f:3c:70:66:50:
3d:b3:2c:8c:3b:cd:c4:a6:56:b3:f6:05:59:47:e6:
8b:5a:ae:07:c2:50:bb:a9:ae:8a:c3:40:f1:42:d9:
7d:99:1a:be:be:67:3f:40:4b:b4:a2:d7:18:7b:7c:
ab:ec:3c:ed:7f:e5:03:6d:90:ca:d0:22:63:86:c5:
82:ca:53:fc:b8:09:0b:c1:69:c2:47:3e:fc:b4:a0:
0b:fb:88:11:34:41:76:d9:2a:80:58:e6:77:6f:4d:
b8:e7:5a:90:89:6e:83:c3:61:b0:22:df:0a:d6:e7:
2f:23:85:1c:d1:ff:90:aa:41:59:e7:c9:ad:e8:5f:
45:2b:f3:8e:fc:8f:1d:a4:b8:56:5b:be:e1:48:3d:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9B:53:61:43:28:2C:E4:51:1B:52:30:01:F2:CE:FE:60:AB:C5:21
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233392e302f32342d3234203d3e20343032323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.239.0/24
Signature Algorithm: sha256WithRSAEncryption
06:35:9e:82:90:37:a9:0f:61:b3:23:12:d0:f6:46:c4:54:68:
81:64:ca:b2:ce:66:eb:ac:0b:c3:7e:a0:90:26:1d:ac:a5:19:
61:ea:2d:7e:61:5d:ec:36:77:cc:33:43:87:da:62:eb:df:89:
cf:04:d2:d4:dc:7e:31:71:1e:aa:b5:e3:1a:e3:71:24:34:2a:
aa:7d:ed:b6:ac:20:ee:94:a6:d9:da:d1:3a:1c:41:b5:12:3b:
b6:23:e9:d2:fb:28:c9:e3:b7:be:f4:27:56:96:00:1b:5c:15:
0a:d7:3a:bd:0b:4b:4d:80:28:0d:32:4a:e2:bd:c9:de:8b:9c:
29:7c:80:70:74:62:06:31:74:51:b1:db:28:69:30:e5:dc:f8:
0c:4c:ab:17:00:a9:18:36:77:a4:9c:7d:a5:fa:8c:50:4f:a9:
63:be:d3:39:d5:b3:f5:e4:41:83:3d:d5:f3:d9:2b:26:46:f3:
b0:96:bc:24:84:7e:16:9a:e5:60:f4:4d:78:33:18:8c:10:db:
c5:13:0a:4f:ad:6c:93:2a:ca:2a:81:8b:5c:74:f9:e7:29:7a:
f8:b0:c1:76:91:f6:18:8b:00:85:01:ef:5e:a0:ff:9d:43:cf:
b2:20:58:a4:fe:32:0b:67:65:58:cc:cb:cf:fc:9c:53:81:cd:
40:6e:2d:53
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUOfRWPmMBr9nZyM7CeJB9oJP/lEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA3MjIxNjUxMTBaFw0yNzA3MjExNjU2MTBaMDMxMTAvBgNV
BAMTKDlCOUI1MzYxNDMyODJDRTQ1MTFCNTIzMDAxRjJDRUZFNjBBQkM1MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+opGDtnxj9iAG+rwejNjjufOM
nE1ggM9CF8b8eOEMEvy1Ojh15aV+uixafvLpyS0HAhdGo+G6qrL2U4nQB0joQ3F+
4Zj6CgxU3dyp81wTBazhXdaNEVnKd072cDkGbymPBbOwdQKpn+fd8/IbzHy8IDkP
PHBmUD2zLIw7zcSmVrP2BVlH5otargfCULuprorDQPFC2X2ZGr6+Zz9AS7Si1xh7
fKvsPO1/5QNtkMrQImOGxYLKU/y4CQvBacJHPvy0oAv7iBE0QXbZKoBY5ndvTbjn
WpCJboPDYbAi3wrW5y8jhRzR/5CqQVnnya3oX0Ur8478jx2kuFZbvuFIPQerAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUm5tTYUMoLORRG1IwAfLO/mCrxSEwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzEzNTMyMmUzMjMzMzcyZTMy
MzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMjMyMzgzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJjt7zANBgkqhkiG9w0BAQsFAAOCAQEABjWegpA3qQ9hsyMS0PZGxFRogWTK
ss5m66wLw36gkCYdrKUZYeotfmFd7DZ3zDNDh9pi69+JzwTS1Nx+MXEeqrXjGuNx
JDQqqn3ttqwg7pSm2drROhxBtRI7tiPp0vsoyeO3vvQnVpYAG1wVCtc6vQtLTYAo
DTJK4r3J3oucKXyAcHRiBjF0UbHbKGkw5dz4DEyrFwCpGDZ3pJx9pfqMUE+pY77T
OdWz9eRBgz3V89krJkbzsJa8JIR+FprlYPRNeDMYjBDbxRMKT61skyrKKoGLXHT5
5yl6+LDBdpH2GIsAhQHvXqD/nUPPsiBYpP4yC2dlWMzLz/ycU4HNQG4tUw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:43:18 2026 by rpki-client