Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3235352e302f32342d3234203d3e20343032323838.roa
File: 3135322e3233372e3235352e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier: PKHsz9c20790ftj0lQ+u4smTTBs5zQ4OABVMnRU03O8=
Subject key identifier: EC:65:3B:08:FF:A8:81:22:68:F7:B7:C4:2C:20:39:5B:F8:56:43:C2
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 7E9EF882616B648FD2209B404FAFA7E4F781EBC3
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3235352e302f32342d3234203d3e20343032323838.roa
Signing time: Wed 22 Jul 2026 17:05:38 +0000
ROA not before: Wed 22 Jul 2026 17:00:38 +0000
ROA not after: Wed 21 Jul 2027 17:05:38 +0000
asID: 402288
IP address blocks: 152.237.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:9e:f8:82:61:6b:64:8f:d2:20:9b:40:4f:af:a7:e4:f7:81:eb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 17:00:38 2026 GMT
Not After : Jul 21 17:05:38 2027 GMT
Subject: CN=EC653B08FFA8812268F7B7C42C20395BF85643C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:f8:c5:8c:01:a1:9b:13:e6:4e:45:b7:45:
44:22:58:f5:44:b7:a4:d7:8f:84:92:2f:6d:c3:24:
f9:5d:92:81:f8:47:bd:76:f6:2d:f9:a6:19:85:ee:
0b:de:83:8b:ca:0e:dd:af:ee:d2:1a:e3:c7:57:1e:
29:14:c6:5a:66:86:25:8b:a5:45:97:83:f5:fe:75:
2f:bc:be:ef:38:c3:94:21:50:41:39:22:ac:e4:4a:
3b:48:a6:94:1b:41:a4:09:5d:8c:b8:44:31:9f:98:
a0:ed:c2:fd:35:27:2c:4b:c8:e3:65:92:53:1f:c3:
62:8b:5b:0f:50:8b:f1:6b:51:ea:96:eb:3b:f2:02:
60:20:1a:a0:75:c1:a4:9f:86:d8:55:94:c4:97:7a:
d6:08:d3:1a:f7:72:b9:72:f9:c2:1c:09:b1:d6:b0:
07:ee:c1:df:69:b4:e1:28:b9:53:df:8a:45:cc:b8:
46:88:48:44:0b:24:84:d3:35:fb:04:a8:9c:ff:86:
d0:7c:7f:ee:6d:fa:76:ee:9e:26:fc:58:ea:d9:79:
06:0d:2e:2f:90:f6:56:4a:ed:9c:fa:0b:99:00:90:
76:62:99:d5:4a:c0:f6:6b:c3:10:66:e3:96:5a:6e:
b6:7d:87:b0:89:d5:c9:90:86:83:60:22:96:ad:fb:
14:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:65:3B:08:FF:A8:81:22:68:F7:B7:C4:2C:20:39:5B:F8:56:43:C2
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3235352e302f32342d3234203d3e20343032323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.255.0/24
Signature Algorithm: sha256WithRSAEncryption
53:04:52:25:2f:b5:92:26:93:32:52:cd:e5:2a:0f:b9:4f:e3:
71:1e:2b:b7:be:5e:f0:75:bc:0c:e8:78:8d:93:38:cb:bf:57:
27:1d:c8:aa:0c:41:1a:80:3d:78:c4:ef:56:9d:aa:94:d7:d0:
a6:da:b0:58:13:2e:e5:ec:1a:77:72:70:f2:f8:1c:e6:20:dd:
e4:ba:bd:dd:e3:e6:4a:0c:42:d5:6e:e5:86:15:5e:38:8e:d3:
48:5c:c6:06:ec:68:80:b1:2a:23:61:5c:87:f0:58:fb:61:19:
4b:d1:03:ed:e3:55:ce:54:e0:ce:c4:49:7b:fa:a7:8e:b9:9a:
1e:78:c0:03:e0:73:19:64:89:aa:44:43:cf:91:23:b0:cf:56:
59:60:94:5b:28:e6:2f:c0:16:35:94:8d:80:7b:fc:0a:61:58:
ce:46:4e:dc:23:c2:85:7e:bc:a2:4b:2e:77:ae:79:28:0d:f9:
5a:7e:1f:6f:03:a1:c7:c0:f7:09:9c:6f:d9:18:8e:e3:37:9f:
fd:03:9a:d0:af:a2:a9:df:9d:e7:fa:ad:4a:5a:e4:de:3a:19:
3f:c2:c2:e6:3e:38:f2:e4:17:de:de:56:43:3b:7d:6e:d3:9a:
fa:12:cd:bf:cc:1d:7b:ed:06:80:a0:46:87:8d:b1:b7:5a:c3:
f6:36:51:d2
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUfp74gmFrZI/SIJtAT6+n5PeB68MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA3MjIxNzAwMzhaFw0yNzA3MjExNzA1MzhaMDMxMTAvBgNV
BAMTKEVDNjUzQjA4RkZBODgxMjI2OEY3QjdDNDJDMjAzOTVCRjg1NjQzQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPjvjFjAGhmxPmTkW3RUQiWPVE
t6TXj4SSL23DJPldkoH4R7129i35phmF7gveg4vKDt2v7tIa48dXHikUxlpmhiWL
pUWXg/X+dS+8vu84w5QhUEE5IqzkSjtIppQbQaQJXYy4RDGfmKDtwv01JyxLyONl
klMfw2KLWw9Qi/FrUeqW6zvyAmAgGqB1waSfhthVlMSXetYI0xr3crly+cIcCbHW
sAfuwd9ptOEouVPfikXMuEaISEQLJITTNfsEqJz/htB8f+5t+nbunib8WOrZeQYN
Li+Q9lZK7Zz6C5kAkHZimdVKwPZrwxBm45ZabrZ9h7CJ1cmQhoNgIpat+xQJAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU7GU7CP+ogSJo97fELCA5W/hWQ8IwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzEzNTMyMmUzMjMzMzcyZTMy
MzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMjMyMzgzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJjt/zANBgkqhkiG9w0BAQsFAAOCAQEAUwRSJS+1kiaTMlLN5SoPuU/jcR4r
t75e8HW8DOh4jZM4y79XJx3IqgxBGoA9eMTvVp2qlNfQptqwWBMu5ewad3Jw8vgc
5iDd5Lq93ePmSgxC1W7lhhVeOI7TSFzGBuxogLEqI2Fch/BY+2EZS9ED7eNVzlTg
zsRJe/qnjrmaHnjAA+BzGWSJqkRDz5EjsM9WWWCUWyjmL8AWNZSNgHv8CmFYzkZO
3CPChX68oksud655KA35Wn4fbwOhx8D3CZxv2RiO4zef/QOa0K+iqd+d5/qtSlrk
3joZP8LC5j448uQX3t5WQzt9btOa+hLNv8wde+0GgKBGh42xt1rD9jZR0g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:38:28 2026 by rpki-client