Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234382e302f32342d3234203d3e20333939333539.roa
File: 3135322e3233372e3234382e302f32342d3234203d3e20333939333539.roa (raw, json)
Hash identifier: g8ekr/hH/LZFkwe00QOWdrZociVP0r3HMtswVBN+eDI=
Subject key identifier: D7:D2:47:F0:0D:11:62:0F:A1:A0:BB:5D:56:7A:43:02:FC:B9:38:22
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 18A63BD3C8D4D37E92931FB610BD8043C4247482
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234382e302f32342d3234203d3e20333939333539.roa
Signing time: Wed 22 Jul 2026 17:01:14 +0000
ROA not before: Wed 22 Jul 2026 16:56:14 +0000
ROA not after: Wed 21 Jul 2027 17:01:14 +0000
asID: 399359
IP address blocks: 152.237.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:a6:3b:d3:c8:d4:d3:7e:92:93:1f:b6:10:bd:80:43:c4:24:74:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:56:14 2026 GMT
Not After : Jul 21 17:01:14 2027 GMT
Subject: CN=D7D247F00D11620FA1A0BB5D567A4302FCB93822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:50:75:af:50:40:81:42:fa:79:ef:f7:f5:
bd:ef:19:d5:0f:32:ad:5e:dd:bb:e5:7a:c0:ec:32:
85:d6:80:b4:bc:3b:26:a0:53:75:c1:d7:ec:e9:16:
c3:70:b9:8c:18:ab:40:1c:7d:26:4e:1a:d2:33:cc:
af:eb:56:79:33:25:17:39:60:0f:34:42:33:fe:6e:
ab:b3:f6:10:14:e0:08:cd:fe:a1:f9:1d:f3:79:77:
2f:37:b3:01:15:df:bb:81:f3:f6:12:b4:a5:dd:26:
64:fd:77:5b:41:17:f5:6c:60:f5:59:25:01:09:de:
10:c1:be:26:94:21:2f:6a:b0:00:1b:fc:4d:a0:e5:
7b:f3:71:ae:ec:62:09:4a:8a:1c:04:68:46:8d:1b:
b2:bc:11:f0:59:b9:dc:34:2d:5d:54:bc:39:52:70:
a4:59:6f:b5:76:25:27:34:5f:fb:36:9a:d6:9b:e4:
2e:1d:bb:31:57:c1:16:a6:04:fa:b8:b5:c2:4b:51:
c4:cf:be:3f:01:be:18:57:e3:9a:d8:b6:73:ce:f4:
b8:d6:9f:fc:92:2d:7c:0c:77:18:a4:9a:48:a7:17:
15:2f:e0:cd:3f:49:cf:e2:19:01:ff:9b:68:68:96:
55:de:2a:76:ef:f0:1a:1e:fb:ec:c2:5f:cc:fe:46:
51:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D2:47:F0:0D:11:62:0F:A1:A0:BB:5D:56:7A:43:02:FC:B9:38:22
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234382e302f32342d3234203d3e20333939333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.248.0/24
Signature Algorithm: sha256WithRSAEncryption
18:22:95:5b:4c:df:cb:28:2c:2b:00:ef:2d:bb:7d:fd:6b:61:
a1:c5:75:fc:2c:2c:dd:ce:21:77:4c:f7:69:2b:0b:f2:d2:b8:
24:91:18:3c:e7:53:b0:d8:aa:98:e5:fc:7f:b1:16:81:8c:74:
bf:59:ea:67:d4:b1:21:f5:46:2f:70:fd:43:f4:9b:8f:b6:9a:
e2:71:e0:65:db:b0:d0:30:a2:8e:c1:7d:12:98:5a:a1:59:38:
a8:12:fc:3b:4f:ac:7c:e5:c1:71:23:e9:1b:48:46:ab:2e:0e:
1d:34:ab:bb:30:45:fa:86:f9:fb:a4:07:b4:04:b3:07:2f:72:
a8:65:c2:7b:d1:9f:4c:04:5b:ce:a7:85:a5:4b:7e:5d:d8:c1:
3c:97:f9:20:dd:52:7d:0d:af:fc:e4:3c:61:ed:df:f3:6f:2f:
5f:2d:93:87:f3:74:81:bb:10:14:f9:3d:e4:78:d4:f1:cf:52:
6a:34:f7:37:fe:e8:bf:e1:92:d1:ce:d0:67:5b:3c:2d:3b:bf:
f9:a6:da:c7:ab:84:f3:97:a8:b9:2f:95:77:96:89:9d:46:7b:
1b:22:c5:3c:4a:0d:30:5d:8c:17:09:c5:89:1c:0b:c2:14:ba:
df:a3:3a:c0:59:4c:e2:ed:25:03:97:e2:5b:0b:06:14:ff:cd:
5c:8f:6b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:14:30 2026 by rpki-client