Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234372e302f32342d3234203d3e20343032323838.roa
File: 3135322e3233372e3234372e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier: ktDgzCg4Wep8s+8qgF9BW8hW5mpc7wj4kD1a3cPGXSY=
Subject key identifier: E6:22:DA:C5:E5:0F:FC:46:40:AE:46:66:83:52:D4:C7:BA:B9:4E:4C
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 01F805D4F2D716CB8461FBA12356526F3741F21D
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234372e302f32342d3234203d3e20343032323838.roa
Signing time: Wed 22 Jul 2026 17:00:37 +0000
ROA not before: Wed 22 Jul 2026 16:55:37 +0000
ROA not after: Wed 21 Jul 2027 17:00:37 +0000
asID: 402288
IP address blocks: 152.237.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f8:05:d4:f2:d7:16:cb:84:61:fb:a1:23:56:52:6f:37:41:f2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:55:37 2026 GMT
Not After : Jul 21 17:00:37 2027 GMT
Subject: CN=E622DAC5E50FFC4640AE46668352D4C7BAB94E4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:ac:ee:da:17:ea:b8:86:d2:08:9c:0c:96:
ae:b0:8d:63:89:78:33:1f:1b:35:33:a8:9a:17:d1:
56:b6:a0:2b:8b:63:e2:73:23:db:da:84:37:8e:be:
db:34:92:be:06:8d:08:ad:d8:20:3c:b9:9b:3d:29:
ab:22:95:07:d9:9f:0c:94:e6:6b:ed:30:e6:d4:c8:
00:37:0b:65:6d:c5:68:a6:51:13:c0:19:c2:a9:88:
7e:3c:c0:c8:2a:aa:2b:1d:42:7e:c9:11:f3:53:6d:
6f:23:20:14:f5:73:0b:68:33:59:a3:8f:1b:df:78:
8e:b1:31:e7:d0:23:b0:be:d3:b5:41:b6:77:2b:47:
dd:ba:9f:f0:20:3f:98:de:7e:09:ca:07:cc:01:42:
c0:85:9b:b4:1d:92:8f:64:f9:a6:3d:04:d6:6e:26:
fe:be:60:e0:41:ce:41:91:1c:29:10:59:90:69:ca:
a7:80:92:05:2e:89:14:f7:9e:07:32:db:84:63:08:
4c:27:b7:bd:ab:44:34:bd:6d:5c:a6:c8:4f:8f:08:
d2:8a:5b:28:1b:30:46:66:0e:4f:40:f3:78:7c:31:
17:55:25:f6:be:eb:e9:4c:5b:87:53:6f:3e:0a:ca:
4f:5d:b3:98:2d:08:ad:14:56:10:be:6d:9b:8d:75:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:22:DA:C5:E5:0F:FC:46:40:AE:46:66:83:52:D4:C7:BA:B9:4E:4C
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234372e302f32342d3234203d3e20343032323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.247.0/24
Signature Algorithm: sha256WithRSAEncryption
67:32:16:e7:8e:74:a7:04:c5:0f:32:81:a7:9f:aa:42:98:a5:
05:65:fd:14:2d:ff:30:8a:d9:6f:a4:48:6b:8b:d8:32:6c:cc:
8a:6f:48:75:32:ac:00:e2:aa:4f:a2:6a:12:17:28:e7:81:dd:
81:49:0a:da:7c:38:60:dc:97:1e:a0:07:a9:1e:a5:c6:b7:c9:
fc:2a:54:e6:1e:ca:8e:90:d9:17:18:e8:4d:40:a2:4c:6d:ec:
7a:e6:42:0f:a3:8d:38:26:7a:ae:46:05:34:94:58:6f:41:fe:
22:e2:39:b6:e8:20:bf:00:87:99:c7:9c:8d:43:3b:c9:53:8a:
0c:c5:80:bf:52:53:f1:b4:58:ef:db:47:c1:96:90:c7:b8:15:
e2:8f:2d:7e:75:8c:18:d2:e4:20:72:73:4a:0a:7a:b6:f2:c8:
3f:c2:42:a3:6c:9b:55:6d:6d:92:4d:0d:93:48:7c:1b:b2:80:
80:a1:4b:69:94:b6:40:8f:9d:40:bd:6a:d4:99:7b:75:e6:a4:
02:29:6e:6f:d4:1d:97:82:d1:52:4a:6c:da:af:2c:49:22:53:
6a:ce:9c:d0:d0:ce:5b:82:85:f9:ee:e3:db:7b:9e:fd:0a:e4:
dd:c1:8f:4e:15:fd:c5:78:14:a3:ef:91:9c:f2:e7:3b:ed:bd:
d0:98:33:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:23:58 2026 by rpki-client