Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3235332e302f32342d3234203d3e20343032323838.roa
File: 3135322e3233372e3235332e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier: jOOCdFsXrnkGg4Y+cAxFRX5u0kUehDM1gzWPJ2wBF0g=
Subject key identifier: 7B:B1:B2:0D:90:65:23:EF:6B:64:48:10:5C:B8:93:9E:C8:7E:27:2A
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 7DB7CD995DC2D7C17FE3E221CC007804609551D5
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3235332e302f32342d3234203d3e20343032323838.roa
Signing time: Wed 22 Jul 2026 17:04:20 +0000
ROA not before: Wed 22 Jul 2026 16:59:20 +0000
ROA not after: Wed 21 Jul 2027 17:04:20 +0000
asID: 402288
IP address blocks: 152.237.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b7:cd:99:5d:c2:d7:c1:7f:e3:e2:21:cc:00:78:04:60:95:51:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:59:20 2026 GMT
Not After : Jul 21 17:04:20 2027 GMT
Subject: CN=7BB1B20D906523EF6B6448105CB8939EC87E272A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:ed:ca:53:ce:44:96:92:a0:78:94:cd:2a:
31:02:d7:3c:5f:dc:17:66:d3:44:3d:e4:72:12:2c:
7e:b3:3e:aa:07:29:d9:7b:df:cd:2d:00:c1:11:1b:
b4:c2:c9:6d:0a:18:9b:3c:74:a4:df:98:5c:78:09:
6e:3b:8a:5b:cc:f3:a0:a9:49:ba:e6:e4:73:58:26:
43:85:c5:4e:8f:62:19:6f:c5:d0:06:45:b1:b7:35:
eb:f2:f6:34:c3:47:08:23:63:09:c2:65:1d:75:ad:
76:d6:77:dc:96:1c:e6:37:73:b0:6f:fb:13:b3:a8:
49:e1:9d:12:53:a9:28:52:61:6d:42:8f:75:fd:19:
6c:e8:5f:fc:9d:2d:02:42:2f:74:af:34:4e:3a:68:
74:7d:25:01:9e:a4:2f:c7:a7:a2:53:b1:af:12:63:
da:f0:32:7c:55:b2:c9:a7:d2:5f:98:2e:20:0d:87:
e0:44:78:5d:ab:ec:25:d4:bc:aa:4a:05:85:92:2f:
52:d2:8f:9b:d8:5f:53:eb:8d:ba:a8:36:f8:38:e5:
21:58:ab:80:e7:ff:62:ce:fe:be:06:65:85:3d:a7:
85:32:9e:34:71:9a:c3:e8:4f:f3:88:20:3c:84:31:
cf:c3:40:6d:8f:9a:8b:10:78:7d:7b:a2:e4:79:8e:
4c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B1:B2:0D:90:65:23:EF:6B:64:48:10:5C:B8:93:9E:C8:7E:27:2A
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3235332e302f32342d3234203d3e20343032323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.253.0/24
Signature Algorithm: sha256WithRSAEncryption
95:39:b1:49:ac:f3:dd:7b:78:54:84:a6:e5:01:24:36:a1:2d:
bb:b1:a9:96:c3:06:d4:da:11:5b:a8:25:10:dc:b6:f5:76:8d:
8b:ae:da:69:d6:1a:f6:f3:f9:d2:20:b5:d5:fb:b6:a3:0a:28:
ee:76:0d:59:15:73:5b:a6:a0:2a:aa:48:52:b2:bc:f2:11:9e:
0c:19:32:76:1e:ca:61:d7:ae:d1:7a:0e:f7:48:f8:70:a6:52:
67:7b:03:b5:60:17:2d:4c:5e:73:9a:93:e4:f8:1c:fb:3d:32:
4c:73:e8:fc:66:f7:90:17:71:e3:0a:2c:5c:4c:78:25:99:9c:
5f:49:4d:d0:d9:fa:9f:6a:49:ab:8e:52:e4:42:dc:fd:b5:6c:
02:96:8f:9e:96:43:cb:e2:5d:80:fc:32:1f:a2:ad:56:48:ba:
c0:69:bd:b0:46:87:f7:63:3d:c6:e4:6d:bf:59:ff:ef:99:0e:
18:dc:2f:fb:f9:ee:92:c2:9b:69:4e:50:4d:b9:a5:ac:60:80:
18:46:ac:db:e7:1b:4f:bb:83:2f:75:31:7f:44:a1:79:c6:7c:
de:95:2f:87:5d:62:02:0e:99:96:52:b4:96:2c:91:30:5f:4c:
27:a0:d3:ad:d7:e7:84:28:74:47:6c:6b:12:54:1a:70:14:32:
cb:b1:90:65
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUfbfNmV3C18F/4+IhzAB4BGCVUdUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA3MjIxNjU5MjBaFw0yNzA3MjExNzA0MjBaMDMxMTAvBgNV
BAMTKDdCQjFCMjBEOTA2NTIzRUY2QjY0NDgxMDVDQjg5MzlFQzg3RTI3MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ue3KU85ElpKgeJTNKjEC1zxf
3Bdm00Q95HISLH6zPqoHKdl7380tAMERG7TCyW0KGJs8dKTfmFx4CW47ilvM86Cp
Sbrm5HNYJkOFxU6PYhlvxdAGRbG3Nevy9jTDRwgjYwnCZR11rXbWd9yWHOY3c7Bv
+xOzqEnhnRJTqShSYW1Cj3X9GWzoX/ydLQJCL3SvNE46aHR9JQGepC/Hp6JTsa8S
Y9rwMnxVssmn0l+YLiANh+BEeF2r7CXUvKpKBYWSL1LSj5vYX1PrjbqoNvg45SFY
q4Dn/2LO/r4GZYU9p4UynjRxmsPoT/OIIDyEMc/DQG2PmosQeH17ouR5jkwlAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUe7GyDZBlI+9rZEgQXLiTnsh+JyowHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzEzNTMyMmUzMjMzMzcyZTMy
MzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMjMyMzgzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJjt/TANBgkqhkiG9w0BAQsFAAOCAQEAlTmxSazz3Xt4VISm5QEkNqEtu7Gp
lsMG1NoRW6glENy29XaNi67aadYa9vP50iC11fu2owoo7nYNWRVzW6agKqpIUrK8
8hGeDBkydh7KYdeu0XoO90j4cKZSZ3sDtWAXLUxec5qT5Pgc+z0yTHPo/Gb3kBdx
4wosXEx4JZmcX0lN0Nn6n2pJq45S5ELc/bVsApaPnpZDy+JdgPwyH6KtVki6wGm9
sEaH92M9xuRtv1n/75kOGNwv+/nuksKbaU5QTbmlrGCAGEas2+cbT7uDL3Uxf0Sh
ecZ83pUvh11iAg6ZllK0liyRMF9MJ6DTrdfnhCh0R2xrElQacBQyy7GQZQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:20:32 2026 by rpki-client