Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e302e302f31392d3332203d3e203335343837.roa
File: 3137372e3137372e302e302f31392d3332203d3e203335343837.roa (raw, json)
Hash identifier: 9dNidRrvcOLl88K5ifNWeDH4hXK0gd00FoLsAj22ejk=
Subject key identifier: 4D:6B:14:28:C4:3A:DF:C5:70:08:47:C7:2B:E7:F5:43:D6:C2:B9:4E
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 21AB1BB61F023C3DB47B35DB54A2B3AFE70A7D06
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e302e302f31392d3332203d3e203335343837.roa
Signing time: Thu 25 Jun 2026 14:14:29 +0000
ROA not before: Thu 25 Jun 2026 14:09:29 +0000
ROA not after: Thu 24 Jun 2027 14:14:29 +0000
asID: 35487
IP address blocks: 177.177.0.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ab:1b:b6:1f:02:3c:3d:b4:7b:35:db:54:a2:b3:af:e7:0a:7d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:09:29 2026 GMT
Not After : Jun 24 14:14:29 2027 GMT
Subject: CN=4D6B1428C43ADFC5700847C72BE7F543D6C2B94E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:6c:da:26:8f:11:14:27:05:cc:d0:0d:5c:
9e:73:d1:c8:88:90:bd:96:4a:27:0d:9a:0a:29:36:
3a:22:74:18:89:71:d1:3b:87:1e:07:a6:c2:be:78:
bf:c8:7a:d6:19:bf:6d:8e:b7:04:d1:96:af:0a:0b:
8c:0c:02:c0:45:78:90:a8:07:aa:a7:f2:75:05:37:
55:af:75:1f:5d:50:c2:a0:b4:5d:07:4b:8b:fc:11:
f9:8c:a7:47:18:9c:ad:94:c4:4d:35:8d:c4:5c:b1:
ba:53:e3:0b:3a:d5:3a:b1:16:f2:51:45:3e:be:60:
e6:cf:62:db:9a:b4:9f:62:45:f3:41:84:54:0e:3a:
b3:8d:f5:d4:07:a0:20:7a:6c:23:db:03:6c:f7:75:
35:ad:44:03:74:4b:2a:03:1e:19:ec:a7:ef:3d:73:
88:93:5e:a0:f0:bd:a8:2a:d1:57:e5:1f:84:04:ad:
94:28:4d:2d:6f:ab:93:3a:86:98:a2:97:46:95:9f:
4e:a1:a6:54:ec:eb:ae:3c:60:c4:a3:af:f3:0a:af:
38:80:68:16:a0:36:91:04:69:b4:d7:28:59:f2:ba:
a2:16:47:cd:3a:2f:9c:3f:21:f8:85:ab:f5:68:c1:
17:a9:a3:a7:46:14:5a:35:10:24:18:fa:d4:da:c2:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6B:14:28:C4:3A:DF:C5:70:08:47:C7:2B:E7:F5:43:D6:C2:B9:4E
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e302e302f31392d3332203d3e203335343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.0.0/19
Signature Algorithm: sha256WithRSAEncryption
64:11:dd:c2:e9:c3:8b:58:f7:db:a1:7b:9c:4d:bf:76:ef:4c:
3b:8f:ad:5e:72:d7:95:af:ac:75:73:ad:75:ce:f6:a9:a5:fc:
df:e0:76:6d:8b:5f:f8:63:0c:ec:11:7a:71:1e:88:bc:de:a7:
f6:48:f1:fe:fd:61:2b:38:b1:61:e5:d2:37:77:de:ce:11:f4:
7d:cd:0b:33:50:9c:f8:cd:c1:d0:7f:e6:70:4a:21:cb:2b:45:
18:27:23:ff:40:11:f8:43:04:6f:0f:e6:cf:f7:56:d7:37:c8:
7f:f8:c4:64:47:25:06:d5:75:81:37:57:37:df:5e:d2:3d:c5:
f9:7e:bd:0c:f6:ad:27:bd:17:f3:c6:aa:2a:d5:2a:5c:20:61:
d2:d4:45:05:e1:d2:b1:d5:1d:e8:46:2b:9b:27:33:ed:08:1a:
71:a5:59:61:14:b0:cc:97:36:61:14:b5:67:4c:67:0a:3b:c0:
d8:eb:9d:2e:f7:b1:a0:4a:09:71:f7:93:fd:c3:ca:2e:6e:f2:
64:51:d0:1c:11:aa:1c:34:de:fb:56:b7:58:68:a2:96:d2:d3:
95:19:35:f5:e3:af:27:38:97:c2:bf:6b:c7:88:9e:ca:2c:7e:
a8:96:2a:f0:7f:93:13:21:54:c3:1d:2d:4b:22:c2:49:5f:6f:
db:37:6e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:34:26 2026 by rpki-client