Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3235342e302f32342d3234203d3e20333939333539.roa
File: 3135322e3233372e3235342e302f32342d3234203d3e20333939333539.roa (raw, json)
Hash identifier: O4ag7BK1VNbOK+DmbV6fuNsq8j2dOB1Kbmlr12uRI0g=
Subject key identifier: D2:E3:EB:97:AD:AA:D0:7E:1E:C3:5C:EC:2C:5D:B3:73:1B:19:A0:99
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 377761DB8ACFF359F0129C3CC40DDA9B5E447B94
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3235342e302f32342d3234203d3e20333939333539.roa
Signing time: Wed 22 Jul 2026 17:04:56 +0000
ROA not before: Wed 22 Jul 2026 16:59:56 +0000
ROA not after: Wed 21 Jul 2027 17:04:56 +0000
asID: 399359
IP address blocks: 152.237.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:77:61:db:8a:cf:f3:59:f0:12:9c:3c:c4:0d:da:9b:5e:44:7b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 16:59:56 2026 GMT
Not After : Jul 21 17:04:56 2027 GMT
Subject: CN=D2E3EB97ADAAD07E1EC35CEC2C5DB3731B19A099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ae:ed:17:ff:cb:cc:b9:1e:99:b5:e2:7d:bb:
9f:c1:c7:c0:d5:91:50:a0:84:d5:18:93:53:66:e6:
36:36:d7:75:f9:74:95:8d:08:ba:63:f8:b8:24:32:
78:6f:9a:5f:30:ff:4b:ce:b1:dc:c3:c5:f9:0e:33:
bc:98:27:6b:9b:6e:6d:2b:43:22:a1:c3:a8:e7:3b:
85:6d:ac:85:8b:58:e2:0a:d6:a6:5a:86:8a:43:1d:
b5:17:52:f0:a5:93:02:82:4b:42:81:f4:f6:6e:82:
7e:8a:93:fe:0c:2c:e2:b0:9c:e8:cf:5e:2a:e1:07:
ef:d6:82:38:da:6f:bf:04:c5:b4:36:38:86:c3:5b:
22:e4:71:a7:44:06:bc:73:db:5e:bd:2e:82:e2:dd:
58:6b:4b:38:62:e7:89:30:55:65:e7:51:90:7b:09:
ec:c1:77:59:be:14:16:10:8a:fc:19:d6:98:27:83:
df:da:30:67:91:b2:d7:55:3f:6c:32:c2:31:50:cf:
e1:01:ba:3e:78:99:7c:d0:06:b0:d3:30:3b:8b:39:
a7:67:63:9c:35:29:6e:5e:b1:c3:6e:f9:3e:4a:aa:
4c:72:17:b9:d8:e0:9c:f7:73:24:e0:41:6f:21:19:
3c:85:84:a7:1b:0b:1e:6c:ad:3a:71:1a:b8:bf:86:
95:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E3:EB:97:AD:AA:D0:7E:1E:C3:5C:EC:2C:5D:B3:73:1B:19:A0:99
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3235342e302f32342d3234203d3e20333939333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.254.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:dd:6e:87:d9:3b:d9:5e:90:b2:5b:60:31:cc:e8:b6:e6:d5:
2a:39:78:2f:f4:ff:5b:15:1c:25:77:8a:43:b1:7a:46:0b:07:
70:e3:5f:e5:e9:c0:e8:3c:1f:da:e3:2f:b5:75:f7:ed:c0:c3:
6b:0f:5f:4d:01:aa:70:71:ff:31:67:2a:1c:45:65:a4:93:c7:
6c:71:0a:42:46:c6:58:ef:c1:21:a4:74:42:ff:da:31:cd:c9:
98:b0:2e:4b:99:af:23:6d:df:05:9d:cc:aa:f9:b1:f8:2a:e9:
b0:4a:23:64:82:ad:08:fd:58:98:c3:6d:ac:10:47:71:6a:f2:
c5:9c:f0:f6:f8:8d:21:91:10:1b:d7:4e:04:51:4b:20:b5:14:
9d:15:47:70:a7:e8:bb:63:35:55:59:34:72:1d:4a:1b:0b:1e:
ac:3b:63:36:9d:95:93:d0:54:9b:c0:09:e4:6b:90:c6:af:a3:
8c:da:3f:56:f4:31:c1:54:b9:10:2f:0c:11:04:41:0e:2d:a0:
be:3c:95:32:3f:a5:82:82:f5:24:40:9a:72:f6:c9:cb:b0:f5:
93:c3:31:b8:1e:44:b0:7e:1c:d4:01:02:04:19:1f:e2:86:dc:
e3:0c:43:87:7f:8a:d4:26:9b:d4:44:85:6e:11:7c:91:2c:73:
e3:39:a9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:28:29 2026 by rpki-client