Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136322e302f32342d3234203d3e20343032323638.roa
File: 3138362e3234312e3136322e302f32342d3234203d3e20343032323638.roa (raw, json)
Hash identifier: h31f4WyJFFtA91Cv3A4pmQVzGBEFplAX902S88sT5eY=
Subject key identifier: 39:43:32:84:4C:AE:4F:36:B9:6D:3A:51:00:85:DF:F1:34:F4:E2:F0
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 6474CC62C61C8CB26CEBF3385848DAAA2E6591A8
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136322e302f32342d3234203d3e20343032323638.roa
Signing time: Sun 26 Jul 2026 10:31:19 +0000
ROA not before: Sun 26 Jul 2026 10:26:19 +0000
ROA not after: Sun 25 Jul 2027 10:31:19 +0000
asID: 402268
IP address blocks: 186.241.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 11:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:74:cc:62:c6:1c:8c:b2:6c:eb:f3:38:58:48:da:aa:2e:65:91:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 26 10:26:19 2026 GMT
Not After : Jul 25 10:31:19 2027 GMT
Subject: CN=394332844CAE4F36B96D3A510085DFF134F4E2F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5f:90:df:ab:40:d7:21:5f:7d:5e:d8:01:23:
63:af:16:27:e6:db:9d:fc:8d:db:c0:8d:e7:2e:0e:
10:f5:6b:c6:bf:aa:18:cd:27:6f:21:93:02:a4:49:
bb:39:fc:cf:4c:23:1d:7e:aa:1d:8a:c4:37:67:5c:
2a:1e:8e:a8:b7:53:33:ed:da:20:ff:37:31:d4:82:
9a:00:18:02:e5:92:0e:12:2a:30:e6:85:03:da:a3:
53:b2:27:f8:8b:c6:73:26:e0:28:ae:1d:e6:6f:14:
49:29:a4:ce:c0:86:db:49:8c:96:44:03:46:6f:d1:
af:e5:c8:5f:3a:86:ce:9c:63:a4:0d:a0:3d:e7:ec:
79:09:f3:34:f4:c6:d0:5a:33:d3:e4:a7:08:76:62:
e2:cd:25:58:be:cf:43:92:c8:8a:de:a5:a0:7f:35:
e8:81:01:d8:49:50:05:35:2c:99:0c:be:ac:a0:87:
5b:b3:71:20:f6:55:07:ab:39:00:de:2d:fe:41:2c:
ae:d8:51:f0:1a:e7:8b:61:b3:cc:c0:20:ae:04:7c:
b8:3e:d5:77:26:4f:72:1c:a1:43:6d:a3:8f:0b:92:
a7:93:77:06:e7:3c:14:68:9b:90:9b:76:53:c8:70:
3a:e7:c2:a9:fb:20:a8:ba:d4:25:36:1f:a9:97:d5:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:43:32:84:4C:AE:4F:36:B9:6D:3A:51:00:85:DF:F1:34:F4:E2:F0
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136322e302f32342d3234203d3e20343032323638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.162.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ad:e0:d4:29:e4:ce:b1:f3:49:2f:b2:72:4c:f8:29:45:51:
5d:23:be:4a:0a:21:48:85:7c:28:72:28:2a:62:b5:16:c6:3e:
84:7b:33:5a:29:a9:f8:3b:1d:fb:3e:33:8e:df:90:fb:49:2d:
35:26:eb:55:6f:ed:48:a2:b1:36:63:d9:26:ab:5c:a4:8a:cd:
55:0d:8b:f4:33:9d:27:14:78:c8:bb:e9:b7:04:12:be:1c:2e:
e2:84:6f:a4:5c:54:8d:fc:57:f2:41:58:62:89:ef:9d:b2:16:
63:93:39:8b:83:1b:97:ef:52:b1:07:49:61:17:e7:ca:1a:fb:
fe:4a:c6:1e:fe:aa:1d:d4:65:d4:e1:14:9e:20:26:fd:52:55:
27:08:b9:ce:72:d6:34:ee:74:db:4e:88:74:5c:9b:ee:69:c5:
32:f9:d5:5a:14:40:50:5b:db:13:bc:22:ba:17:b7:06:cb:28:
e8:03:62:dd:2f:dc:b8:db:6e:49:0e:32:6c:3e:66:30:f9:4a:
e7:1e:78:78:d1:26:40:0d:a9:25:58:85:4d:98:60:2b:e9:4f:
69:5c:4f:e9:2e:f1:cc:22:e7:72:2a:77:6e:48:90:70:4c:42:
35:d7:b3:2f:df:3f:3d:ff:70:0f:9e:00:c1:e8:6c:28:cb:10:
7b:e3:91:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:30:07 2026 by rpki-client