Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234312e302f32342d3234203d3e20333939333539.roa
File: 3135322e3233372e3234312e302f32342d3234203d3e20333939333539.roa (raw, json)
Hash identifier: +PDzcNI4mvXCqVfFsbK1VtsuIG3XRQ7HsibFU8J0nBE=
Subject key identifier: B6:01:D9:AA:C6:58:CE:A4:3A:A4:20:90:67:19:6F:94:67:5C:CA:FE
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 07683965739384117709C6C6D6C4345B04521A8C
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234312e302f32342d3234203d3e20333939333539.roa
Signing time: Wed 22 Jul 2026 16:56:50 +0000
ROA not before: Wed 22 Jul 2026 16:51:50 +0000
ROA not after: Wed 21 Jul 2027 16:56:50 +0000
asID: 399359
IP address blocks: 152.237.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:68:39:65:73:93:84:11:77:09:c6:c6:d6:c4:34:5b:04:52:1a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:51:50 2026 GMT
Not After : Jul 21 16:56:50 2027 GMT
Subject: CN=B601D9AAC658CEA43AA4209067196F94675CCAFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:d2:f6:d5:13:05:48:3a:77:69:bb:3b:5e:
4c:eb:d3:3b:66:1e:fb:2a:41:94:a5:b6:48:1d:b0:
ad:3e:11:c5:04:e9:88:5f:53:4f:8b:57:ac:82:7a:
22:2c:21:33:65:f7:2e:07:07:dc:11:70:89:9c:bc:
58:21:15:ee:af:b6:af:8f:a9:45:c2:e1:32:34:27:
92:f6:12:65:c8:be:16:6e:e2:c0:dd:ab:ad:30:15:
1e:71:0e:67:d4:59:72:f1:b4:5a:6b:26:71:77:d0:
a5:41:58:f6:2a:ea:03:6a:77:1a:09:62:7b:0b:5c:
73:29:3e:2d:2e:a9:47:98:74:c3:e1:5b:95:7c:c1:
7f:c3:92:ce:2b:2f:ff:6e:41:03:0a:7e:2c:fd:d5:
f0:e5:e6:40:a9:d6:ad:df:df:67:9c:89:c7:37:f4:
68:77:d2:55:44:90:c8:a2:1f:7e:48:e2:d2:c5:4f:
72:e6:55:c2:40:83:db:91:c9:d3:ef:69:2c:67:0f:
7a:0a:33:19:56:7a:19:cf:35:08:e7:b2:07:e8:c7:
d4:b4:c3:79:6b:d3:5e:24:f3:72:f2:30:d5:99:e7:
a7:82:b4:65:fd:09:d4:d8:0b:8f:66:c5:d4:19:de:
12:2d:b4:9b:a3:d5:33:ed:82:54:c4:05:a7:b0:e7:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:01:D9:AA:C6:58:CE:A4:3A:A4:20:90:67:19:6F:94:67:5C:CA:FE
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234312e302f32342d3234203d3e20333939333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.241.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:c0:1c:68:cf:22:9f:37:84:26:e5:e8:7b:c9:3d:71:8b:2f:
94:79:fc:7e:86:88:e0:23:a0:f2:1e:89:2c:d8:04:37:24:a8:
88:1a:77:a2:94:b2:89:97:2c:b4:56:4c:3c:f0:e4:bf:cb:f2:
9a:e0:bc:93:11:2e:11:dc:93:f5:b0:f6:cc:60:f9:1f:a2:fc:
06:75:7e:8d:29:29:64:f5:34:75:6f:d5:d1:fd:52:55:ea:75:
e3:ab:43:8e:c2:b3:fc:ee:10:b7:b0:cb:88:e4:de:f0:a7:eb:
b4:42:03:4f:99:d3:2e:12:86:48:69:8d:c8:74:22:14:96:fe:
bc:d6:13:b3:ef:49:a1:29:b3:95:66:2e:43:b6:75:6f:5f:84:
17:91:31:5a:d0:19:01:9f:9e:73:5b:4d:8a:9e:9b:21:46:e0:
b1:87:ba:a3:7f:ac:1c:fc:67:64:75:f3:ea:1a:69:e5:34:50:
8b:0e:5c:2d:6d:9f:30:e8:bf:f2:05:e5:9b:49:9f:18:ee:0b:
94:db:ee:c2:a0:99:9a:5a:89:09:21:81:65:3a:e8:ca:ba:78:
59:14:11:30:22:2e:93:a4:f2:42:18:e3:65:77:a4:7c:f2:19:
ef:51:34:b8:10:e0:c9:d0:3d:1c:2c:26:ef:1c:32:c3:f1:e3:
fe:64:c3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:03:16 2026 by rpki-client