Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136352e302f32342d3234203d3e20333939333539.roa
File: 3138362e3234312e3136352e302f32342d3234203d3e20333939333539.roa (raw, json)
Hash identifier: fNpEUML+I1M88y1lkIEe0Ba5RCrFMWYc2op01wBl+qg=
Subject key identifier: 97:71:6C:5F:B3:1D:56:29:B3:12:C8:34:47:A3:51:5C:DA:B6:01:58
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 2B8D69110167D36AA174DD490B8745472FC764EE
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136352e302f32342d3234203d3e20333939333539.roa
Signing time: Wed 22 Jul 2026 15:06:39 +0000
ROA not before: Wed 22 Jul 2026 15:01:39 +0000
ROA not after: Wed 21 Jul 2027 15:06:39 +0000
asID: 399359
IP address blocks: 186.241.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:8d:69:11:01:67:d3:6a:a1:74:dd:49:0b:87:45:47:2f:c7:64:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 22 15:01:39 2026 GMT
Not After : Jul 21 15:06:39 2027 GMT
Subject: CN=97716C5FB31D5629B312C83447A3515CDAB60158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:24:80:40:fe:52:bd:39:06:9c:be:f5:1d:
17:4c:17:b9:fe:16:d1:85:13:d5:36:08:11:f5:ce:
ea:23:33:5d:07:fd:26:60:4f:64:f3:de:8e:40:08:
30:4a:2e:43:b3:5b:7f:02:a2:ca:6a:a2:71:13:f2:
2c:8a:ee:14:dd:c6:db:5c:10:71:65:16:74:35:56:
03:27:2b:5d:ba:a1:45:3a:74:e4:f2:2b:75:41:bf:
c5:bd:47:25:05:27:60:4f:cc:3e:b2:d1:a4:bd:5e:
f9:94:fd:af:59:d7:be:c6:09:10:ac:f7:75:b5:37:
05:03:60:ff:8d:60:44:88:f8:c9:30:bf:60:a1:de:
b0:54:75:bf:f4:ac:64:f5:84:0d:5d:55:7a:ef:ce:
d3:5f:87:7b:d5:75:67:84:24:56:17:64:cc:8d:17:
cd:c9:84:79:2a:18:c0:85:5d:ff:9e:af:5b:72:16:
e1:23:a1:d6:49:27:40:f4:90:54:e7:10:f7:58:32:
08:3e:8a:4b:88:a7:ae:65:a6:28:84:94:ba:d1:3a:
db:bf:99:13:70:ad:87:ab:ce:32:3a:c0:ef:ce:d6:
95:00:14:a6:b9:a5:a3:36:f1:69:0e:5a:e1:0b:18:
8d:3a:e8:87:4a:dc:2c:ff:32:f8:4e:bf:b5:2d:40:
2e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:71:6C:5F:B3:1D:56:29:B3:12:C8:34:47:A3:51:5C:DA:B6:01:58
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136352e302f32342d3234203d3e20333939333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.165.0/24
Signature Algorithm: sha256WithRSAEncryption
54:05:74:15:4d:48:fd:85:99:4e:9a:08:41:f8:57:82:e7:d7:
23:95:d0:4c:80:63:14:ff:64:33:0f:39:02:80:7d:1a:14:df:
bf:ef:83:53:4b:9b:75:90:e5:09:0c:ef:36:8f:39:68:d7:dd:
28:d5:09:c7:6f:46:6a:0e:d9:3b:cd:d0:69:69:30:e4:e3:38:
11:ff:6d:00:7b:01:6e:8f:df:7d:d7:64:ca:81:ba:79:8a:5e:
84:73:96:3f:74:bc:86:8d:5f:b2:0f:0f:b9:ab:62:3c:7c:ff:
86:44:cc:5b:76:d6:55:93:d0:bd:de:17:c4:88:d1:d4:8b:63:
aa:f4:dd:b5:86:0d:9e:8c:fb:41:a8:49:07:6a:67:db:e2:a6:
d1:3e:db:6c:e8:c0:94:20:c8:ff:f3:a9:63:5d:a2:6d:13:6d:
da:ad:bf:f3:42:98:ef:60:a9:09:0a:4d:17:25:00:d5:67:a2:
c0:09:4b:83:28:67:46:27:b4:66:63:0f:3f:6c:fe:d8:b8:cd:
63:43:db:ac:21:6c:39:ba:f7:07:a6:41:7f:21:84:10:6f:de:
eb:55:7f:cb:47:68:b6:4f:2c:e0:92:fa:12:b5:a5:f1:a3:e4:
54:5d:b8:ce:d2:45:b0:47:a3:85:00:1f:7d:0b:7e:f2:35:5a:
16:bf:6e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:51:38 2026 by rpki-client