Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136302e302f32342d3234203d3e20313532383638.roa
File: 3138362e3234312e3136302e302f32342d3234203d3e20313532383638.roa (raw, json)
Hash identifier: DjtgcNLNA7fpKxmaRB7w5/aHJ6GA993KlN88jVRoITI=
Subject key identifier: F1:2C:5B:77:06:DB:B6:EE:54:6F:62:74:2E:E2:5A:FC:40:04:3D:D6
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 3F6BB4D5B6F2064C668533197EC0465A6E9C7834
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136302e302f32342d3234203d3e20313532383638.roa
Signing time: Thu 23 Jul 2026 13:35:42 +0000
ROA not before: Thu 23 Jul 2026 13:30:42 +0000
ROA not after: Thu 22 Jul 2027 13:35:42 +0000
asID: 152868
IP address blocks: 186.241.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:6b:b4:d5:b6:f2:06:4c:66:85:33:19:7e:c0:46:5a:6e:9c:78:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 23 13:30:42 2026 GMT
Not After : Jul 22 13:35:42 2027 GMT
Subject: CN=F12C5B7706DBB6EE546F62742EE25AFC40043DD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:5a:fc:e0:79:bd:97:24:2f:bb:24:4a:4a:
91:69:db:a3:32:5e:56:82:ff:aa:e3:56:d3:97:42:
e1:39:fb:5a:67:8a:7a:e2:9e:96:5c:ca:f8:ab:bd:
87:65:4b:9b:44:5a:d2:53:3b:5b:8b:b0:e1:f9:5d:
40:8a:4b:96:b2:78:1e:e7:9c:9a:75:e1:41:c5:cf:
40:cd:20:42:68:b6:0b:ae:2f:4a:c2:da:24:3d:f2:
74:17:ed:60:5d:ee:04:50:57:e0:6f:6b:68:a2:c0:
b2:54:c9:ec:5d:d5:87:94:f1:37:1f:a0:c6:d2:38:
22:e1:58:0c:2c:0d:1c:eb:12:d6:c7:f1:73:de:72:
00:97:db:e0:35:85:21:17:79:bc:0c:d8:58:7f:b8:
59:46:1b:2b:0c:ad:aa:34:d3:42:4c:ca:2e:43:75:
22:fd:51:47:dc:86:60:0f:92:a8:48:96:e5:ba:58:
87:d3:f1:16:87:26:91:90:98:91:69:5c:51:83:7b:
9a:1d:d5:02:b2:e6:6a:5c:21:3c:77:3d:92:72:be:
67:74:a8:98:fe:00:52:18:9d:a2:03:36:18:b9:ad:
2d:cc:0a:0a:4a:07:aa:30:f3:4c:38:94:7f:8f:36:
b9:0b:b3:48:fe:e9:63:fa:4d:bb:62:d0:89:8d:48:
06:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2C:5B:77:06:DB:B6:EE:54:6F:62:74:2E:E2:5A:FC:40:04:3D:D6
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136302e302f32342d3234203d3e20313532383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.160.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ec:23:cc:16:ef:17:1b:c9:4c:a2:35:06:72:2f:19:69:74:
64:6e:f9:20:29:e4:1d:2f:72:0a:05:1d:50:fd:44:ea:f0:27:
0c:95:ca:b0:0a:98:48:3a:2c:e9:02:4e:0c:93:25:a6:38:de:
e7:04:61:17:b5:93:58:20:d6:35:4b:cf:32:b0:5c:12:df:b8:
3c:e8:eb:84:a8:aa:38:6b:9e:65:9a:bb:9b:a4:a5:93:83:96:
9e:c1:d3:9a:e6:34:21:d4:6f:0a:66:3e:77:52:e3:72:a7:7f:
8f:46:00:14:26:30:cb:ed:ee:db:09:50:19:e0:21:99:9b:1e:
f3:e8:95:ca:60:44:74:d2:34:80:72:9d:86:cc:e2:0f:76:13:
48:ba:0e:45:0e:9b:f0:6b:3b:c3:0c:17:40:a4:97:58:e1:35:
25:e8:17:c9:5a:af:2c:3b:3d:38:30:75:25:93:ff:f3:db:cb:
52:fe:19:e7:52:44:b0:f1:33:99:3a:ae:5d:9c:d1:73:1d:1f:
75:f9:4f:1e:30:9f:d3:f5:60:0a:22:2f:50:4d:a6:c4:49:70:
c4:55:26:73:3d:e1:0c:77:63:e7:80:99:0a:46:28:7e:3b:7c:
b3:f5:8f:31:42:6d:ea:6c:58:05:f2:ab:1b:9f:2a:c7:aa:2d:
51:f5:9f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:46:32 2026 by rpki-client