Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138312e302f32342d3234203d3e20313531383134.roa
File: 3138362e3234312e3138312e302f32342d3234203d3e20313531383134.roa (raw, json)
Hash identifier: /ncTZGSzToAMRT3HWqRruPjmJug6cmHGGHGnKdXp6LA=
Subject key identifier: 4A:EF:63:11:93:6A:EE:05:59:BB:3B:D1:CA:D4:DE:32:53:DA:4A:A4
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 6BBC52607480A8BC7645FEFBBFE8B58A2E533D4E
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138312e302f32342d3234203d3e20313531383134.roa
Signing time: Thu 23 Jul 2026 09:09:56 +0000
ROA not before: Thu 23 Jul 2026 09:04:56 +0000
ROA not after: Thu 22 Jul 2027 09:09:56 +0000
asID: 151814
IP address blocks: 186.241.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:bc:52:60:74:80:a8:bc:76:45:fe:fb:bf:e8:b5:8a:2e:53:3d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 23 09:04:56 2026 GMT
Not After : Jul 22 09:09:56 2027 GMT
Subject: CN=4AEF6311936AEE0559BB3BD1CAD4DE3253DA4AA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:6c:17:02:df:87:5b:72:2c:10:0a:8d:76:
cc:58:cc:fd:18:9c:44:95:80:12:ef:33:3f:a7:75:
ca:bb:3a:31:b7:ea:53:8c:97:6b:97:15:d1:40:41:
79:f3:2b:9c:c5:0a:6f:23:7e:e1:f8:18:9f:55:9f:
5e:f2:2a:4c:41:a9:6b:90:28:b5:19:f5:d3:09:fe:
e7:8b:2a:09:d7:58:41:fa:47:d7:96:5f:30:14:78:
da:44:05:c2:22:b8:ec:cf:9f:f3:9c:ee:00:33:48:
d7:10:4a:1a:8f:08:3c:a1:26:65:0e:94:fa:e3:81:
ec:f3:cf:f9:44:5d:be:f8:d1:4f:19:2c:bf:15:a8:
4b:3a:ce:f1:45:da:9d:ca:80:a1:83:b7:fd:ed:bf:
cd:80:5a:7a:e1:6e:b2:30:ef:59:59:e4:bf:f4:da:
79:7e:24:ad:3e:cc:dc:7c:1f:a3:96:12:4f:f5:9a:
d3:f2:95:7d:09:89:1b:3f:df:02:82:2d:0f:54:23:
0c:e4:8a:99:37:13:c0:4d:a9:6a:00:a0:52:9f:49:
61:c7:66:fe:c4:83:17:4a:5f:67:ea:3c:67:b5:f4:
e9:80:b1:d2:3f:3f:dc:0d:61:4c:39:ab:84:25:26:
5a:89:0c:e8:b9:f4:55:61:44:91:4f:c4:a8:60:f9:
38:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EF:63:11:93:6A:EE:05:59:BB:3B:D1:CA:D4:DE:32:53:DA:4A:A4
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138312e302f32342d3234203d3e20313531383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.181.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:0e:29:e8:d9:e6:37:df:1c:3f:e3:ed:d6:21:8f:86:36:c0:
d8:72:bd:0f:43:50:ec:91:d5:6f:9c:fc:e5:82:15:99:2b:d8:
31:54:14:d9:30:0d:f5:2d:18:f5:1b:07:61:72:fc:07:82:77:
5f:55:a0:af:3f:5a:7a:4b:e9:a2:04:e3:22:c6:1c:fe:4d:d1:
ab:bd:42:b9:c2:dd:cf:00:ea:3c:fa:78:d6:88:08:e0:e0:db:
95:d0:d8:ac:16:a1:ce:ab:e6:47:09:b4:24:ba:37:58:35:84:
a4:94:67:b2:65:26:8f:8d:e0:ea:79:86:dc:00:31:7c:64:29:
a0:a7:ec:4c:af:4c:5c:61:aa:e7:18:77:f9:9a:83:e5:ae:1d:
2f:d4:a4:6d:77:05:57:a8:52:af:29:9b:3e:67:11:e0:a8:35:
d9:70:46:4e:1a:d7:37:51:9a:f6:26:fb:30:66:2f:53:73:2f:
2b:25:79:48:56:ba:6d:73:e0:f3:2d:3b:9d:33:a5:2c:93:35:
b7:33:b2:02:d2:d1:f5:a8:e4:c3:0e:f5:36:7f:84:7c:cc:ec:
21:2d:e3:92:9e:84:31:29:36:58:30:a2:f5:99:42:10:6b:0f:
66:03:78:ab:25:77:b7:15:98:ab:f3:ad:fc:ba:ed:25:db:29:
b3:e7:5a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:25 2026 by rpki-client