Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3235312e302f32342d3234203d3e20343032323838.roa
File: 3135322e3233372e3235312e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier: cE5UFQvUzWR9kDpIPGrUxupbXGxc2+DNt30S2qBeJWU=
Subject key identifier: 41:CC:5E:17:C7:1A:1D:E0:A6:DB:94:F7:BA:25:0E:E5:B9:F7:85:98
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 2996309FDB2533BF83F58A719839F4CB34BEAA63
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3235312e302f32342d3234203d3e20343032323838.roa
Signing time: Wed 22 Jul 2026 17:03:12 +0000
ROA not before: Wed 22 Jul 2026 16:58:12 +0000
ROA not after: Wed 21 Jul 2027 17:03:12 +0000
asID: 402288
IP address blocks: 152.237.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:96:30:9f:db:25:33:bf:83:f5:8a:71:98:39:f4:cb:34:be:aa:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:58:12 2026 GMT
Not After : Jul 21 17:03:12 2027 GMT
Subject: CN=41CC5E17C71A1DE0A6DB94F7BA250EE5B9F78598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:65:65:56:82:8e:04:a9:67:71:0d:77:ed:0b:
6c:92:4c:11:06:55:b8:83:1d:21:91:66:b7:bd:1b:
45:61:ec:f1:8e:20:41:c8:4f:1c:8b:bb:d9:66:da:
84:5a:6f:37:2b:d3:71:8d:d0:5e:52:23:d7:f2:6c:
6d:92:a7:e6:f7:aa:57:4b:1e:1d:3c:1c:d2:86:90:
75:65:7b:92:ea:fe:6e:1c:50:da:cb:1f:55:9f:75:
bd:5b:d8:88:c6:17:a1:f6:ad:c7:06:b0:0a:f3:4c:
6c:df:e2:46:c1:12:5c:85:28:af:20:6b:b1:17:32:
9e:77:bb:5c:0c:22:3b:c7:af:97:15:6c:76:82:7a:
42:75:b9:c1:48:d0:10:9f:08:58:a9:02:07:eb:48:
5c:b4:c8:a6:45:54:21:8b:19:79:92:81:a4:4e:f9:
98:e5:a7:cd:29:33:61:ba:58:b7:f2:48:16:75:77:
d8:6e:fb:28:ab:82:63:00:3d:62:ad:98:ef:8e:d9:
1b:c9:fe:7b:9c:df:04:20:aa:ad:7a:e3:f5:c3:00:
0a:24:47:d8:07:45:ed:fa:cb:19:79:04:3a:c6:d2:
db:c1:c6:41:d8:ed:ca:07:db:d3:6a:45:21:4c:52:
cb:3c:56:18:ef:53:f7:8c:fe:5f:62:6c:35:fc:d7:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CC:5E:17:C7:1A:1D:E0:A6:DB:94:F7:BA:25:0E:E5:B9:F7:85:98
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3235312e302f32342d3234203d3e20343032323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.251.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:c9:81:67:ca:17:d7:1b:06:f4:25:59:c6:2c:9d:4a:b8:72:
d6:81:ef:49:0b:f7:24:0f:68:f4:3d:cf:f5:06:a0:da:07:4f:
d8:00:6b:a1:57:20:b5:cc:b0:8d:cc:78:17:1e:3a:d7:89:4f:
ae:6c:f0:d8:0b:dd:1d:30:46:2a:b2:7c:01:0c:55:f3:de:2f:
50:1c:fe:0d:bb:a8:05:1c:f7:a1:f6:d8:1e:be:e0:52:07:4c:
c1:8b:09:fb:2f:a5:14:14:9b:15:2e:ee:6a:a3:3f:7d:35:0d:
c8:48:2b:78:cf:b6:42:65:56:17:98:01:75:da:f7:13:cb:9d:
4d:3b:34:ed:30:44:f0:37:61:d5:b6:da:eb:c2:d3:a5:23:40:
90:65:cd:04:ed:6b:a5:3a:76:e9:65:7a:80:17:ac:03:9c:ae:
a1:c7:1b:45:53:1a:10:e2:dc:ce:30:e4:c3:7a:d9:0d:4b:56:
79:c8:e1:7c:64:33:81:81:85:50:c3:69:12:26:2b:8d:f3:54:
63:0c:07:72:48:2e:5c:79:d8:06:47:21:02:dc:6e:cf:cb:4e:
f3:d9:40:ab:52:31:36:d7:41:db:2e:db:94:93:4a:46:7f:f1:
0f:73:e5:9a:a7:cd:cc:0e:52:5c:79:26:15:a9:8d:13:1b:8c:
86:18:01:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:43:23 2026 by rpki-client