Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3235322e302f32342d3234203d3e20333939333539.roa
File: 3135322e3233372e3235322e302f32342d3234203d3e20333939333539.roa (raw, json)
Hash identifier: RlV+yATZhKGRNa0oYywsrt3+un8LUJ2CRPGAVJhVv4A=
Subject key identifier: B2:F4:35:9C:ED:88:3E:78:B5:42:B9:96:54:29:B3:83:82:17:6B:3D
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 66F758ECFFB6C91D21FB270E5F7CA80B57947253
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3235322e302f32342d3234203d3e20333939333539.roa
Signing time: Wed 22 Jul 2026 17:03:51 +0000
ROA not before: Wed 22 Jul 2026 16:58:51 +0000
ROA not after: Wed 21 Jul 2027 17:03:51 +0000
asID: 399359
IP address blocks: 152.237.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f7:58:ec:ff:b6:c9:1d:21:fb:27:0e:5f:7c:a8:0b:57:94:72:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:58:51 2026 GMT
Not After : Jul 21 17:03:51 2027 GMT
Subject: CN=B2F4359CED883E78B542B9965429B38382176B3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:9a:f7:c5:e2:51:fc:b3:2c:42:a9:62:99:
44:c4:d8:c4:cc:f2:19:9a:ac:4e:60:28:af:77:07:
40:ee:65:bc:af:e7:ea:fa:36:de:b7:c8:98:00:47:
01:b3:55:77:76:17:60:25:72:70:97:65:42:5e:4e:
db:6e:0f:4f:5c:7b:e3:9a:15:62:f6:fa:4b:48:d0:
5b:81:5e:1e:f2:e9:09:ef:d4:68:7a:f2:3d:c0:23:
18:be:c5:f2:d6:f1:ae:c4:29:c1:d6:dc:40:aa:3c:
90:5f:48:96:b1:1d:90:c6:99:26:0c:a7:71:4d:31:
e1:f4:06:19:27:39:de:53:d1:ab:f0:63:99:d2:df:
4c:d0:86:d2:0d:40:42:a0:46:e8:af:b5:12:3b:c4:
de:b3:58:58:3f:6b:9c:30:cd:60:bd:e2:66:93:86:
48:a2:55:92:a4:bd:b7:f9:d9:e4:6d:8a:f0:51:cd:
f8:58:f8:42:62:6d:bb:fd:18:3d:75:26:4b:ed:92:
0d:89:e5:7e:d8:30:ed:c0:8f:15:d1:ef:f8:57:eb:
40:9c:64:98:e6:29:31:dd:af:da:d2:ce:8e:9e:f0:
99:04:62:66:d5:dd:86:fc:cd:d5:88:d4:0e:f6:61:
53:3c:5b:65:b9:76:d9:a6:88:9a:a1:ff:0a:e2:2f:
c9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F4:35:9C:ED:88:3E:78:B5:42:B9:96:54:29:B3:83:82:17:6B:3D
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3235322e302f32342d3234203d3e20333939333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.252.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:3f:2d:08:c9:6d:41:f9:cb:7a:d5:73:10:26:66:d8:91:04:
f0:71:63:d9:7b:95:5f:10:13:37:b0:91:07:a6:5c:a9:2c:ce:
98:4c:32:80:3f:16:34:c9:ee:64:b1:e4:04:8f:43:b5:8c:e3:
63:81:13:90:50:7d:2d:01:ce:68:67:82:3d:73:70:3a:71:79:
ee:0b:5c:5d:62:fb:ef:8b:f4:65:ae:0d:d0:28:ff:76:be:dd:
2d:ae:6d:8c:25:7e:a1:57:92:aa:fd:88:25:8c:9c:83:0d:13:
0c:30:15:55:f7:4e:0c:c3:d3:23:f8:54:25:b2:16:41:6f:ab:
90:d4:58:d2:4b:a3:e9:3c:72:d4:dd:57:b4:fa:84:c3:9a:14:
24:ef:94:6a:fb:d7:7d:ae:cd:d2:f4:2c:f3:77:3a:ef:92:02:
2d:f4:2d:bf:34:3f:46:62:bb:7e:19:9c:c9:bc:80:3b:35:0d:
34:ea:28:ba:7f:20:84:6f:86:a0:2f:79:bf:09:ad:1e:c5:70:
39:7f:71:22:e3:2b:e6:28:f5:a2:eb:c8:a0:7c:d4:4a:1a:8d:
d9:35:fe:73:58:00:70:85:03:3b:68:d9:48:49:b9:2c:d3:a8:
b4:05:b1:bd:19:4e:f1:04:53:ae:73:60:cb:73:81:a8:10:8e:
08:cf:e2:9a
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUZvdY7P+2yR0h+ycOX3yoC1eUclMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA3MjIxNjU4NTFaFw0yNzA3MjExNzAzNTFaMDMxMTAvBgNV
BAMTKEIyRjQzNTlDRUQ4ODNFNzhCNTQyQjk5NjU0MjlCMzgzODIxNzZCM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsJr3xeJR/LMsQqlimUTE2MTM
8hmarE5gKK93B0DuZbyv5+r6Nt63yJgARwGzVXd2F2AlcnCXZUJeTttuD09ce+Oa
FWL2+ktI0FuBXh7y6Qnv1Gh68j3AIxi+xfLW8a7EKcHW3ECqPJBfSJaxHZDGmSYM
p3FNMeH0BhknOd5T0avwY5nS30zQhtINQEKgRuivtRI7xN6zWFg/a5wwzWC94maT
hkiiVZKkvbf52eRtivBRzfhY+EJibbv9GD11Jkvtkg2J5X7YMO3AjxXR7/hX60Cc
ZJjmKTHdr9rSzo6e8JkEYmbV3Yb8zdWI1A72YVM8W2W5dtmmiJqh/wriL8m7AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUsvQ1nO2IPni1QrmWVCmzg4IXaz0wHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzEzNTMyMmUzMjMzMzcyZTMy
MzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzOTMzMzUzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJjt/DANBgkqhkiG9w0BAQsFAAOCAQEAqj8tCMltQfnLetVzECZm2JEE8HFj
2XuVXxATN7CRB6ZcqSzOmEwygD8WNMnuZLHkBI9DtYzjY4ETkFB9LQHOaGeCPXNw
OnF57gtcXWL774v0Za4N0Cj/dr7dLa5tjCV+oVeSqv2IJYycgw0TDDAVVfdODMPT
I/hUJbIWQW+rkNRY0kuj6Txy1N1XtPqEw5oUJO+UavvXfa7N0vQs83c675ICLfQt
vzQ/RmK7fhmcybyAOzUNNOooun8ghG+GoC95vwmtHsVwOX9xIuMr5ij1ouvIoHzU
ShqN2TX+c1gAcIUDO2jZSEm5LNOotAWxvRlO8QRTrnNgy3OBqBCOCM/img==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:46:21 2026 by rpki-client