Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233382e302f32342d3234203d3e20313532313739.roa
File: 3135322e3233372e3233382e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: B+njQa80L7unMDhCheGY8UV+446VuGh2xMCHtP0KqYk=
Subject key identifier: E5:0D:F4:F0:18:7D:A5:9D:D1:B7:3B:23:DB:0D:D0:F1:21:1F:92:DB
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 21B987A4498BB72CB3FA86A5C9F3858624424D72
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233382e302f32342d3234203d3e20313532313739.roa
Signing time: Fri 17 Jul 2026 13:11:17 +0000
ROA not before: Fri 17 Jul 2026 13:06:17 +0000
ROA not after: Fri 16 Jul 2027 13:11:17 +0000
asID: 152179
IP address blocks: 152.237.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 17:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:b9:87:a4:49:8b:b7:2c:b3:fa:86:a5:c9:f3:85:86:24:42:4d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 17 13:06:17 2026 GMT
Not After : Jul 16 13:11:17 2027 GMT
Subject: CN=E50DF4F0187DA59DD1B73B23DB0DD0F1211F92DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e8:aa:73:df:a6:6a:43:8b:ce:f2:48:f2:c9:
85:32:e0:72:49:2c:c5:94:bd:ba:57:4b:3d:e8:27:
ac:a2:34:ac:95:36:5d:e6:5b:b3:dd:c6:cf:c7:5a:
f0:5c:e5:10:03:83:ce:52:9b:97:8c:62:7f:90:78:
e2:b2:4d:0e:30:94:54:25:0d:27:28:1e:fc:9c:f2:
37:74:90:7e:9c:c7:3a:f0:f7:69:fd:3d:22:5b:6d:
98:0c:71:f5:d6:84:5f:43:d4:4f:f4:87:09:d7:7c:
91:02:40:ff:ec:8a:12:0e:4d:f7:0b:f0:8e:10:97:
d7:69:9e:b8:5a:8a:ca:12:c6:56:11:c8:34:fb:f4:
09:10:05:f2:26:83:81:22:0d:61:1a:4f:b9:9b:16:
51:17:4b:08:cc:4a:c9:3e:af:a7:bd:9a:2b:a1:d8:
a4:f7:a3:92:09:f1:3e:29:fc:58:35:0a:38:06:4a:
ba:b7:74:73:b2:b9:61:35:c9:8c:e0:28:eb:d1:7b:
cf:9b:b7:26:2c:9d:01:72:ed:d9:34:f6:36:52:19:
ce:c0:5e:50:ef:c7:5f:62:3a:93:73:05:79:60:a8:
8d:2e:5b:0e:7f:fd:2f:6b:7d:b5:dd:2f:8d:2a:d0:
1f:11:1c:cf:49:8a:aa:d0:3c:3d:ae:92:45:6d:a7:
7b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0D:F4:F0:18:7D:A5:9D:D1:B7:3B:23:DB:0D:D0:F1:21:1F:92:DB
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3233382e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.238.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:55:79:8c:55:9d:88:05:74:37:f8:dc:c4:48:a2:96:11:55:
1d:7b:ad:ca:36:bb:c0:10:4d:c6:2b:a9:3e:79:ca:a2:61:db:
1e:4e:a4:8c:58:72:37:be:ee:2c:db:47:82:13:99:f0:0a:9c:
ce:bb:f6:1a:c7:a7:82:90:65:20:06:70:d3:f0:d8:ac:7e:fd:
c0:0a:8a:77:da:c3:98:79:4c:3e:d0:c9:c7:fb:55:1d:ef:7e:
73:dc:d6:87:4c:14:f5:e0:77:6a:9c:7e:4e:d3:b0:e8:42:35:
4b:52:66:28:c6:7a:c4:79:8a:38:89:fe:3d:46:73:b3:75:05:
23:81:b3:5d:50:26:f0:ab:2d:b1:f4:3c:2f:1d:6f:d8:be:d0:
a5:90:07:98:07:39:b7:6c:c7:34:92:8a:c2:4c:70:20:86:fc:
b5:3c:be:2e:dc:70:a8:9d:4d:3e:84:42:9d:8f:56:cb:41:4f:
67:cc:13:df:1f:3e:26:86:fb:1b:ca:61:aa:d5:2a:94:d0:27:
3a:8c:1a:f1:89:80:1f:c5:ba:54:be:25:8d:43:7d:91:a1:6f:
e2:ef:6c:bf:41:0a:6a:33:e4:c5:01:ec:ad:1c:50:c6:38:f6:
12:00:47:61:45:c9:93:2a:5f:d3:27:d9:79:e3:3e:ca:ca:47:
2d:76:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:27:59 2026 by rpki-client