Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234362e302f32342d3234203d3e20313532383638.roa
File: 3135322e3233372e3234362e302f32342d3234203d3e20313532383638.roa (raw, json)
Hash identifier: IxwgAI1uOL9OQMUwpwY1zk7B5wpKzIr+4+7pqwyfoOA=
Subject key identifier: 77:58:9E:24:D7:21:96:C5:CF:D7:C1:EB:6A:82:C6:87:F4:24:0D:46
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 64228813787A08963523FE25B4B6564CF77AF746
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234362e302f32342d3234203d3e20313532383638.roa
Signing time: Thu 16 Jul 2026 09:51:59 +0000
ROA not before: Thu 16 Jul 2026 09:46:59 +0000
ROA not after: Thu 15 Jul 2027 09:51:59 +0000
asID: 152868
IP address blocks: 152.237.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 13:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:22:88:13:78:7a:08:96:35:23:fe:25:b4:b6:56:4c:f7:7a:f7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 16 09:46:59 2026 GMT
Not After : Jul 15 09:51:59 2027 GMT
Subject: CN=77589E24D72196C5CFD7C1EB6A82C687F4240D46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:11:b2:1d:a2:14:6b:ad:ab:af:1c:b3:55:
4b:6a:9b:89:47:e4:f5:a7:62:4b:d2:0c:e7:e7:28:
d6:18:ea:98:a8:48:57:11:35:53:c0:00:5d:91:06:
e4:d2:3d:78:65:70:2e:c8:08:8c:01:92:09:8d:e4:
29:96:58:97:4d:86:d8:0a:e4:9c:de:b4:14:f1:dc:
b8:d0:23:ce:f3:c0:c2:53:49:9c:b3:e5:ef:b2:0d:
ea:3f:40:42:f0:4d:14:db:2c:ab:c8:4c:5f:90:09:
ea:44:b5:1d:76:fc:83:14:97:7c:da:12:63:5e:e1:
f4:d7:c9:5b:71:cd:be:21:bd:61:c1:49:1a:97:8a:
2d:9f:a8:ea:fc:52:df:a1:d4:85:38:28:60:69:4e:
61:f8:42:53:14:83:41:fd:c2:ac:8e:8f:f6:61:4b:
22:26:7d:81:44:24:d9:4a:9d:12:8a:60:89:6f:5b:
62:14:03:f0:4f:e7:56:a1:17:50:bf:a4:be:87:65:
8a:0c:67:02:d0:6b:a5:5d:ad:50:6d:e5:9f:ff:5f:
76:b1:fb:48:fb:a5:6e:fe:eb:32:a8:c6:94:75:49:
31:80:e4:71:17:1c:c3:8e:0c:cf:b1:82:1d:17:73:
83:5d:6c:74:ad:71:0c:87:85:01:ad:98:17:d4:02:
1a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:58:9E:24:D7:21:96:C5:CF:D7:C1:EB:6A:82:C6:87:F4:24:0D:46
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3135322e3233372e3234362e302f32342d3234203d3e20313532383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.246.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f2:5a:52:4a:ee:1a:df:e7:3f:7c:4e:64:be:6f:08:fe:e5:
e6:14:53:86:f4:75:6e:c7:96:a3:d9:de:c0:15:00:ee:5f:df:
4f:37:1f:b0:25:d7:37:c7:e9:b5:21:21:19:ce:d6:59:fc:07:
65:ef:2b:44:51:f3:f7:76:d3:96:1f:41:6c:18:4c:2b:41:3e:
00:e1:77:4a:d1:12:95:41:9e:80:8b:5a:54:9b:33:b5:34:68:
d6:6e:27:da:14:08:2f:59:2a:8c:f7:da:5a:77:39:f3:e0:62:
82:ee:40:ef:b6:42:b4:30:89:1e:73:58:c5:95:88:ae:7d:fa:
cc:9b:3c:37:d7:5b:8a:e6:d7:a2:05:08:74:64:fa:91:6c:cb:
7e:bf:31:a0:0f:fd:5e:bc:e4:a4:35:45:cf:de:f3:7b:b5:43:
0c:a6:7f:38:e3:1c:7d:eb:59:58:ac:2f:65:ff:44:82:c4:8a:
15:c0:91:9c:95:d9:66:8e:e3:7b:03:c9:59:91:5f:4b:00:da:
60:78:f3:f2:e9:c1:58:31:06:ba:08:2a:be:a5:4e:01:fb:2d:
33:65:8b:16:07:22:ae:2c:10:c4:ab:62:1c:04:d0:2c:65:90:
1d:dd:da:57:c9:32:75:59:e6:c0:8b:a0:fb:ac:29:05:49:9c:
33:41:69:ba
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUZCKIE3h6CJY1I/4ltLZWTPd690YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA3MTYwOTQ2NTlaFw0yNzA3MTUwOTUxNTlaMDMxMTAvBgNV
BAMTKDc3NTg5RTI0RDcyMTk2QzVDRkQ3QzFFQjZBODJDNjg3RjQyNDBENDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRkxGyHaIUa62rrxyzVUtqm4lH
5PWnYkvSDOfnKNYY6pioSFcRNVPAAF2RBuTSPXhlcC7ICIwBkgmN5CmWWJdNhtgK
5JzetBTx3LjQI87zwMJTSZyz5e+yDeo/QELwTRTbLKvITF+QCepEtR12/IMUl3za
EmNe4fTXyVtxzb4hvWHBSRqXii2fqOr8Ut+h1IU4KGBpTmH4QlMUg0H9wqyOj/Zh
SyImfYFEJNlKnRKKYIlvW2IUA/BP51ahF1C/pL6HZYoMZwLQa6VdrVBt5Z//X3ax
+0j7pW7+6zKoxpR1STGA5HEXHMOODM+xgh0Xc4NdbHStcQyHhQGtmBfUAhpJAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUd1ieJNchlsXP18HraoLGh/QkDUYwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzEzNTMyMmUzMjMzMzcyZTMy
MzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzYzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJjt9jANBgkqhkiG9w0BAQsFAAOCAQEAYfJaUkruGt/nP3xOZL5vCP7l5hRT
hvR1bseWo9newBUA7l/fTzcfsCXXN8fptSEhGc7WWfwHZe8rRFHz93bTlh9BbBhM
K0E+AOF3StESlUGegItaVJsztTRo1m4n2hQIL1kqjPfaWnc58+Bigu5A77ZCtDCJ
HnNYxZWIrn36zJs8N9dbiubXogUIdGT6kWzLfr8xoA/9XrzkpDVFz97ze7VDDKZ/
OOMcfetZWKwvZf9EgsSKFcCRnJXZZo7jewPJWZFfSwDaYHjz8unBWDEGuggqvqVO
AfstM2WLFgciriwQxKtiHATQLGWQHd3aV8kydVnmwIug+6wpBUmcM0Fpug==
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:52:50 2026 by rpki-client