Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e302e302f31392d3332203d3e203335343837.roa
File: 3137372e3137372e302e302f31392d3332203d3e203335343837.roa (raw, json)
Hash identifier: FhNumEvNBAPQ2E3f+BoZr2srux+Hc8OraRoB9QFpC2c=
Subject key identifier: F1:79:7C:15:11:93:4D:DA:66:02:78:7D:33:F1:BC:54:24:0C:82:99
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 26A3F52C31D4574EA04164586E6F64C633A12A0E
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e302e302f31392d3332203d3e203335343837.roa
Signing time: Fri 11 Sep 2026 12:50:19 +0000
ROA not before: Fri 11 Sep 2026 12:45:19 +0000
ROA not after: Fri 10 Sep 2027 12:50:19 +0000
asID: 35487
IP address blocks: 177.177.0.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:a3:f5:2c:31:d4:57:4e:a0:41:64:58:6e:6f:64:c6:33:a1:2a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:19 2026 GMT
Not After : Sep 10 12:50:19 2027 GMT
Subject: CN=F1797C1511934DDA6602787D33F1BC54240C8299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:03:03:1f:29:4d:07:c1:c6:0e:75:30:38:bd:
7b:69:61:d1:e6:e2:9b:02:bf:67:3d:47:a7:e0:ad:
d9:10:0c:de:28:e6:79:52:b8:1d:19:be:97:b8:c7:
96:d8:90:88:1c:62:5b:c9:2f:46:eb:fb:41:f6:f0:
cf:2b:0b:54:91:35:8d:bf:62:ca:d2:79:ee:ac:08:
bb:e8:d1:e8:38:eb:05:0e:4e:47:96:2a:30:03:80:
d4:14:02:2c:b0:34:20:bb:c9:76:5c:de:52:d5:3f:
a3:d4:19:29:4a:6b:39:93:b2:34:fe:2f:1a:e9:45:
78:45:b5:02:8d:54:0a:8a:dd:3a:47:6a:c8:b3:ab:
e3:b9:3e:a4:11:9d:8a:30:43:12:14:49:0d:2c:5d:
1f:75:8a:51:c9:96:15:8e:ea:fa:52:30:92:ed:49:
41:b4:cc:f2:93:fe:ea:7e:9f:c3:74:12:48:47:74:
48:c1:df:b7:ff:45:2a:b3:56:1a:c1:e8:65:5f:dc:
05:e7:1a:34:83:6c:70:14:4e:17:ac:94:c6:f6:a0:
c2:ae:43:2f:ad:34:28:2b:f1:f2:89:af:fe:14:d8:
fd:6e:9e:cc:9e:e0:be:04:7c:9b:59:d0:50:9d:30:
5f:1d:ed:cc:76:27:f7:6e:28:38:f9:6d:e2:23:de:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:79:7C:15:11:93:4D:DA:66:02:78:7D:33:F1:BC:54:24:0C:82:99
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e302e302f31392d3332203d3e203335343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.0.0/19
Signature Algorithm: sha256WithRSAEncryption
62:60:c6:f7:23:9c:f3:d3:c6:8f:3a:2e:06:4c:d5:92:af:8f:
2f:0e:8b:c0:6c:71:14:39:5f:b6:b9:15:92:11:81:f7:43:b9:
3f:13:cb:c6:ae:4c:eb:06:8a:b0:c5:77:9d:e2:13:be:d8:89:
e9:16:65:cc:56:b7:55:09:ce:e3:00:32:f5:36:b8:70:f3:2b:
d4:ef:b1:a7:fb:cf:f7:d9:43:c0:f3:e8:ad:68:7b:ce:b7:22:
ad:08:0b:b8:4b:ed:8a:bf:2b:c0:f4:e4:b4:dd:4f:68:bd:d9:
a9:50:70:0c:f5:d2:e8:de:13:70:58:f9:9a:7c:a8:b3:31:1b:
89:73:55:f7:09:52:72:1a:c5:1d:d8:02:bb:34:32:2f:f8:97:
f9:b8:80:80:65:ad:3c:b5:46:b2:1b:e2:32:a1:91:c3:e7:92:
e4:4c:0e:3d:fd:28:e9:d6:63:32:50:0c:2d:20:81:a7:ed:73:
b8:c4:e0:f2:99:23:d1:4b:1c:f0:12:31:10:d8:fb:1e:3a:11:
b9:7f:46:c4:49:a5:ea:90:23:10:8d:f4:12:9c:98:e7:d2:fb:
d8:3a:e0:cf:5e:5a:20:21:78:d8:d8:78:d9:f8:32:a0:77:cd:
e2:fa:4b:35:bb:70:95:2c:76:e6:13:eb:82:cb:47:a3:5a:38:
37:08:4c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:56:53 2026 by rpki-client