Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234342e302f32342d3234203d3e20343032323838.roa
File: 3135322e3233372e3234342e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier: lCoe5YlELYY9djD4YGd/6W5SuK3e+cqX9R38OW+0d9U=
Subject key identifier: 73:A5:0C:48:6A:D3:C2:3B:46:F5:41:6E:26:E6:BA:CB:77:96:1E:C5
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 63CE14AA10223E67A1CA8DF62365B20C56B82469
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234342e302f32342d3234203d3e20343032323838.roa
Signing time: Wed 22 Jul 2026 16:59:19 +0000
ROA not before: Wed 22 Jul 2026 16:54:19 +0000
ROA not after: Wed 21 Jul 2027 16:59:19 +0000
asID: 402288
IP address blocks: 152.237.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:ce:14:aa:10:22:3e:67:a1:ca:8d:f6:23:65:b2:0c:56:b8:24:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:54:19 2026 GMT
Not After : Jul 21 16:59:19 2027 GMT
Subject: CN=73A50C486AD3C23B46F5416E26E6BACB77961EC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:37:d9:ea:aa:e4:b6:dd:f1:00:d8:45:0e:
4d:e1:d4:1d:2b:5f:61:db:53:f3:cf:db:8e:cb:13:
32:80:f7:be:f6:26:51:9a:97:60:f1:8b:e4:6d:10:
7d:39:b7:25:6c:65:73:33:25:69:b8:5b:44:ed:21:
95:5e:47:ca:0d:cb:ca:4e:d3:90:fc:7e:c4:0c:8e:
eb:ce:64:58:93:a6:37:af:37:93:90:4f:1b:f4:4b:
70:ce:5b:0e:a0:7e:cc:a2:f6:6f:33:9b:ef:37:0b:
76:ca:e3:70:84:66:73:dd:b2:03:3b:cb:10:a1:79:
55:52:68:0f:e8:6e:93:18:5f:ea:60:6a:e7:e1:cf:
34:d8:85:0d:63:d6:42:d2:3b:ce:eb:e8:43:ef:55:
cb:fb:ef:6e:b7:8b:1c:d3:04:bd:2d:13:a9:95:9b:
dc:b8:1a:c5:f6:f1:e9:f3:4e:0d:6c:38:2b:13:b9:
6e:f0:6f:56:bd:49:d6:c0:65:a1:9d:66:33:26:bc:
39:33:a5:e3:51:e6:45:d5:66:cd:44:a6:04:6a:f3:
4d:6c:ae:76:af:fb:a5:34:0c:12:04:08:61:92:f1:
3f:0d:f2:d1:00:ab:2b:37:cf:f9:70:23:13:7f:3f:
c3:1e:96:d4:c7:15:d4:f4:72:f0:13:3f:c3:d3:db:
09:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A5:0C:48:6A:D3:C2:3B:46:F5:41:6E:26:E6:BA:CB:77:96:1E:C5
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234342e302f32342d3234203d3e20343032323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.244.0/24
Signature Algorithm: sha256WithRSAEncryption
91:16:96:5d:02:3d:df:46:b0:c8:d5:1a:fe:1e:52:6f:35:f7:
06:e5:1b:f7:c3:11:09:ad:7f:7e:f7:91:b7:03:11:e8:ec:80:
79:53:d4:2b:1d:92:84:d3:28:4c:f8:39:50:63:69:45:d7:04:
97:a2:59:ed:cc:02:1e:5e:80:db:96:50:bc:7b:6a:60:2b:8a:
68:39:44:79:4a:5d:e6:af:e1:e4:8c:25:a9:d4:45:60:07:72:
61:98:dc:ab:f2:ea:30:90:af:4a:71:3e:c9:39:b9:e3:d6:63:
15:10:1d:54:28:fc:2d:9e:cc:b1:12:96:fc:55:cc:f5:fa:3b:
a6:1d:4e:2f:dd:23:b9:f3:e4:dc:56:6f:d9:fc:92:ed:85:b4:
c0:d9:13:1c:5b:ea:d7:98:49:c5:e3:c6:f3:37:d9:2b:9b:a6:
71:88:6b:05:ff:b8:18:41:db:46:0e:e0:65:5c:87:ab:0b:62:
63:34:0a:bb:d3:f6:51:00:1f:0d:60:f9:a8:de:f8:f7:3d:39:
1c:ee:60:0f:56:c3:1f:2d:d5:dd:3c:e2:c0:9b:39:47:50:93:
6a:d8:76:66:e6:bd:ae:e0:7b:0a:9a:dc:16:be:32:bb:36:94:
40:36:0d:80:68:39:5b:e0:dd:19:7c:88:f3:45:96:6c:24:c6:
41:a2:3f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:57:35 2026 by rpki-client