Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e372e302f32342d3332203d3e203530303639.roa
File: 3137372e3137372e372e302f32342d3332203d3e203530303639.roa (raw, json)
Hash identifier: Mwnx16YEkQiT+RXPZCNohj7d6VO8G/1lgQAoRBqiqi4=
Subject key identifier: C3:92:FB:E3:88:E7:9E:55:43:2C:4A:58:C9:94:EF:D1:D4:BA:B2:00
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 437618E54C6E3B3EDB3348BE55C9EA110C4FD572
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e372e302f32342d3332203d3e203530303639.roa
Signing time: Thu 25 Jun 2026 14:13:55 +0000
ROA not before: Thu 25 Jun 2026 14:08:55 +0000
ROA not after: Thu 24 Jun 2027 14:13:55 +0000
asID: 50069
IP address blocks: 177.177.7.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 04:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:76:18:e5:4c:6e:3b:3e:db:33:48:be:55:c9:ea:11:0c:4f:d5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jun 25 14:08:55 2026 GMT
Not After : Jun 24 14:13:55 2027 GMT
Subject: CN=C392FBE388E79E55432C4A58C994EFD1D4BAB200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7d:01:36:eb:e3:6d:29:ee:a1:ab:d6:7a:f8:
dc:89:30:14:22:68:ba:22:75:b6:db:64:ad:2b:eb:
c0:7e:90:f0:06:43:e4:3b:ed:dd:b1:ba:53:07:7d:
4b:bc:ad:14:51:5a:00:28:0e:94:83:8e:7d:83:12:
e0:89:33:cd:86:10:2a:ec:ed:4b:56:0c:5b:3c:9b:
04:7b:10:ba:46:75:8b:19:94:f3:2d:97:f4:29:78:
b9:05:55:50:63:8d:b4:69:ec:06:c2:30:76:68:0a:
8b:76:4a:58:bd:0a:23:08:91:c5:4d:4d:be:46:fa:
c5:96:83:f7:c3:43:26:9b:52:1a:1a:13:10:99:c7:
df:fc:62:07:4b:2b:a6:ce:e0:ad:b6:d0:b1:29:19:
6e:e7:ec:7b:70:7a:e7:76:f0:5b:5b:17:00:03:1c:
93:ed:99:c2:db:ce:e0:68:9f:6c:3d:00:46:57:ac:
ec:9b:20:b7:cc:ef:cd:30:86:5e:77:7e:2e:4c:9e:
ee:0b:2e:00:3c:d6:57:f6:b1:15:b9:2c:d7:bd:cf:
6e:73:99:37:69:ff:05:1a:f9:bc:f2:14:02:3c:1a:
56:a2:73:27:00:b2:ba:da:79:f6:f8:95:de:94:b0:
a7:8e:d0:98:ec:25:f7:65:de:30:47:13:34:be:44:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:92:FB:E3:88:E7:9E:55:43:2C:4A:58:C9:94:EF:D1:D4:BA:B2:00
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3137372e3137372e372e302f32342d3332203d3e203530303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.7.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f6:47:46:50:cc:b7:e7:b9:37:09:18:05:c1:77:06:75:62:
ed:83:ae:1c:62:13:34:1f:5f:c4:3b:f6:a3:c3:05:ab:95:dc:
ae:4c:5d:cd:a5:d3:83:f3:fb:7f:b1:cb:5d:60:40:2d:82:2c:
c1:b8:b5:2c:66:76:1a:41:00:19:29:0e:28:61:1e:64:34:67:
09:3a:ad:0b:e5:22:4b:c4:9e:c3:66:96:ae:1c:ed:62:70:e7:
d5:19:40:d1:ff:06:0e:dd:1b:24:68:27:b2:13:73:11:d3:fc:
06:d3:f9:d0:e7:0c:f9:ac:7a:a8:9e:85:23:de:51:2e:b3:b5:
0c:c3:dc:3c:7f:44:05:7c:0e:2d:83:d8:80:aa:c8:2a:5e:08:
a5:e9:be:8b:76:b2:81:b0:03:9e:5c:ee:61:fc:66:dc:56:7b:
98:d6:6c:02:a0:83:9a:e8:07:b2:30:61:29:d5:7f:6c:16:9a:
8b:92:dd:13:be:5a:36:7c:8f:fd:61:8b:f7:fc:5f:ab:4e:fa:
ce:2b:3a:00:7f:7f:41:64:49:17:9e:5a:5d:13:11:2b:7f:d0:
36:08:09:b3:ea:4b:00:a5:cd:56:6d:60:c9:06:3c:87:fa:b9:
7f:36:e1:f8:01:ef:b2:6d:45:93:26:33:ae:b3:40:0a:26:bf:
6a:82:30:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:33:46 2026 by rpki-client