Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138342e302f32342d3234203d3e20313532383638.roa
File: 3138362e3234312e3138342e302f32342d3234203d3e20313532383638.roa (raw, json)
Hash identifier: opu0PqBJDyT0pBKZOspXRPXFL/7Fz4TfJixvCqkj8KY=
Subject key identifier: 67:10:1D:75:31:60:D2:FB:21:02:83:E9:B2:C8:0D:4C:B8:6D:56:31
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 62B8F754CDFF33DEFA6F5557D91B0FF91650D78F
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138342e302f32342d3234203d3e20313532383638.roa
Signing time: Tue 21 Jul 2026 13:32:48 +0000
ROA not before: Tue 21 Jul 2026 13:27:48 +0000
ROA not after: Tue 20 Jul 2027 13:32:48 +0000
asID: 152868
IP address blocks: 186.241.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:b8:f7:54:cd:ff:33:de:fa:6f:55:57:d9:1b:0f:f9:16:50:d7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 21 13:27:48 2026 GMT
Not After : Jul 20 13:32:48 2027 GMT
Subject: CN=67101D753160D2FB210283E9B2C80D4CB86D5631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:b6:59:6c:07:d2:d1:4e:18:ed:a5:9d:02:
bb:60:f8:53:1c:37:7b:12:7c:d5:d5:f4:a2:b1:1b:
7e:f2:b0:cb:4b:60:12:50:4f:be:9d:d8:61:18:c6:
25:ba:cc:fe:20:11:e0:61:9c:26:28:48:91:dd:59:
93:9e:b3:81:04:d2:cf:e2:88:61:b7:cf:b0:47:8c:
da:51:71:b4:36:8c:7f:f2:71:dc:d8:69:61:13:c2:
9a:dd:fc:9d:f4:36:4c:8f:e6:66:ab:f3:c7:eb:3c:
f0:b5:6c:07:cd:f0:5e:46:c6:5f:ff:f0:87:6d:1d:
da:70:3e:9f:5c:b7:d0:b5:e0:9b:8a:ae:a3:70:1a:
ae:db:f1:df:14:33:58:b8:34:1b:92:26:de:d2:59:
01:82:f7:63:d6:f8:31:fc:42:dc:98:db:cc:e7:09:
e0:ea:5e:1f:38:2e:f7:6f:d7:49:6c:01:7e:e1:37:
7f:c1:15:71:29:5e:26:8b:9b:f1:b5:a1:c9:44:0b:
96:c5:ab:df:75:f7:d7:e6:d0:55:98:1b:1c:98:7f:
a4:da:22:67:dd:d6:18:0c:4c:d1:0c:d0:c2:78:0b:
e1:8d:72:0f:bd:80:be:08:1e:1e:3d:dc:e3:ea:8f:
39:e5:d7:b0:54:35:68:4e:4c:c8:92:f2:c3:c7:94:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:10:1D:75:31:60:D2:FB:21:02:83:E9:B2:C8:0D:4C:B8:6D:56:31
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138342e302f32342d3234203d3e20313532383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.184.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:0c:f8:74:72:8e:42:be:66:32:43:fd:60:f7:3b:dd:f7:90:
a0:58:7f:dc:20:b0:1c:26:e0:32:46:c3:db:a6:fb:f6:0b:9a:
4d:8a:72:f6:bf:3e:88:f6:92:f6:39:85:36:9a:d0:49:b5:51:
4a:fd:b5:67:82:ad:f1:b4:10:3a:fa:71:d3:bd:8b:5d:f4:57:
5a:b7:a6:1c:4e:81:5f:93:49:52:b2:d3:46:f5:63:cd:5d:e6:
16:5e:60:17:14:1a:73:00:67:95:af:0d:4a:34:8f:fc:28:db:
39:6d:c8:70:fa:db:6e:9d:29:5b:18:a9:89:0a:5e:d2:80:f1:
0e:f6:8d:a0:2b:84:23:ae:34:a3:04:fd:a0:ed:8a:ab:d9:b1:
a6:9a:a1:69:ba:74:e7:a1:00:22:0e:fa:be:24:ff:38:5e:6b:
e3:6a:d7:82:99:f9:95:01:8d:f6:5a:32:21:7d:9c:3a:9f:09:
c0:f4:4b:4e:53:5e:ad:ce:71:25:e5:b2:7d:53:fb:1c:ec:7a:
ab:ae:c9:8c:01:a4:27:58:5a:20:0e:a2:da:28:8f:5e:07:78:
0d:bb:6c:a1:e4:59:c2:b5:d9:55:25:5a:59:71:cb:84:5f:7e:
53:44:2b:39:58:14:3f:32:6a:e5:ed:d8:93:ce:b3:71:b7:d0:
0c:76:28:3c
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUYrj3VM3/M976b1VX2RsP+RZQ148wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA3MjExMzI3NDhaFw0yNzA3MjAxMzMyNDhaMDMxMTAvBgNV
BAMTKDY3MTAxRDc1MzE2MEQyRkIyMTAyODNFOUIyQzgwRDRDQjg2RDU2MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71bZZbAfS0U4Y7aWdArtg+FMc
N3sSfNXV9KKxG37ysMtLYBJQT76d2GEYxiW6zP4gEeBhnCYoSJHdWZOes4EE0s/i
iGG3z7BHjNpRcbQ2jH/ycdzYaWETwprd/J30NkyP5mar88frPPC1bAfN8F5Gxl//
8IdtHdpwPp9ct9C14JuKrqNwGq7b8d8UM1i4NBuSJt7SWQGC92PW+DH8QtyY28zn
CeDqXh84Lvdv10lsAX7hN3/BFXEpXiaLm/G1oclEC5bFq99199fm0FWYGxyYf6Ta
Imfd1hgMTNEM0MJ4C+GNcg+9gL4IHh493OPqjznl17BUNWhOTMiS8sPHlGcZAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUZxAddTFg0vshAoPpssgNTLhtVjEwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzEzODM2MmUzMjM0MzEyZTMx
MzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzYzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALrxuDANBgkqhkiG9w0BAQsFAAOCAQEAoAz4dHKOQr5mMkP9YPc73feQoFh/
3CCwHCbgMkbD26b79guaTYpy9r8+iPaS9jmFNprQSbVRSv21Z4Kt8bQQOvpx072L
XfRXWremHE6BX5NJUrLTRvVjzV3mFl5gFxQacwBnla8NSjSP/CjbOW3IcPrbbp0p
WxipiQpe0oDxDvaNoCuEI640owT9oO2Kq9mxppqhabp056EAIg76viT/OF5r42rX
gpn5lQGN9loyIX2cOp8JwPRLTlNerc5xJeWyfVP7HOx6q67JjAGkJ1haIA6i2iiP
Xgd4DbtsoeRZwrXZVSVaWXHLhF9+U0QrOVgUPzJq5e3Yk86zcbfQDHYoPA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:18:01 2026 by rpki-client