Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234322e302f32342d3234203d3e20343032323838.roa
File: 3135322e3233372e3234322e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier: z1qdk14PZbEn+HDaYHFdLrDR3muh7C4/mSYBJOLQppU=
Subject key identifier: 06:23:D3:84:9D:B9:47:9A:DC:A2:12:E4:DC:89:4E:71:41:3B:68:6B
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 30F60FDB3D4B94780F82A9215E7EDA175CCE5ECD
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234322e302f32342d3234203d3e20343032323838.roa
Signing time: Wed 22 Jul 2026 16:57:28 +0000
ROA not before: Wed 22 Jul 2026 16:52:28 +0000
ROA not after: Wed 21 Jul 2027 16:57:28 +0000
asID: 402288
IP address blocks: 152.237.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f6:0f:db:3d:4b:94:78:0f:82:a9:21:5e:7e:da:17:5c:ce:5e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:52:28 2026 GMT
Not After : Jul 21 16:57:28 2027 GMT
Subject: CN=0623D3849DB9479ADCA212E4DC894E71413B686B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:23:7e:a2:bc:9e:9f:ee:f0:93:ea:1d:b7:
7f:b0:14:dc:a6:da:e4:4d:48:57:6b:d3:cd:c5:14:
5d:7a:20:22:10:93:41:16:52:0d:c5:d4:6f:07:37:
ef:ff:01:e5:6b:87:31:e0:31:a1:b0:87:7b:f6:c6:
29:3b:3c:e1:a1:74:7b:35:44:44:69:03:81:a4:13:
f1:6f:06:8d:4c:2e:ef:06:f4:2b:55:e6:d0:3c:f2:
d6:af:e8:c0:2c:ce:46:3a:22:f9:51:f0:65:a8:fc:
9f:0f:6b:1c:fd:b8:59:a1:4c:92:7f:a4:31:85:ad:
c3:ad:74:b3:fb:1c:d3:65:57:f5:64:ca:58:d6:3a:
1c:b4:c5:f7:d3:fc:a6:bb:9d:f0:50:04:d7:ae:92:
91:fd:25:4d:24:a2:8e:52:66:3c:49:2b:a7:6e:30:
20:76:0a:60:df:f7:c2:6d:80:72:3a:28:2a:e7:68:
a4:d6:02:a8:46:0d:09:b2:c0:2f:e3:05:f0:0e:73:
27:26:28:4a:5a:d3:54:4a:85:1b:59:86:e9:4e:1b:
4e:39:7e:f1:99:a5:c3:f4:fb:dd:0c:1f:c3:69:74:
06:cb:70:df:43:6e:8c:ff:13:17:46:ff:82:82:89:
f2:34:de:be:61:96:d5:64:7e:b3:a8:d7:59:5c:e7:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:23:D3:84:9D:B9:47:9A:DC:A2:12:E4:DC:89:4E:71:41:3B:68:6B
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234322e302f32342d3234203d3e20343032323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.242.0/24
Signature Algorithm: sha256WithRSAEncryption
75:88:c9:3e:1b:fc:37:65:8c:93:54:b9:85:0e:6b:c4:45:f4:
14:5d:0e:2a:7b:64:4b:6e:fc:31:8b:34:39:4f:48:49:df:25:
7a:e0:00:88:e4:30:5a:3c:0f:07:48:70:44:7b:cf:7f:29:b3:
e6:be:34:75:82:1f:2b:46:c1:a0:29:f8:9a:e2:f1:1b:89:66:
f2:69:c2:56:c5:db:8a:6b:af:ff:de:1b:49:18:63:99:bc:06:
40:36:9b:f6:a2:fd:56:78:e4:bc:32:ed:54:a5:3d:62:0d:77:
36:96:91:e3:2d:df:48:9b:05:84:6c:ee:74:46:fe:2c:6f:a8:
21:1b:ba:ec:9d:ec:1e:8d:14:13:73:bb:9c:02:7c:29:ab:8f:
e8:34:8e:41:fb:f4:9e:bf:7e:19:34:c2:89:be:80:87:7e:2e:
ad:76:fa:58:de:5f:31:f1:f6:61:fc:d0:54:d1:7f:e7:07:f8:
3e:2b:b0:a1:e9:18:ba:e9:7e:1b:3c:43:a9:00:35:bf:84:82:
7b:aa:92:7e:97:74:e5:41:23:e6:e8:07:5a:ca:da:65:44:d4:
8d:7b:5b:48:6c:9a:85:ce:b1:5c:7c:a7:e9:21:3d:59:5b:f7:
1d:d2:7d:66:d5:25:dc:f7:7b:ab:04:58:a9:33:a0:6b:66:55:
fb:6c:c4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:26:38 2026 by rpki-client