Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234302e302f32342d3234203d3e20313532313739.roa
File: 3135322e3233372e3234302e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: NFVGPXVv5ufGJHf17+7/zcCr4xdqFRF51miM10Ho6oI=
Subject key identifier: 37:E8:E2:3B:7D:6B:7D:20:30:0D:4C:EC:40:AE:27:66:8F:FA:E7:69
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 14FB2D5D0DFBAC9B55DBC133B533E138B77C4267
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234302e302f32342d3234203d3e20313532313739.roa
Signing time: Fri 17 Jul 2026 13:11:01 +0000
ROA not before: Fri 17 Jul 2026 13:06:01 +0000
ROA not after: Fri 16 Jul 2027 13:11:01 +0000
asID: 152179
IP address blocks: 152.237.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 17:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:fb:2d:5d:0d:fb:ac:9b:55:db:c1:33:b5:33:e1:38:b7:7c:42:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 17 13:06:01 2026 GMT
Not After : Jul 16 13:11:01 2027 GMT
Subject: CN=37E8E23B7D6B7D20300D4CEC40AE27668FFAE769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:3f:ff:45:fb:93:44:76:d5:f1:82:12:07:
8f:c5:1a:26:57:31:66:3c:4a:c2:f7:98:c0:9a:11:
6d:cf:ff:3b:14:66:d2:1b:e0:2d:44:32:b3:c1:fd:
08:a3:2e:62:42:41:0e:18:56:48:a7:bd:e4:84:df:
e3:82:1f:b0:47:66:70:eb:1b:be:43:c6:12:cc:68:
8b:ca:88:83:90:09:aa:47:e7:f3:bb:a0:98:f1:3b:
f0:be:9d:10:25:eb:2f:63:42:5c:9a:d9:d9:eb:65:
ad:e6:7d:16:6a:32:4b:90:fd:db:d3:62:32:86:0e:
25:ee:6c:c9:d5:6e:03:16:7f:ac:ee:3c:3e:73:92:
32:53:69:2a:fe:3c:64:82:5a:8a:ae:aa:87:82:41:
1c:ee:bd:dc:bd:c3:16:0d:0e:c6:37:19:14:3c:49:
94:3f:14:dc:03:f4:42:f3:23:2a:df:58:cb:b0:f5:
5b:7c:60:f5:ba:12:6b:7e:5a:48:67:4a:3c:74:71:
5e:c3:66:3a:84:cd:c1:e5:93:c4:40:55:a3:e5:07:
30:65:5b:44:03:ab:13:aa:3d:14:49:b0:99:d2:4b:
3f:85:aa:7c:a3:5e:34:41:be:f1:02:57:4f:e0:6c:
75:43:36:a8:ec:ca:5a:d9:1f:2f:45:ee:0c:e2:58:
75:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E8:E2:3B:7D:6B:7D:20:30:0D:4C:EC:40:AE:27:66:8F:FA:E7:69
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234302e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.240.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:42:0b:35:40:6d:70:52:44:cd:35:46:ba:2e:b9:54:23:71:
4c:dc:e8:71:e7:ea:00:73:05:fa:83:0d:58:41:7c:80:cc:b8:
c9:b1:34:2c:38:f9:9f:18:79:73:64:ba:e8:17:18:0a:4a:cb:
f5:47:e7:40:78:91:19:d2:d3:f5:39:28:86:f3:03:a9:81:fb:
ce:95:b9:af:85:3d:98:dd:94:88:f9:9a:35:71:eb:67:a6:ce:
b7:b6:3c:0a:c4:dc:6c:bd:e7:2b:04:7d:b8:94:56:1e:3e:c9:
56:31:31:0b:0e:20:96:13:54:1c:38:5a:2f:92:85:f4:c6:bd:
eb:fd:52:e1:0a:05:7f:c0:8f:e4:67:2e:41:58:56:22:03:bf:
35:ad:2b:e9:94:79:b4:69:8d:32:a8:5b:b1:ef:8d:6c:fc:58:
c9:e4:de:73:98:cf:b5:cd:df:7d:73:91:9f:30:83:9c:cb:3b:
9b:ae:39:34:91:98:c2:5b:90:88:83:f2:ec:cd:16:08:f9:02:
47:cb:44:d5:52:b2:c9:8b:13:2b:05:1e:1e:c6:84:d2:9d:6c:
6d:02:03:17:b5:fe:4d:74:7f:46:98:be:a3:f5:3b:3a:bb:64:
cf:db:40:7f:a7:d1:11:c6:54:5f:fa:b2:7a:64:5a:bd:d9:47:
75:19:5c:b9
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUFPstXQ37rJtV28EztTPhOLd8QmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA3MTcxMzA2MDFaFw0yNzA3MTYxMzExMDFaMDMxMTAvBgNV
BAMTKDM3RThFMjNCN0Q2QjdEMjAzMDBENENFQzQwQUUyNzY2OEZGQUU3NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRrD//RfuTRHbV8YISB4/FGiZX
MWY8SsL3mMCaEW3P/zsUZtIb4C1EMrPB/QijLmJCQQ4YVkinveSE3+OCH7BHZnDr
G75DxhLMaIvKiIOQCapH5/O7oJjxO/C+nRAl6y9jQlya2dnrZa3mfRZqMkuQ/dvT
YjKGDiXubMnVbgMWf6zuPD5zkjJTaSr+PGSCWoquqoeCQRzuvdy9wxYNDsY3GRQ8
SZQ/FNwD9ELzIyrfWMuw9Vt8YPW6Emt+WkhnSjx0cV7DZjqEzcHlk8RAVaPlBzBl
W0QDqxOqPRRJsJnSSz+FqnyjXjRBvvECV0/gbHVDNqjsylrZHy9F7gziWHW5AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUN+jiO31rfSAwDUzsQK4nZo/652kwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzEzNTMyMmUzMjMzMzcyZTMy
MzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjMxMzczOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJjt8DANBgkqhkiG9w0BAQsFAAOCAQEAbUILNUBtcFJEzTVGui65VCNxTNzo
cefqAHMF+oMNWEF8gMy4ybE0LDj5nxh5c2S66BcYCkrL9UfnQHiRGdLT9TkohvMD
qYH7zpW5r4U9mN2UiPmaNXHrZ6bOt7Y8CsTcbL3nKwR9uJRWHj7JVjExCw4glhNU
HDhaL5KF9Ma96/1S4QoFf8CP5GcuQVhWIgO/Na0r6ZR5tGmNMqhbse+NbPxYyeTe
c5jPtc3ffXORnzCDnMs7m645NJGYwluQiIPy7M0WCPkCR8tE1VKyyYsTKwUeHsaE
0p1sbQIDF7X+TXR/Rpi+o/U7Ortkz9tAf6fREcZUX/qyemRavdlHdRlcuQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:27:58 2026 by rpki-client