Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137372e302f32342d3234203d3e20313431373839.roa
File: 3138362e3234312e3137372e302f32342d3234203d3e20313431373839.roa (raw, json)
Hash identifier: YijXEHNvYmZOyi1ifOWfq0I7tfpdpaEo0LQNdL+aG7k=
Subject key identifier: 08:F6:D7:DC:36:89:A9:FC:79:3E:D1:14:1D:6E:AA:12:77:43:11:D5
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 6E1A10E89880C2E91B5FDEE6987889689A6FD5
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137372e302f32342d3234203d3e20313431373839.roa
Signing time: Fri 17 Jul 2026 11:55:11 +0000
ROA not before: Fri 17 Jul 2026 11:50:11 +0000
ROA not after: Fri 16 Jul 2027 11:55:11 +0000
asID: 141789
IP address blocks: 186.241.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:1a:10:e8:98:80:c2:e9:1b:5f:de:e6:98:78:89:68:9a:6f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 17 11:50:11 2026 GMT
Not After : Jul 16 11:55:11 2027 GMT
Subject: CN=08F6D7DC3689A9FC793ED1141D6EAA12774311D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:a7:12:99:d5:90:e4:2e:99:6e:a9:06:e1:
3a:0d:76:f4:0c:e9:79:4a:c7:f5:c6:96:66:f7:7d:
3e:f4:04:88:e0:0f:7e:d7:99:e6:49:74:20:27:fe:
bc:f1:41:33:2e:c9:4f:fc:f9:9c:be:85:1d:f0:33:
b0:37:2a:ed:15:27:f1:c5:c9:46:9e:ec:96:74:f3:
1d:c1:b9:8a:71:24:02:32:13:55:46:f9:33:8e:e9:
e8:68:c9:f3:fb:dd:d9:65:8f:e8:fd:15:f3:be:4a:
70:52:75:ae:81:86:c4:58:1c:9d:ae:63:66:e8:43:
ca:f7:7b:b2:51:f4:2c:b7:e2:a1:f4:bb:39:ea:6c:
52:02:2f:c0:19:7c:6c:05:6e:fb:4d:d4:1f:0e:4e:
db:02:16:df:21:07:e1:8f:50:4d:6e:08:2a:b0:5c:
f9:ed:e0:3c:ec:e9:f7:69:00:bd:57:43:4b:09:e5:
83:53:f9:d7:9e:1c:72:b0:ca:64:14:32:cd:41:25:
82:bd:68:bc:d8:01:6e:a6:d3:ec:fe:ec:19:5d:9b:
72:7a:c2:60:9e:74:1d:93:a9:5f:35:db:13:92:90:
05:3d:1f:77:ff:2d:20:69:cd:17:2e:aa:f3:24:d9:
ac:d7:df:6d:4b:0f:59:3d:0e:2e:aa:13:68:7d:79:
5a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F6:D7:DC:36:89:A9:FC:79:3E:D1:14:1D:6E:AA:12:77:43:11:D5
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137372e302f32342d3234203d3e20313431373839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.177.0/24
Signature Algorithm: sha256WithRSAEncryption
76:4a:cf:48:e1:e9:bc:e1:a3:ac:f7:b1:e4:cb:9f:33:8f:45:
03:be:c4:f9:9b:92:4a:07:ac:14:d8:ee:80:35:2d:6b:f8:06:
fc:44:bc:20:8e:07:dc:02:b1:9a:1d:c1:67:7d:a1:5e:e6:b4:
ac:0f:3c:b1:e1:53:c0:bf:d6:03:c9:dd:40:71:d0:c9:86:f0:
5f:74:d8:e4:8e:f6:90:a5:78:0c:28:1c:3e:bc:b7:10:af:1d:
ee:e7:23:0f:cf:b8:95:25:4e:6f:8d:40:86:f7:49:f6:20:63:
62:52:d8:44:bc:8e:71:fa:bd:71:b9:b5:b3:b6:07:e2:0b:18:
55:c4:ed:d6:94:e5:5d:3b:f2:48:b6:36:e6:5a:c3:f0:4e:95:
ce:32:24:77:bf:ca:22:f4:db:68:4c:9e:d5:ef:13:22:76:b1:
bf:ce:48:59:12:78:0a:ea:a1:ce:b7:69:0b:a5:d8:c8:8f:e7:
3c:50:1a:ce:ec:46:1e:cb:5d:0d:68:1e:1d:22:bb:2f:e6:3c:
a1:6f:e2:bc:61:63:f2:c5:1e:47:b7:50:2a:73:21:ff:dd:ae:
1e:87:9d:e1:7a:60:95:48:b1:a1:29:86:c9:88:7b:b0:54:0f:
c7:f1:83:f4:0c:f1:81:a6:64:40:15:13:ec:4b:41:77:1d:72:
d2:1b:e1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:23:59 2026 by rpki-client