Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136312e302f32342d3234203d3e20343032323838.roa
File: 3138362e3234312e3136312e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier: LYc1K1fRsTaLStMB9Wo4JDtClJQx29mSmJuEIMu6Rsw=
Subject key identifier: 7B:32:F5:9C:E3:D7:0B:41:23:F9:82:80:DA:66:27:AF:C6:06:9B:03
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 1877A1150DF7DB4345D135C3CF25ED9465A6C394
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136312e302f32342d3234203d3e20343032323838.roa
Signing time: Wed 22 Jul 2026 15:05:25 +0000
ROA not before: Wed 22 Jul 2026 15:00:25 +0000
ROA not after: Wed 21 Jul 2027 15:05:25 +0000
asID: 402288
IP address blocks: 186.241.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:77:a1:15:0d:f7:db:43:45:d1:35:c3:cf:25:ed:94:65:a6:c3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 15:00:25 2026 GMT
Not After : Jul 21 15:05:25 2027 GMT
Subject: CN=7B32F59CE3D70B4123F98280DA6627AFC6069B03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:db:f4:66:4a:3f:b7:d8:b2:86:4b:76:91:
fb:d1:68:03:61:23:97:d7:b5:9f:dd:69:02:0c:19:
a9:97:4d:fc:08:2f:1b:a6:e5:75:03:09:dc:72:d1:
27:05:cc:5d:f2:d5:21:05:19:d1:de:74:6b:6f:83:
dd:ea:f9:ed:07:e5:c5:04:90:c0:29:af:58:5a:aa:
33:04:79:45:12:87:f5:98:06:20:09:8a:98:aa:99:
d3:5d:ec:10:01:06:9e:e5:d8:77:e4:d0:4f:e3:27:
52:2f:82:cd:8e:19:0b:01:59:3c:48:91:34:75:b0:
9c:51:af:7c:56:e0:d7:b1:59:3c:f1:44:3c:25:67:
bb:94:b0:ef:7d:cc:d0:04:29:21:90:76:ee:e0:b2:
54:cd:73:cf:a4:8e:82:4d:d5:e5:ef:66:10:98:bc:
c4:de:3f:4c:f7:c6:95:b8:69:5e:65:f3:02:f7:ea:
e9:d6:8a:1e:e7:d2:82:82:d7:48:78:17:7a:87:db:
9b:24:ba:7c:16:30:04:89:5b:b5:46:68:af:be:72:
06:a2:9c:cb:38:bb:da:8b:69:7a:b4:e5:6b:9c:04:
5c:00:ef:9d:46:d3:73:00:29:6c:69:f4:63:dc:d2:
36:3b:11:15:61:c7:50:90:a4:aa:bd:e3:f0:b1:75:
ba:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:32:F5:9C:E3:D7:0B:41:23:F9:82:80:DA:66:27:AF:C6:06:9B:03
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136312e302f32342d3234203d3e20343032323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.161.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b1:b2:ce:a3:95:c5:4c:70:8d:12:3a:7a:3b:4e:fa:35:b1:
0a:61:42:40:12:b9:a0:4e:7b:1d:28:4e:da:c8:f0:6e:fc:28:
a8:79:f9:db:11:6a:99:da:bd:39:21:57:db:4d:36:6a:de:8b:
48:86:d3:c2:7a:ee:2f:2a:a2:3d:48:98:f5:25:3d:52:6d:95:
b6:8c:6b:8a:8b:83:ff:3b:24:a8:58:b7:a0:f9:3b:49:53:95:
a4:95:b3:3e:2b:46:03:de:07:42:01:f1:c5:ee:3e:a4:a9:c9:
b1:6b:ed:13:ae:87:f9:59:97:16:7e:eb:b4:d7:43:25:6e:0c:
1c:5a:93:ae:7a:96:0e:55:f8:1f:af:86:dd:a6:8e:bd:be:a4:
44:c3:fd:6c:cb:90:2d:6b:96:4c:cb:66:8b:ec:72:a0:c7:5b:
d5:41:ba:dd:e9:47:14:56:a1:2c:4a:4c:c6:fb:12:40:f0:2a:
ef:8f:19:e5:ee:00:a7:a9:cc:b7:cc:11:d6:86:d2:07:19:73:
aa:01:72:b1:f4:07:8c:16:81:c0:90:e7:19:08:f3:f8:c6:ef:
fc:83:6e:d6:d9:7e:74:ee:14:33:9c:4b:fe:30:2d:3a:f6:c2:
f8:1f:cb:c5:6d:f5:33:78:40:2d:2c:b1:a2:b2:11:a5:dd:7f:
78:bc:b3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:54:12 2026 by rpki-client