Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233302e302f32342d3234203d3e20313532313739.roa
File: 3135322e3233372e3233302e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: 7y5mkbhyUsxcz8E6He8Z8iT4KByZQiqLsn14pasPAJ0=
Subject key identifier: C8:F5:E2:9F:A9:98:F4:21:DB:7B:54:C1:2A:6A:37:67:EA:9D:F3:FA
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 2CD93FE9C3EBF3650A7865BC31FD17CDF4D48190
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233302e302f32342d3234203d3e20313532313739.roa
Signing time: Fri 17 Jul 2026 13:10:42 +0000
ROA not before: Fri 17 Jul 2026 13:05:42 +0000
ROA not after: Fri 16 Jul 2027 13:10:42 +0000
asID: 152179
IP address blocks: 152.237.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 17:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:d9:3f:e9:c3:eb:f3:65:0a:78:65:bc:31:fd:17:cd:f4:d4:81:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 17 13:05:42 2026 GMT
Not After : Jul 16 13:10:42 2027 GMT
Subject: CN=C8F5E29FA998F421DB7B54C12A6A3767EA9DF3FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:61:12:96:9a:00:a5:f7:7f:d4:15:2e:1f:
29:0d:28:c6:08:a6:4a:d1:58:0e:d5:d1:1c:a7:12:
e1:2f:f6:fa:69:4e:09:1a:0e:33:f0:4a:7f:c6:17:
b5:de:19:ae:08:bb:6f:da:d4:a4:99:43:f4:38:b4:
10:1a:46:57:dd:40:95:b4:47:67:a9:b4:73:b2:bc:
46:7a:1c:3c:65:3c:ce:0c:a4:3d:d0:50:80:e4:da:
c7:55:6c:2e:fc:77:0e:ef:85:34:ce:7a:da:01:43:
eb:57:1a:52:9e:cb:03:ec:9a:e4:f9:45:8c:5c:70:
c5:cc:fc:5c:68:21:8f:a7:9f:f5:1a:a0:ee:77:67:
e7:f5:7a:df:3d:f3:9e:ad:bd:fc:71:ac:04:87:d0:
46:9d:b0:cd:b2:08:cf:3f:37:23:89:b7:44:12:c6:
cc:bb:49:b5:b6:a9:f3:da:5f:79:ee:01:53:a8:d6:
d6:19:7e:46:11:f7:d5:79:1a:e1:60:2e:e5:75:87:
9a:a2:a2:a4:1a:b5:81:9e:19:c5:ce:93:82:80:91:
80:b2:e0:1d:ab:f9:1a:c1:7b:39:d4:64:76:ce:53:
ce:5b:47:3a:64:35:bf:76:a8:73:f6:ff:f5:8a:f6:
7d:d9:66:d5:a6:6e:6c:f5:cb:57:71:51:1c:05:c0:
da:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F5:E2:9F:A9:98:F4:21:DB:7B:54:C1:2A:6A:37:67:EA:9D:F3:FA
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233302e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.230.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:92:df:69:71:f1:29:b8:03:e5:aa:95:60:91:e8:d1:5c:a9:
e4:c1:7c:83:8f:7e:c5:e9:4c:17:8e:34:68:f5:87:24:03:b5:
af:42:0e:7b:89:5f:9b:bf:38:94:d4:99:26:36:03:92:fc:a6:
e1:88:6d:69:fe:4d:b7:68:92:46:06:af:93:50:c5:7d:8d:9f:
9d:85:86:b3:25:cf:10:4b:d3:6f:a3:5a:9a:48:d4:ce:34:ee:
3b:41:e2:ab:53:64:a9:ac:ad:74:0d:0f:d3:00:ad:e4:f9:a3:
a0:2f:a8:7e:3e:bb:36:d3:79:e2:ef:a0:ff:fe:dc:96:d0:21:
e0:d6:85:c1:dd:d8:27:eb:7e:8a:87:95:1f:19:98:08:1a:2f:
c7:25:06:d9:d9:a4:a2:36:83:7d:af:b6:13:78:5b:59:81:3c:
18:90:e3:d2:85:6b:d8:fb:9b:e4:da:81:41:c1:11:63:08:94:
0b:4c:2d:f4:46:ed:48:5c:5f:c0:2a:bd:09:65:68:7d:96:28:
a5:b9:21:02:a0:28:1b:c2:ee:87:00:47:84:09:da:b2:67:6d:
64:1e:84:46:1e:2a:91:4b:13:64:16:5d:83:c6:cb:f2:43:d1:
ef:55:e0:29:d4:bf:b0:51:95:c9:ba:48:b1:be:47:ae:5a:1f:
c4:e9:15:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:27:44 2026 by rpki-client