Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136332e302f32342d3234203d3e20313532383638.roa
File: 3138362e3234312e3136332e302f32342d3234203d3e20313532383638.roa (raw, json)
Hash identifier: VQuelQl0BpZo8XNWo71hNVdjqWS0yOFwejamI1kOzkY=
Subject key identifier: 06:4D:D2:98:C5:D4:A5:58:1F:5A:50:90:C8:34:A3:6C:C1:E3:49:3C
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 4BC35E5235EEFC612BD0DB85C855C7520FDE56B5
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136332e302f32342d3234203d3e20313532383638.roa
Signing time: Thu 16 Jul 2026 09:52:37 +0000
ROA not before: Thu 16 Jul 2026 09:47:37 +0000
ROA not after: Thu 15 Jul 2027 09:52:37 +0000
asID: 152868
IP address blocks: 186.241.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 13:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:c3:5e:52:35:ee:fc:61:2b:d0:db:85:c8:55:c7:52:0f:de:56:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 16 09:47:37 2026 GMT
Not After : Jul 15 09:52:37 2027 GMT
Subject: CN=064DD298C5D4A5581F5A5090C834A36CC1E3493C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:93:11:58:5b:c8:ad:d0:b9:53:9b:0f:60:
0c:cf:ea:c3:e0:84:d8:ac:e0:c5:b2:2b:19:4a:ce:
63:95:9e:d0:0f:ff:8e:76:18:c3:88:06:2d:58:04:
0b:bf:67:4e:c8:be:b4:39:e9:44:af:3a:ed:2e:bd:
a9:92:b8:34:30:8e:1b:3a:be:ff:22:54:17:34:57:
28:cf:27:f3:19:03:cb:96:b8:0b:11:28:8a:33:2e:
9e:0d:53:4e:d9:4b:c0:3f:75:34:33:b3:2a:3a:b7:
9d:8a:9c:18:33:aa:ec:07:b8:15:0e:8d:c1:eb:2a:
fd:01:08:35:05:4e:69:fd:9c:a3:5f:6f:97:78:85:
49:b0:ab:e0:e4:b4:db:74:bb:bc:af:c4:3e:50:99:
4b:27:83:29:0a:8b:91:ca:90:27:b0:50:48:31:84:
df:53:d7:c9:16:66:2d:2f:15:1d:8b:c2:48:93:99:
f8:23:4c:8c:95:73:d4:b6:39:db:fb:c5:eb:3f:00:
e8:39:f2:57:4c:1c:f0:1b:72:68:86:7a:2c:83:c1:
59:7b:7e:6f:f8:2a:3d:02:45:04:01:dc:56:1e:fc:
36:64:99:6a:70:83:ad:4f:f7:6f:f6:46:dd:a3:36:
42:0d:80:9e:ec:0b:c5:81:68:94:2e:12:05:c0:87:
b3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4D:D2:98:C5:D4:A5:58:1F:5A:50:90:C8:34:A3:6C:C1:E3:49:3C
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136332e302f32342d3234203d3e20313532383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.163.0/24
Signature Algorithm: sha256WithRSAEncryption
51:e2:5d:02:a1:f6:9f:85:cc:4d:83:a9:7b:f2:2e:76:2d:a2:
d8:11:a8:75:bb:41:ff:1d:5f:57:9f:98:5b:c5:6c:0e:8f:07:
54:2f:f3:3c:4a:10:48:43:27:b5:67:f4:b9:fe:a7:81:15:f4:
26:a0:76:b1:14:ae:58:f0:01:01:f4:94:15:3f:62:4a:d2:6a:
45:33:9d:31:67:d0:8b:a8:b9:a3:96:a8:ad:cf:6e:30:19:3b:
23:bc:2a:27:87:ac:52:5f:73:25:87:f2:0e:ad:9b:54:6f:7e:
26:13:d3:5a:29:17:a0:0b:c5:7a:92:5f:30:2b:92:60:2d:aa:
66:4c:b2:01:ba:71:56:eb:14:21:28:89:82:a3:92:dd:a9:5a:
40:d9:a2:78:02:46:6e:0c:91:10:03:1d:ef:97:10:dd:b9:1f:
55:82:6f:ce:4d:8d:c6:5a:57:e8:33:0c:44:6c:a6:c6:0f:0c:
d8:fd:d5:0d:53:ce:ac:cf:4e:d1:3f:c0:c4:b8:b7:d8:de:92:
f8:02:fe:a0:d6:1b:8f:de:7c:52:ef:89:a7:c4:a9:b7:a3:4f:
17:29:a8:3d:c1:a6:4b:7a:ed:9e:86:d1:62:cf:6d:0c:bd:e6:
8c:9e:9f:7d:9a:30:ba:2e:08:22:be:28:d2:02:8a:e4:3f:97:
bd:b6:d5:e7
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUS8NeUjXu/GEr0NuFyFXHUg/eVrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA3MTYwOTQ3MzdaFw0yNzA3MTUwOTUyMzdaMDMxMTAvBgNV
BAMTKDA2NEREMjk4QzVENEE1NTgxRjVBNTA5MEM4MzRBMzZDQzFFMzQ5M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT95MRWFvIrdC5U5sPYAzP6sPg
hNis4MWyKxlKzmOVntAP/452GMOIBi1YBAu/Z07IvrQ56USvOu0uvamSuDQwjhs6
vv8iVBc0VyjPJ/MZA8uWuAsRKIozLp4NU07ZS8A/dTQzsyo6t52KnBgzquwHuBUO
jcHrKv0BCDUFTmn9nKNfb5d4hUmwq+DktNt0u7yvxD5QmUsngykKi5HKkCewUEgx
hN9T18kWZi0vFR2LwkiTmfgjTIyVc9S2Odv7xes/AOg58ldMHPAbcmiGeiyDwVl7
fm/4Kj0CRQQB3FYe/DZkmWpwg61P92/2Rt2jNkINgJ7sC8WBaJQuEgXAh7OXAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUBk3SmMXUpVgfWlCQyDSjbMHjSTwwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzEzODM2MmUzMjM0MzEyZTMx
MzYzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzYzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALrxozANBgkqhkiG9w0BAQsFAAOCAQEAUeJdAqH2n4XMTYOpe/Iudi2i2BGo
dbtB/x1fV5+YW8VsDo8HVC/zPEoQSEMntWf0uf6ngRX0JqB2sRSuWPABAfSUFT9i
StJqRTOdMWfQi6i5o5aorc9uMBk7I7wqJ4esUl9zJYfyDq2bVG9+JhPTWikXoAvF
epJfMCuSYC2qZkyyAbpxVusUISiJgqOS3alaQNmieAJGbgyREAMd75cQ3bkfVYJv
zk2NxlpX6DMMRGymxg8M2P3VDVPOrM9O0T/AxLi32N6S+AL+oNYbj958Uu+Jp8Sp
t6NPFymoPcGmS3rtnobRYs9tDL3mjJ6ffZowui4IIr4o0gKK5D+XvbbV5w==
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:56:28 2026 by rpki-client