Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e372e302f32342d3332203d3e203530303639.roa
File: 3137372e3137372e372e302f32342d3332203d3e203530303639.roa (raw, json)
Hash identifier: UDM9uAdn5LfzILf/mJRfKDKeql8VK1sk34KeXiw7cEI=
Subject key identifier: 01:2A:AE:F3:80:77:06:33:23:78:AB:E7:0F:AE:C3:64:05:34:99:EC
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 36D7F7402EF9B1BB43DFDB28C73403114C2ADB78
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e372e302f32342d3332203d3e203530303639.roa
Signing time: Fri 11 Sep 2026 12:50:14 +0000
ROA not before: Fri 11 Sep 2026 12:45:14 +0000
ROA not after: Fri 10 Sep 2027 12:50:14 +0000
asID: 50069
IP address blocks: 177.177.7.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:d7:f7:40:2e:f9:b1:bb:43:df:db:28:c7:34:03:11:4c:2a:db:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 11 12:45:14 2026 GMT
Not After : Sep 10 12:50:14 2027 GMT
Subject: CN=012AAEF3807706332378ABE70FAEC364053499EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:d2:bb:96:e7:23:4b:3b:15:4a:7a:54:87:
9d:c4:5e:23:76:7d:6e:16:0a:02:23:47:8a:11:88:
1d:2c:fc:4d:21:d3:70:5b:e2:3d:7a:2a:76:51:ee:
d6:36:48:8c:cd:78:e1:e3:76:8b:20:19:58:90:21:
1b:1f:db:69:96:58:72:04:e6:76:32:02:ab:a2:e8:
e7:b7:4e:4f:d8:8b:94:b6:29:4a:bd:4a:68:8a:3e:
53:7d:57:f7:d7:90:09:49:91:a7:f0:87:cf:cd:c9:
e4:76:1a:6d:91:99:9f:e6:e0:d0:b2:df:18:f6:5f:
16:1f:8d:f5:37:4f:f6:75:f3:36:67:17:64:70:9e:
d5:db:ae:f4:f1:60:d8:4d:66:d8:e1:1d:8f:b4:ce:
92:de:39:bf:e8:b1:0a:0a:dc:77:c2:cc:20:0d:57:
4e:d6:8f:08:e5:a7:87:f9:f4:c1:e8:19:74:ca:af:
b0:59:3f:41:ed:f0:2e:03:5e:f7:91:f7:5b:c8:64:
10:c1:69:ac:64:12:8c:b4:bb:ac:c9:17:47:08:b7:
a0:c5:6c:0f:16:f7:a4:42:42:98:b0:d1:fb:d0:be:
34:e8:1a:a0:e8:fc:18:80:80:af:9a:f1:59:f6:03:
5a:8d:89:16:5b:ee:af:64:86:52:56:69:1d:ff:f2:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2A:AE:F3:80:77:06:33:23:78:AB:E7:0F:AE:C3:64:05:34:99:EC
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e372e302f32342d3332203d3e203530303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.7.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:37:98:91:eb:df:d8:94:d7:22:3b:e6:9a:b4:d3:dd:08:d3:
c4:90:ea:ee:71:a5:53:15:ba:23:b5:5e:6d:99:09:ed:04:89:
e9:5e:f3:bd:2c:ea:3d:f3:f1:fb:97:00:32:97:3f:c7:f0:20:
fe:91:55:3b:9b:d7:20:da:65:e3:e3:5e:aa:18:ff:1e:8a:e9:
36:57:ea:fd:31:61:25:67:0e:97:74:6d:0e:5f:9b:ed:9e:e5:
bf:f6:58:05:44:09:ff:2c:ac:2f:2f:dd:c2:96:43:2c:8d:1c:
3a:df:9a:27:ee:4e:7f:d8:89:1a:eb:18:75:5f:cf:cc:08:1a:
f4:b5:f9:cb:d1:69:c0:0c:69:85:47:60:65:64:70:28:c4:d1:
89:e7:93:d0:20:2e:5f:73:81:32:54:6b:d2:7e:ec:e5:e1:b6:
ae:a7:db:9f:f5:c4:a3:b3:29:44:e3:11:e9:34:61:fc:6d:df:
cb:2c:54:06:79:1b:12:96:63:ae:1b:e5:60:89:9b:ee:ab:57:
c5:5b:58:f1:28:27:72:04:29:8c:6e:5c:f7:9e:62:0e:97:37:
a4:6e:64:82:c9:da:53:50:bb:19:3f:9b:d4:a3:cb:0b:9b:4a:
de:5c:d0:22:92:6c:42:b3:f7:54:ba:57:e2:a8:73:f5:d4:28:
96:f4:b2:87
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUNtf3QC75sbtD39soxzQDEUwq23gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA5MTExMjQ1MTRaFw0yNzA5MTAxMjUwMTRaMDMxMTAvBgNV
BAMTKDAxMkFBRUYzODA3NzA2MzMyMzc4QUJFNzBGQUVDMzY0MDUzNDk5RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrC9K7lucjSzsVSnpUh53EXiN2
fW4WCgIjR4oRiB0s/E0h03Bb4j16KnZR7tY2SIzNeOHjdosgGViQIRsf22mWWHIE
5nYyAqui6Oe3Tk/Yi5S2KUq9SmiKPlN9V/fXkAlJkafwh8/NyeR2Gm2RmZ/m4NCy
3xj2XxYfjfU3T/Z18zZnF2RwntXbrvTxYNhNZtjhHY+0zpLeOb/osQoK3HfCzCAN
V07Wjwjlp4f59MHoGXTKr7BZP0Ht8C4DXveR91vIZBDBaaxkEoy0u6zJF0cIt6DF
bA8W96RCQpiw0fvQvjToGqDo/BiAgK+a8Vn2A1qNiRZb7q9khlJWaR3/8tWNAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUASqu84B3BjMjeKvnD67DZAU0mewwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzEzNzM3MmUzMTM3MzcyZTM3
MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMDMwMzYzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALGx
BzANBgkqhkiG9w0BAQsFAAOCAQEAnjeYkevf2JTXIjvmmrTT3QjTxJDq7nGlUxW6
I7VebZkJ7QSJ6V7zvSzqPfPx+5cAMpc/x/Ag/pFVO5vXINpl4+Neqhj/HorpNlfq
/TFhJWcOl3RtDl+b7Z7lv/ZYBUQJ/yysLy/dwpZDLI0cOt+aJ+5Of9iJGusYdV/P
zAga9LX5y9FpwAxphUdgZWRwKMTRieeT0CAuX3OBMlRr0n7s5eG2rqfbn/XEo7Mp
ROMR6TRh/G3fyyxUBnkbEpZjrhvlYImb7qtXxVtY8SgncgQpjG5c955iDpc3pG5k
gsnaU1C7GT+b1KPLC5tK3lzQIpJsQrP3VLpX4qhz9dQolvSyhw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:14:05 2026 by rpki-client