Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234352e302f32342d3234203d3e20333939333539.roa
File: 3135322e3233372e3234352e302f32342d3234203d3e20333939333539.roa (raw, json)
Hash identifier: xWEG8xQRJV/6KzxH9yAC+uCO/GOCIvW/giC9qji7vRE=
Subject key identifier: A7:CB:FE:8F:36:6A:A8:00:C0:F1:0E:27:48:92:9F:A9:76:8E:7D:CB
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 5E6D0E0543A4AD623648E093FA7CFC83547313D6
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234352e302f32342d3234203d3e20333939333539.roa
Signing time: Wed 22 Jul 2026 16:59:56 +0000
ROA not before: Wed 22 Jul 2026 16:54:56 +0000
ROA not after: Wed 21 Jul 2027 16:59:56 +0000
asID: 399359
IP address blocks: 152.237.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:6d:0e:05:43:a4:ad:62:36:48:e0:93:fa:7c:fc:83:54:73:13:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:54:56 2026 GMT
Not After : Jul 21 16:59:56 2027 GMT
Subject: CN=A7CBFE8F366AA800C0F10E2748929FA9768E7DCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:e2:51:fe:10:f7:91:e3:b6:21:16:5a:b7:
40:a1:73:e6:f1:1b:20:3a:90:42:30:84:09:d3:9a:
a4:2d:80:3d:ff:a5:37:7c:4b:f6:96:54:37:e9:a2:
30:2b:88:82:46:12:23:9f:56:e3:a2:13:4c:01:03:
41:4d:95:43:5c:75:ad:71:74:ff:5e:17:86:f2:11:
65:4e:99:2b:52:97:6e:fa:de:4e:2c:d1:8b:e1:d4:
e4:a4:b0:66:d1:6f:93:82:bc:45:e6:8b:ca:eb:14:
64:6a:51:85:45:fc:c8:4c:93:ef:db:70:67:20:a8:
7a:aa:80:f8:b3:f5:d6:59:9a:a8:d8:55:80:6c:b0:
a8:53:bc:a9:ee:bc:84:77:fc:cd:c0:ae:bf:ae:94:
52:0f:c4:24:e9:26:a5:bd:7c:84:27:02:60:cf:34:
09:07:fb:d2:94:16:54:bd:1f:8d:ed:ce:60:46:c4:
ab:f3:3f:52:df:4b:cc:2c:e8:b4:c9:b1:1d:f1:0a:
c3:5b:13:18:69:64:6e:5c:85:09:4a:45:4e:eb:ff:
f5:b4:04:ca:d3:76:f5:c6:15:fe:75:e4:6f:b5:13:
87:92:fc:ce:ad:8a:75:79:d9:27:d9:88:cf:d4:4a:
0e:70:8d:ff:9c:21:2c:e2:75:35:18:ed:ef:76:fe:
af:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CB:FE:8F:36:6A:A8:00:C0:F1:0E:27:48:92:9F:A9:76:8E:7D:CB
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234352e302f32342d3234203d3e20333939333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.245.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e4:9f:ff:68:29:93:e3:20:74:ac:01:21:d5:5c:db:d5:af:
75:aa:92:a3:9b:97:0a:1a:68:ff:c6:36:47:ce:80:87:48:42:
96:7d:1d:44:c3:53:a8:09:5e:44:df:5a:8f:d4:e2:48:d8:a4:
b9:54:70:ec:72:52:f4:86:ef:bc:aa:56:4a:0f:b7:25:f3:43:
e7:e1:6c:6f:79:2e:cb:71:d9:b5:ed:1c:71:6b:2b:b1:9d:58:
66:b3:43:1a:c5:79:97:55:54:0a:43:cd:a0:73:1a:1f:4d:da:
49:be:64:0e:95:ad:6b:ff:31:8c:bb:f0:16:19:27:11:80:12:
ac:c7:8a:7a:6c:27:27:7f:51:7f:94:65:e2:e9:60:ff:0a:4a:
3e:5c:78:90:c1:e3:6e:1c:01:60:90:bb:66:39:37:bf:47:86:
22:24:12:d8:54:44:cf:0f:94:28:46:7b:ac:0a:8f:83:44:78:
41:36:2b:29:7c:b8:7d:35:44:97:8d:b5:b6:d0:d4:36:14:8d:
91:16:af:ca:0d:27:5f:7a:bf:37:8c:60:74:cc:e5:85:4f:c8:
98:21:1d:13:ec:f0:e4:3a:02:c0:f2:7a:6c:96:00:70:42:4d:
a1:40:94:8e:95:5c:09:a1:06:13:dd:d2:0e:d1:f7:ed:78:67:
ec:ca:f8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:13:18 2026 by rpki-client