Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e3232352e302f32342d3234203d3e203630333236.roa
File: 3137372e3137372e3232352e302f32342d3234203d3e203630333236.roa (raw, json)
Hash identifier: Mq/JzSvGU5lIzO/TaOmEgCjy319Aw/U4Udxf9FpuSFA=
Subject key identifier: 12:A4:66:A9:B9:B5:E2:5E:8D:0C:BE:04:1D:55:49:A9:44:1E:07:4F
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 76EB3F7F30FBD193B0BB7D2CF3444BF8EDB853DE
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e3232352e302f32342d3234203d3e203630333236.roa
Signing time: Fri 11 Sep 2026 13:06:24 +0000
ROA not before: Fri 11 Sep 2026 13:01:24 +0000
ROA not after: Fri 10 Sep 2027 13:06:24 +0000
asID: 60326
IP address blocks: 177.177.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:eb:3f:7f:30:fb:d1:93:b0:bb:7d:2c:f3:44:4b:f8:ed:b8:53:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 13:01:24 2026 GMT
Not After : Sep 10 13:06:24 2027 GMT
Subject: CN=12A466A9B9B5E25E8D0CBE041D5549A9441E074F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:6e:78:b9:da:7e:92:f5:b2:92:47:52:03:
45:00:6b:51:96:a3:ac:30:cc:62:22:ed:63:a4:90:
9a:a5:0d:b1:e6:02:57:d9:58:20:ab:c3:4e:23:8a:
ce:3b:a0:54:f8:57:41:c7:c0:76:5e:99:c2:1c:bb:
b2:c0:33:f3:30:2f:45:b9:eb:94:d2:0e:6e:f4:b2:
e2:4c:af:6d:d7:0a:c5:72:09:b4:5b:d9:76:38:90:
7e:3a:bb:d8:4b:64:d1:9c:d5:a9:33:0a:16:fd:d2:
a1:bb:89:35:1e:d0:3e:20:fe:d2:9d:f2:a0:61:ed:
fa:61:da:56:11:5d:82:53:09:d1:ae:a1:86:32:ca:
fe:9d:42:5e:a9:38:42:75:54:20:b5:51:ed:d2:d9:
84:ce:78:cb:9b:56:1f:9f:b7:54:08:c4:e8:0a:15:
61:c8:56:0f:6f:16:46:62:8a:74:5d:e3:bd:a5:4d:
16:9e:0c:06:f1:4e:6a:39:d3:f6:29:8c:0b:f1:f6:
70:90:97:82:47:1d:05:cc:fc:e4:6e:78:7e:b5:db:
2f:16:26:59:d4:d3:73:21:be:19:bf:8f:f7:cb:79:
bf:b8:c8:72:ae:83:2e:99:0a:85:21:db:3c:37:8a:
e1:fd:ff:ed:a7:e0:bd:34:af:dc:43:d6:a3:2c:c3:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A4:66:A9:B9:B5:E2:5E:8D:0C:BE:04:1D:55:49:A9:44:1E:07:4F
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e3232352e302f32342d3234203d3e203630333236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.225.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:c4:f4:69:43:38:70:f1:87:be:06:a5:c0:7d:c4:20:3e:eb:
2f:35:4b:d0:e4:46:cc:05:13:9f:5c:25:6c:40:cf:d6:4b:6f:
50:ec:74:18:bf:bd:65:57:ef:f7:c8:29:ef:a1:d2:80:1d:44:
34:a9:dd:8d:fe:3d:7a:41:54:41:f4:9f:d5:3c:6d:bc:7b:25:
ab:e7:f4:70:90:7a:60:70:3c:af:60:f7:cc:5e:c3:5e:58:51:
77:a5:71:71:da:7f:66:0c:a5:b7:f9:cb:17:5b:9e:e3:d1:00:
4f:06:dc:cc:23:65:c8:ed:c9:9f:4b:03:62:1a:40:50:cd:b4:
e2:dd:3c:d8:d2:21:a6:82:ec:e6:bf:00:87:81:39:42:38:06:
2a:57:5e:60:25:17:5d:f6:c4:62:c1:1e:09:66:c1:96:8c:c7:
c9:24:16:78:92:6a:70:5f:85:2f:d1:23:aa:48:72:3b:40:59:
7c:9e:48:9e:42:c6:0d:a9:77:9a:73:9c:9e:7e:c6:b7:81:47:
3b:3a:44:ce:1f:d7:f8:b7:91:6c:99:57:26:75:7e:d8:d2:df:
f8:3c:cd:20:05:c5:cc:68:b2:7d:c6:e8:e8:90:b0:72:05:2b:
80:da:91:cd:b5:8f:90:15:6e:b7:7e:e5:57:bd:79:ac:5b:bc:
cf:ad:0d:03
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUdus/fzD70ZOwu30s80RL+O24U94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA5MTExMzAxMjRaFw0yNzA5MTAxMzA2MjRaMDMxMTAvBgNV
BAMTKDEyQTQ2NkE5QjlCNUUyNUU4RDBDQkUwNDFENTU0OUE5NDQxRTA3NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zG54udp+kvWykkdSA0UAa1GW
o6wwzGIi7WOkkJqlDbHmAlfZWCCrw04jis47oFT4V0HHwHZemcIcu7LAM/MwL0W5
65TSDm70suJMr23XCsVyCbRb2XY4kH46u9hLZNGc1akzChb90qG7iTUe0D4g/tKd
8qBh7fph2lYRXYJTCdGuoYYyyv6dQl6pOEJ1VCC1Ue3S2YTOeMubVh+ft1QIxOgK
FWHIVg9vFkZiinRd472lTRaeDAbxTmo50/YpjAvx9nCQl4JHHQXM/ORueH612y8W
JlnU03Mhvhm/j/fLeb+4yHKugy6ZCoUh2zw3iuH9/+2n4L00r9xD1qMswxGnAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUEqRmqbm14l6NDL4EHVVJqUQeB08wHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzEzNzM3MmUzMTM3MzcyZTMy
MzIzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzAzMzMyMzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACxseEwDQYJKoZIhvcNAQELBQADggEBALHE9GlDOHDxh74GpcB9xCA+6y81S9Dk
RswFE59cJWxAz9ZLb1DsdBi/vWVX7/fIKe+h0oAdRDSp3Y3+PXpBVEH0n9U8bbx7
Javn9HCQemBwPK9g98xew15YUXelcXHaf2YMpbf5yxdbnuPRAE8G3MwjZcjtyZ9L
A2IaQFDNtOLdPNjSIaaC7Oa/AIeBOUI4BipXXmAlF132xGLBHglmwZaMx8kkFniS
anBfhS/RI6pIcjtAWXyeSJ5Cxg2pd5pznJ5+xreBRzs6RM4f1/i3kWyZVyZ1ftjS
3/g8zSAFxcxosn3G6OiQsHIFK4Dakc21j5AVbrd+5Ve9eaxbvM+tDQM=
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:01:37 2026 by rpki-client