Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e31392e302f32342d3332203d3e203538333432.roa
File: 3137372e3137372e31392e302f32342d3332203d3e203538333432.roa (raw, json)
Hash identifier: uhL5qKKRO2qWA9YVVLwXgDMutAoJMmazOlzWjeSTGTY=
Subject key identifier: B7:D8:AC:1A:4A:4F:29:9A:1D:B8:D9:E3:79:36:1E:C8:45:3F:D4:57
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 13760E32CD51564286297CECFA796FCF6BC18D4F
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e31392e302f32342d3332203d3e203538333432.roa
Signing time: Fri 11 Sep 2026 12:50:13 +0000
ROA not before: Fri 11 Sep 2026 12:45:13 +0000
ROA not after: Fri 10 Sep 2027 12:50:13 +0000
asID: 58342
IP address blocks: 177.177.19.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 17:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:76:0e:32:cd:51:56:42:86:29:7c:ec:fa:79:6f:cf:6b:c1:8d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:13 2026 GMT
Not After : Sep 10 12:50:13 2027 GMT
Subject: CN=B7D8AC1A4A4F299A1DB8D9E379361EC8453FD457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:ed:81:c6:4f:73:86:4f:62:44:a6:83:24:
4f:29:02:6d:a0:ba:18:2d:f4:cd:f0:24:69:c9:1e:
25:a2:69:c4:1b:17:4e:1e:59:5e:8f:49:a9:a6:65:
a3:51:5e:f9:71:ea:6b:22:95:4f:93:c1:5d:c7:8e:
c0:91:d4:cc:f9:c4:ac:db:aa:1f:23:b5:6d:70:cc:
07:44:30:5a:5c:79:30:d6:77:ec:20:9f:bc:98:fa:
92:92:42:06:44:68:36:31:b0:b3:4b:41:04:81:78:
38:d4:94:42:03:e4:32:65:fa:e0:cb:c8:b8:60:f6:
ff:db:98:d4:7b:9e:12:2b:5a:8b:97:5f:2e:2f:bd:
3a:d7:d7:1c:e6:41:80:59:a4:0b:1d:e0:71:d7:4f:
af:84:90:01:fb:c3:a9:20:1d:3d:7f:f4:8c:92:9e:
50:d9:96:39:40:08:f5:ec:42:0c:15:b5:44:76:e9:
15:db:56:a1:c8:d0:77:b6:da:64:a2:36:28:a6:43:
15:05:81:62:80:ba:af:93:30:69:77:3e:ce:a6:08:
ab:ac:42:4a:ec:8b:4b:c2:27:a4:d2:a2:e9:83:d5:
5f:1f:c8:bb:fa:79:93:ad:14:fe:9a:64:da:68:6c:
48:26:38:de:d3:63:b1:8e:75:33:24:81:ad:82:5f:
7d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D8:AC:1A:4A:4F:29:9A:1D:B8:D9:E3:79:36:1E:C8:45:3F:D4:57
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e31392e302f32342d3332203d3e203538333432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.19.0/24
Signature Algorithm: sha256WithRSAEncryption
71:0b:8e:d1:e2:25:ef:18:22:7b:1f:44:ac:b8:70:39:97:eb:
b4:27:e3:04:58:b2:21:b5:f9:3d:ef:30:70:d6:14:db:9c:81:
e6:3a:fc:44:26:b1:f6:18:b6:2a:b5:56:96:f9:e8:d0:6d:d6:
40:4d:bf:c6:6b:d1:a3:a7:f2:8b:ca:63:81:ba:aa:02:28:e9:
15:e0:1d:9e:db:b4:08:ea:5c:07:b5:c0:ab:5f:1d:04:51:a3:
96:02:2f:4f:4c:c2:b0:c1:71:9c:c2:dc:ba:11:40:f8:b1:1d:
9e:0d:27:8f:4a:4a:3f:c5:27:4c:fe:82:97:04:5a:f9:5a:55:
a5:9a:db:25:2e:13:85:86:e1:9f:bc:a8:d2:65:74:d1:c3:1b:
64:40:56:db:04:7c:85:3c:78:e1:1e:2c:b4:2f:42:9a:87:44:
c1:29:23:a6:5d:05:ec:a9:98:78:66:96:ee:4a:5b:ca:95:d6:
4e:9b:6c:cc:f1:c4:82:67:7c:05:54:76:4c:0a:6f:77:42:5c:
3e:c8:a0:3d:bf:b9:9a:02:dd:f9:7c:06:11:1f:d0:08:73:4c:
2d:c5:23:a5:07:cb:f2:69:fd:77:68:7a:ed:cb:96:e7:f2:26:
3b:50:30:ad:46:ab:b2:63:8c:ba:d7:77:3f:b2:1f:31:58:6c:
e9:b0:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:38:02 2026 by rpki-client