Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234392e302f32342d3234203d3e20343032323838.roa
File: 3135322e3233372e3234392e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier: rQOz78DSM8i8b9SGacfFwreeVaKORqqRT31x9KbjEFQ=
Subject key identifier: 1A:90:40:2D:00:1F:C7:6D:C5:AE:C5:EB:6D:2F:B7:6F:EC:D1:69:65
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 594709C2E29667B3BC269766DBE8AB1DF52B7A45
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234392e302f32342d3234203d3e20343032323838.roa
Signing time: Wed 22 Jul 2026 17:01:51 +0000
ROA not before: Wed 22 Jul 2026 16:56:51 +0000
ROA not after: Wed 21 Jul 2027 17:01:51 +0000
asID: 402288
IP address blocks: 152.237.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:47:09:c2:e2:96:67:b3:bc:26:97:66:db:e8:ab:1d:f5:2b:7a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:56:51 2026 GMT
Not After : Jul 21 17:01:51 2027 GMT
Subject: CN=1A90402D001FC76DC5AEC5EB6D2FB76FECD16965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:7d:27:78:58:ed:e0:bd:e5:4f:87:81:68:
54:90:ec:29:d1:e5:15:78:33:6f:57:c3:65:96:75:
b9:62:cd:e6:6f:0e:0c:37:6e:89:04:eb:d6:8b:37:
7a:9b:6f:5a:bf:3a:9a:2e:65:1a:8a:40:af:54:28:
77:53:c5:4f:4f:99:00:39:48:31:92:06:30:bb:2e:
b1:08:85:c1:f0:33:c7:8e:b8:77:aa:fb:46:bb:eb:
6a:aa:d4:73:f2:a5:79:b8:39:4e:fb:ff:2c:b9:c6:
48:42:8a:38:e6:e1:d6:88:d9:ff:e3:45:ea:1f:0d:
78:59:a8:75:7f:c4:41:36:81:ed:24:0f:a1:31:d7:
42:dc:67:dd:78:ff:dd:db:69:9d:13:be:68:d2:59:
0e:09:f2:9a:73:72:03:b9:e4:15:28:94:f7:d7:74:
9e:2f:c4:24:d6:b8:09:fb:69:dd:4b:df:bf:ca:25:
15:17:d1:f8:11:46:44:25:b8:59:d1:d7:18:9d:b0:
1b:dc:d8:03:82:20:cc:2d:a6:a8:b2:8f:f9:2a:cc:
e8:72:00:97:fb:1e:25:27:33:3f:45:69:2c:14:fd:
d5:08:7d:c5:4d:6f:b1:21:7a:85:ee:0d:88:28:ef:
eb:ec:6d:20:6e:cb:f6:6d:dd:96:d8:54:44:e3:4a:
81:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:90:40:2D:00:1F:C7:6D:C5:AE:C5:EB:6D:2F:B7:6F:EC:D1:69:65
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234392e302f32342d3234203d3e20343032323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.249.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:4a:e4:f9:99:70:f5:16:d7:0d:71:49:78:68:f8:70:15:26:
4e:0f:aa:9d:0e:46:75:6d:38:69:20:63:27:32:52:2f:8b:6a:
7b:74:4a:7b:c9:d0:78:0a:43:76:53:72:87:fc:ba:a8:85:d2:
b5:d0:81:0c:13:d8:60:d3:1e:1c:96:98:59:84:2f:24:89:93:
aa:73:26:dd:c5:9a:3f:72:82:2f:41:8c:09:41:a3:60:df:b2:
76:fa:a4:a0:1b:1a:4c:82:90:3b:a6:87:d6:40:f2:d2:e9:86:
99:38:e6:45:0d:a5:40:ae:3a:3b:ae:a3:88:0e:74:70:c4:ef:
b1:24:3f:d1:b3:9a:1b:92:d7:b9:6c:37:63:86:52:f0:75:db:
ec:dc:c2:f1:45:b1:d4:bb:f2:55:61:b8:7d:7f:a4:b9:9e:f5:
df:de:e4:41:fb:33:e5:8e:88:ed:d3:16:7e:91:97:c8:3a:1c:
64:8c:34:88:87:9e:bd:f1:62:1a:33:2b:de:71:4b:78:f2:4d:
cf:11:e2:9d:86:e7:1a:eb:58:56:c7:a3:4a:5f:2a:77:0e:5a:
67:c4:52:da:77:53:72:c4:78:89:95:46:94:06:24:3e:2f:2b:
0e:e1:7a:d6:41:35:76:7d:dd:bc:6c:51:c9:85:9c:7b:e6:72:
36:54:dd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:34:37 2026 by rpki-client