Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3232342e302f32342d3234203d3e20313432353137.roa
File: 3135322e3233372e3232342e302f32342d3234203d3e20313432353137.roa (raw, json)
Hash identifier: PeK+uxeMo+tMO3XZPcVtxoQ6pJ9wcLlnJwp8DFuQNo8=
Subject key identifier: 6A:E9:0F:A6:91:1A:B3:08:0F:AA:D6:24:BB:3F:AE:79:48:EF:96:F3
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 30C9F006F6E41FFF42EF715E288604D96486EC02
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3232342e302f32342d3234203d3e20313432353137.roa
Signing time: Fri 17 Jul 2026 07:14:37 +0000
ROA not before: Fri 17 Jul 2026 07:09:37 +0000
ROA not after: Fri 16 Jul 2027 07:14:37 +0000
asID: 142517
IP address blocks: 152.237.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:c9:f0:06:f6:e4:1f:ff:42:ef:71:5e:28:86:04:d9:64:86:ec:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 17 07:09:37 2026 GMT
Not After : Jul 16 07:14:37 2027 GMT
Subject: CN=6AE90FA6911AB3080FAAD624BB3FAE7948EF96F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:d9:8f:ab:ba:d1:99:7e:d9:27:dc:7f:33:
e5:4d:4d:f4:4b:80:aa:a6:71:0b:7b:c2:01:6a:bf:
72:ac:a4:2b:83:e1:76:b5:ea:9e:1e:d4:97:41:23:
5e:33:9b:5f:f0:4b:08:f2:5c:36:4a:47:c8:b3:fa:
f0:03:79:97:f8:bd:ca:93:15:2e:f6:16:ef:ee:e3:
a5:ab:e5:1a:ac:61:86:ec:25:69:62:18:ef:f9:46:
17:e4:8f:0f:20:13:a1:29:32:60:ae:00:5b:dc:7a:
73:05:59:cd:f7:8d:89:7e:57:0b:c2:c0:4e:09:b0:
96:83:96:06:6a:6f:3a:9c:26:e8:fc:5f:99:d9:65:
48:f2:22:3d:3c:8a:0c:fc:0a:eb:37:30:d7:39:6d:
7b:13:8a:f4:3e:ac:1d:98:d1:4a:b3:ad:11:27:24:
57:25:49:b7:46:af:e8:0e:94:9b:2e:e9:7b:3d:2e:
02:58:40:6f:9b:08:be:38:8c:09:45:eb:f0:4c:b8:
f5:ac:23:df:15:bd:81:13:34:b9:94:55:be:2c:fa:
ba:f8:1f:9f:d2:aa:15:8a:b4:41:1c:0a:9f:3d:8b:
b6:c6:4a:9a:68:f6:87:ff:82:f6:93:e8:4b:27:c0:
94:88:cd:86:1c:c4:64:f5:71:83:3f:ad:d4:52:db:
86:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E9:0F:A6:91:1A:B3:08:0F:AA:D6:24:BB:3F:AE:79:48:EF:96:F3
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3232342e302f32342d3234203d3e20313432353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.224.0/24
Signature Algorithm: sha256WithRSAEncryption
76:db:3b:6c:f8:22:00:96:1a:b8:97:a4:9f:b0:c4:f9:3d:5e:
34:f2:c3:51:c0:28:02:1a:86:b6:32:4d:c0:48:3e:b3:27:1b:
77:b6:25:94:7a:65:ea:9f:11:8c:98:12:77:c2:43:7e:43:e5:
c8:80:7f:d3:fe:80:04:df:51:df:37:46:90:20:b1:20:22:da:
97:70:a1:c9:04:73:60:66:2e:d9:ea:20:48:8b:a0:36:34:48:
ad:2d:06:be:f6:96:b1:83:19:ce:79:f4:54:8d:6f:fd:5e:83:
77:57:32:1c:02:b8:61:28:ab:12:b6:13:0f:99:8e:60:b7:69:
68:f5:12:17:85:19:f8:81:44:bb:14:65:8b:1e:0d:76:de:d7:
2a:69:9a:3f:44:aa:d5:67:1a:c2:ac:18:3b:16:82:7c:9e:d1:
8d:9f:65:2a:3d:7f:1a:08:8b:25:1b:aa:44:a4:64:15:2d:25:
b0:90:a7:12:00:d7:cc:6d:66:2f:95:85:9b:2c:7f:af:17:8c:
35:ae:a0:8e:72:15:98:e6:64:c2:5c:90:8d:55:65:e4:99:71:
ef:b3:c9:97:df:49:d2:16:c1:45:37:f5:e7:80:54:c7:4a:6c:
e0:4e:f4:85:46:9c:ca:46:b1:f6:a7:d4:85:e9:07:72:cd:2c:
2a:fc:6a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:50:53 2026 by rpki-client