Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137392e302f32342d3234203d3e20313336373235.roa
File: 3138362e3234312e3137392e302f32342d3234203d3e20313336373235.roa (raw, json)
Hash identifier: DVWZhS6lamFVK1DgWNmlwdC7WQm3FUpWroRYqq3Q8KQ=
Subject key identifier: 0B:AC:70:4A:0B:BD:A7:FA:92:E4:24:34:0F:B0:45:7B:16:2F:86:7D
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 3D3254369E19D6658576ABD93316EBCF75F97490
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137392e302f32342d3234203d3e20313336373235.roa
Signing time: Thu 23 Jul 2026 09:11:56 +0000
ROA not before: Thu 23 Jul 2026 09:06:56 +0000
ROA not after: Thu 22 Jul 2027 09:11:56 +0000
asID: 136725
IP address blocks: 186.241.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:32:54:36:9e:19:d6:65:85:76:ab:d9:33:16:eb:cf:75:f9:74:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 23 09:06:56 2026 GMT
Not After : Jul 22 09:11:56 2027 GMT
Subject: CN=0BAC704A0BBDA7FA92E424340FB0457B162F867D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:c8:d3:d7:c9:0e:1f:df:b8:16:ed:c0:a3:
55:7c:f5:5e:33:fc:7b:33:c2:85:8e:6b:e7:ab:b0:
f3:bf:76:ef:1d:10:51:99:6d:29:62:a1:68:16:6b:
e2:11:6e:88:95:86:0c:54:eb:7a:75:01:29:19:cc:
e6:25:26:26:b3:9d:de:a9:0c:c0:6c:64:ec:6a:2b:
dd:a5:e4:93:c3:45:48:9d:c4:1c:f2:69:20:8c:5e:
f3:63:56:f8:de:c4:50:94:ba:4b:f6:6b:b7:3e:76:
dd:8b:50:23:e7:01:71:97:0d:ea:64:a8:52:76:a4:
99:80:df:49:44:05:29:85:14:6e:86:64:ec:27:95:
24:58:8f:da:88:d4:84:bd:79:b9:e6:b9:88:1c:39:
52:6e:b3:4b:49:b4:34:72:b9:95:42:d2:54:89:7d:
72:d4:96:16:ad:31:65:06:47:87:3b:a1:ee:88:75:
a0:07:00:93:2e:d5:74:82:0b:bc:55:76:c5:8e:d3:
31:38:15:a6:d6:cf:68:ab:20:30:c2:ea:15:11:a5:
43:ab:d8:35:de:28:6f:d5:90:ed:98:21:fb:8a:0f:
3c:48:46:b2:5a:86:8a:6e:d6:ce:d8:2c:26:77:45:
6f:7f:84:9b:31:39:76:c8:04:f9:e0:3b:13:b3:b4:
53:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AC:70:4A:0B:BD:A7:FA:92:E4:24:34:0F:B0:45:7B:16:2F:86:7D
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137392e302f32342d3234203d3e20313336373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.179.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c4:ca:39:22:cd:4a:57:43:45:01:46:61:14:dc:bf:72:83:
17:f8:90:2c:39:35:92:59:58:05:4d:42:d0:35:22:d4:3f:1f:
d3:ed:3e:22:39:c5:88:ad:61:2f:7b:ac:a1:b3:4e:fa:43:cd:
52:cf:f5:a2:de:10:0d:db:df:36:13:84:0b:05:65:07:90:ab:
80:d4:fa:2f:2f:67:fb:5b:c6:af:50:44:27:b7:e0:0d:8c:6b:
37:2d:2f:f0:52:11:7a:a9:bf:e5:d1:2d:0e:40:91:aa:50:ba:
96:7f:51:8e:12:08:4e:16:e3:25:0a:63:b4:d4:2a:5c:4d:d2:
2d:b8:53:48:7a:54:ee:98:b3:36:a8:30:34:6c:3c:28:16:2f:
fe:fb:c4:e4:92:56:4b:dc:15:9c:b3:cf:ea:fc:8c:31:7e:b4:
34:7e:ed:10:7d:d5:15:46:5f:e9:53:5b:73:f2:a5:80:11:ca:
2f:42:2a:57:dc:41:19:b9:bf:d0:40:de:a0:67:5f:db:7b:fc:
84:4c:38:6d:39:1f:27:ea:ae:37:07:03:75:5e:c0:7d:d7:b4:
74:4f:ee:ac:38:54:1e:fe:1b:80:0a:ef:85:77:58:ab:82:47:
31:b8:b6:6d:34:e0:d7:89:83:f7:fc:47:fc:6f:a2:2d:76:b9:
8e:dc:dc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:49:23 2026 by rpki-client