Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234332e302f32342d3234203d3e20333939333539.roa
File: 3135322e3233372e3234332e302f32342d3234203d3e20333939333539.roa (raw, json)
Hash identifier: g7P+CD9d7L4lZZECp5RWsk9zsBCO3oBdjdwtbtPK/cI=
Subject key identifier: B4:D1:8E:B9:79:3A:D8:72:CB:A1:22:EC:52:28:5F:F3:EB:B6:FC:10
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 2B89038D5DA12241688625A0233431F1D854447A
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234332e302f32342d3234203d3e20333939333539.roa
Signing time: Wed 22 Jul 2026 16:58:34 +0000
ROA not before: Wed 22 Jul 2026 16:53:34 +0000
ROA not after: Wed 21 Jul 2027 16:58:34 +0000
asID: 399359
IP address blocks: 152.237.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:89:03:8d:5d:a1:22:41:68:86:25:a0:23:34:31:f1:d8:54:44:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:53:34 2026 GMT
Not After : Jul 21 16:58:34 2027 GMT
Subject: CN=B4D18EB9793AD872CBA122EC52285FF3EBB6FC10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:2b:38:b2:a1:ad:17:9b:c9:00:52:b1:8b:
03:5b:4b:e4:9b:be:24:11:57:d0:93:89:6c:ee:7d:
f3:fb:e8:37:45:43:c3:62:1a:dd:49:d3:5c:7d:8d:
06:b3:42:3e:d0:45:cd:d2:aa:dd:7c:cb:43:61:e6:
64:30:b6:77:97:3a:75:dd:ac:af:3c:9f:e5:4f:ad:
30:72:84:f3:31:4e:b6:a2:7b:70:38:7f:f0:be:2e:
00:5e:ab:0b:21:df:ad:20:ba:dd:88:a0:08:2c:d7:
4d:78:aa:fc:4d:7d:7f:58:42:2f:f8:4a:45:10:13:
bf:78:c2:f7:33:72:bc:14:d4:59:4c:b6:cd:cb:be:
03:81:78:be:d6:60:96:9b:d6:3a:33:5a:e8:dc:da:
e4:1e:e2:a0:fd:9f:16:7e:2a:b4:a3:0e:a0:b6:f8:
7c:e8:a7:bd:5f:0d:db:43:41:fe:38:e8:77:89:11:
5d:d1:2c:ec:37:bc:a7:28:fa:fb:e1:8b:82:7c:ac:
ec:fa:7c:f2:46:88:d3:64:f6:e7:44:f9:0c:92:7d:
11:98:b6:20:f0:5f:a0:dc:44:6d:3d:e8:89:bb:dc:
13:c6:6c:58:49:1d:06:2e:4e:b5:c7:5a:ef:8e:ac:
3a:b2:fe:b4:a0:bc:3d:d1:48:d6:38:27:72:0a:52:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D1:8E:B9:79:3A:D8:72:CB:A1:22:EC:52:28:5F:F3:EB:B6:FC:10
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234332e302f32342d3234203d3e20333939333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.243.0/24
Signature Algorithm: sha256WithRSAEncryption
01:24:8b:0a:c6:c4:4f:aa:aa:b5:6f:54:a0:3e:8a:1a:dc:99:
21:95:77:3d:de:e1:46:a0:2d:13:34:a3:05:0d:d7:65:f9:f3:
d4:be:a3:5f:7a:bb:c0:40:90:04:6c:f7:a6:cb:90:c3:a0:c0:
43:93:39:3e:d9:4d:9e:49:7b:16:2a:a4:df:50:67:21:a7:23:
03:7a:a9:c4:6c:13:0c:aa:15:07:f8:12:df:64:44:8f:5e:82:
da:bd:a0:f7:82:85:b5:28:ef:f8:8d:a2:9b:2d:07:ee:e0:38:
cf:05:d8:44:81:ae:43:11:4f:56:40:c7:5a:b7:f1:37:5d:cc:
22:42:19:ae:87:1b:76:0b:ee:eb:36:3b:8b:87:d6:22:b4:5d:
a5:f4:53:e0:1d:6d:b7:9b:92:c7:c7:31:a9:1b:c6:f3:4f:b9:
3f:49:c4:fd:e0:74:e7:3e:06:2c:9b:6e:51:02:42:48:11:0a:
84:b2:c8:6f:7c:cb:e0:fc:44:8e:9e:96:7a:cd:ec:b8:e5:ce:
56:f6:36:bb:e2:5a:c6:1d:c7:c1:d8:3b:28:2e:dd:88:f3:0c:
0c:b3:42:d2:4d:25:c8:2b:12:f6:05:49:5b:6e:f9:4d:85:74:
38:5f:26:a1:a0:20:15:02:c2:26:73:55:aa:11:7f:ee:29:6f:
6a:ca:8a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:46:18 2026 by rpki-client