Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3235302e302f32342d3234203d3e20333939333539.roa
File: 3135322e3233372e3235302e302f32342d3234203d3e20333939333539.roa (raw, json)
Hash identifier: QSteWX/ZA+tI0+2gS0Bpl4bai+/j/t8AkZoDKx0Iw+M=
Subject key identifier: FD:83:89:8E:E7:73:D5:69:C5:A0:3F:00:FA:C7:1B:C8:D9:37:70:3A
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 1F16B360BC3C7A4526156209BBB1349C7D81DE64
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3235302e302f32342d3234203d3e20333939333539.roa
Signing time: Wed 22 Jul 2026 17:02:28 +0000
ROA not before: Wed 22 Jul 2026 16:57:28 +0000
ROA not after: Wed 21 Jul 2027 17:02:28 +0000
asID: 399359
IP address blocks: 152.237.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:16:b3:60:bc:3c:7a:45:26:15:62:09:bb:b1:34:9c:7d:81:de:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:57:28 2026 GMT
Not After : Jul 21 17:02:28 2027 GMT
Subject: CN=FD83898EE773D569C5A03F00FAC71BC8D937703A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:49:75:ce:61:b5:95:cf:be:cd:87:a8:ba:
36:54:b2:a4:b0:7c:c5:d1:ce:7b:8d:13:35:b5:1b:
38:77:e6:e6:c7:26:34:25:9a:34:07:25:64:0c:c7:
18:4c:bb:a9:a0:d3:fb:63:12:79:35:50:64:b2:d6:
9e:19:82:6f:69:7f:bb:8f:79:7e:85:be:04:6d:5a:
a7:af:df:4a:da:fc:e9:62:d9:59:f4:4f:a9:bf:e3:
b8:43:75:62:db:b4:01:28:64:6a:f8:f5:15:ea:a2:
93:e9:d2:d7:8a:2b:10:77:4a:69:1d:3a:1e:51:ab:
8f:fb:1e:f0:ec:a5:c6:41:d8:f1:ed:10:ee:48:45:
18:b1:a8:8c:11:c8:6f:3b:27:f7:c2:8c:61:09:37:
d8:81:39:62:d0:49:04:8c:0f:dc:59:82:d6:09:10:
01:3d:f5:bb:31:e2:85:62:25:ba:38:5f:5c:7a:18:
61:62:73:c7:f7:a8:ef:6c:69:32:df:d8:e1:36:cc:
a2:ce:16:69:88:38:89:23:ba:83:66:c4:82:d2:b9:
31:e0:b4:de:85:c2:4f:f6:bb:be:e6:2c:c8:96:73:
55:55:72:83:11:6a:e8:fd:4f:d5:e9:34:f6:10:6e:
24:71:1b:fe:27:30:2e:39:5e:41:30:a3:01:b0:97:
4d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:83:89:8E:E7:73:D5:69:C5:A0:3F:00:FA:C7:1B:C8:D9:37:70:3A
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3235302e302f32342d3234203d3e20333939333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.250.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f3:95:ca:b1:2b:06:ef:79:1b:6d:d4:5c:cd:51:6e:95:a3:
43:e5:ea:6a:ae:2e:65:51:80:58:50:e2:4d:a9:4b:ae:51:14:
aa:ae:ca:09:08:9d:d7:3d:d4:99:3a:6f:24:bd:d7:0c:bf:a6:
33:87:e2:81:8c:f2:48:b0:0e:b9:9d:d9:d4:57:80:03:ce:97:
8d:5a:e6:12:f4:d1:d9:97:d9:39:46:1d:1c:12:90:13:a2:67:
4e:46:7b:48:aa:d2:66:0e:8d:cf:1c:15:2c:b5:f5:50:da:b3:
0d:43:dd:df:54:49:8b:e1:db:f7:ad:4c:bf:08:92:a1:b7:d8:
88:25:8a:64:45:58:eb:0f:2b:94:76:23:ad:74:a5:13:38:06:
26:ca:eb:50:5e:a4:e1:a8:0f:33:17:46:5e:20:07:24:4b:b7:
7b:90:ff:c4:f8:85:4f:96:5d:5e:6f:b1:66:62:5e:23:dc:4b:
72:fc:ce:59:39:c0:7e:cc:e3:6c:3f:24:08:7b:b6:0b:db:06:
89:e9:ab:b1:b7:26:fe:b6:4c:7c:c1:20:e0:29:e2:06:5a:24:
96:91:85:ba:cf:6d:d3:27:f9:b5:70:6f:56:33:ed:3a:75:95:
c4:e3:ab:33:14:72:68:06:f2:97:a2:db:cb:31:92:13:68:50:
a4:ec:02:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:57 2026 by rpki-client