Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136342e302f32342d3234203d3e20343032323638.roa
File: 3138362e3234312e3136342e302f32342d3234203d3e20343032323638.roa (raw, json)
Hash identifier: z/91PjsJF2BAUgI6DWwCq4lkocL2M5ZjQrjS8IT73Wc=
Subject key identifier: 65:75:8D:36:56:79:32:FD:C9:E7:08:62:C8:37:F6:21:1A:40:67:E5
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 54B91804F848B834D7332C196D94A7B511AA7B7A
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136342e302f32342d3234203d3e20343032323638.roa
Signing time: Sun 26 Jul 2026 09:53:23 +0000
ROA not before: Sun 26 Jul 2026 09:48:23 +0000
ROA not after: Sun 25 Jul 2027 09:53:23 +0000
asID: 402268
IP address blocks: 186.241.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 11:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:b9:18:04:f8:48:b8:34:d7:33:2c:19:6d:94:a7:b5:11:aa:7b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 26 09:48:23 2026 GMT
Not After : Jul 25 09:53:23 2027 GMT
Subject: CN=65758D36567932FDC9E70862C837F6211A4067E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0f:e1:cc:95:c6:80:b5:ec:2c:2c:b4:a6:47:
10:b5:5f:b0:e6:b5:e6:9f:ed:cf:28:cd:d3:2a:36:
f4:82:9a:e6:f5:fe:ee:bb:dd:54:bb:f9:33:a2:db:
00:d1:79:55:e1:ed:74:d1:b2:26:82:f6:60:7f:dd:
eb:59:31:ca:e8:68:87:09:27:eb:6d:83:20:f9:d4:
27:af:c1:45:03:e9:5d:85:ac:50:3f:49:77:68:dc:
4b:a6:8a:da:4f:4a:09:dd:d6:ff:0c:0c:34:15:22:
5b:d7:3f:bd:d7:d7:fd:8f:5a:10:a9:cf:61:af:2a:
44:4a:10:0c:be:77:62:c6:ec:f7:f1:b7:c2:1b:99:
4c:40:af:3c:ce:df:8d:1c:d9:d1:bf:a4:56:bc:cb:
2e:e9:92:2b:4d:d8:c8:84:ca:93:f5:34:b2:43:0a:
fe:5b:4d:fa:97:51:10:4b:e8:89:68:5f:89:89:06:
5a:c1:d1:f5:ea:4a:ec:a8:f4:64:ea:03:2e:9f:8b:
18:7d:b8:61:0c:0a:db:c1:46:fb:89:6f:ad:2c:b5:
49:42:4c:91:e8:1f:80:6f:44:32:9b:75:35:1c:b2:
6b:a3:13:ae:83:32:ae:d6:62:d0:85:88:56:18:e4:
01:ad:02:64:d3:46:ad:54:03:00:19:a2:dc:f4:d3:
97:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:75:8D:36:56:79:32:FD:C9:E7:08:62:C8:37:F6:21:1A:40:67:E5
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136342e302f32342d3234203d3e20343032323638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.164.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:25:75:72:96:8b:9a:d7:16:92:e5:5e:25:3b:36:d6:59:cd:
48:3d:1f:1f:6b:97:11:23:ac:c6:30:ea:59:ac:21:60:8d:a4:
bd:a2:cc:c1:a6:76:74:71:eb:f0:0a:6b:dc:fc:40:6a:58:c3:
3f:24:40:c2:1c:2e:f1:a0:0f:d6:93:16:63:83:a6:08:48:08:
15:97:60:1f:26:a1:33:04:b1:04:a8:12:15:b3:29:ae:b5:c1:
de:1d:43:f3:bf:1f:0a:2e:3d:92:45:46:10:1b:12:b3:1c:ff:
9f:33:f6:90:32:63:ea:db:fd:e6:17:63:7b:19:78:6d:f9:75:
92:bd:17:e9:f3:63:c5:0b:ec:ce:60:96:90:25:87:1a:62:b0:
6c:60:c6:d0:54:90:07:39:eb:a1:0c:7d:0d:74:90:6d:c2:76:
17:d3:4b:69:46:d5:2c:e9:45:62:bf:3c:4b:6f:e8:e7:d6:50:
48:2b:9a:3d:cb:52:6d:5c:f5:07:cf:d8:45:83:04:0e:af:d3:
a2:db:a5:64:9e:d3:3a:49:de:c1:dc:29:b1:4f:25:90:24:06:
88:44:38:af:30:f9:6a:ae:64:89:57:47:bc:58:b2:8f:29:5a:
97:fa:93:b9:47:80:00:ea:18:9d:8b:a4:88:4d:b6:5c:32:8e:
d1:6f:b1:c2
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUVLkYBPhIuDTXMywZbZSntRGqe3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA3MjYwOTQ4MjNaFw0yNzA3MjUwOTUzMjNaMDMxMTAvBgNV
BAMTKDY1NzU4RDM2NTY3OTMyRkRDOUU3MDg2MkM4MzdGNjIxMUE0MDY3RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXD+HMlcaAtewsLLSmRxC1X7Dm
teaf7c8ozdMqNvSCmub1/u673VS7+TOi2wDReVXh7XTRsiaC9mB/3etZMcroaIcJ
J+ttgyD51CevwUUD6V2FrFA/SXdo3EumitpPSgnd1v8MDDQVIlvXP73X1/2PWhCp
z2GvKkRKEAy+d2LG7Pfxt8IbmUxArzzO340c2dG/pFa8yy7pkitN2MiEypP1NLJD
Cv5bTfqXURBL6IloX4mJBlrB0fXqSuyo9GTqAy6fixh9uGEMCtvBRvuJb60stUlC
TJHoH4BvRDKbdTUcsmujE66DMq7WYtCFiFYY5AGtAmTTRq1UAwAZotz005fJAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUZXWNNlZ5Mv3J5whiyDf2IRpAZ+UwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzEzODM2MmUzMjM0MzEyZTMx
MzYzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMjMyMzYzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALrxpDANBgkqhkiG9w0BAQsFAAOCAQEAtCV1cpaLmtcWkuVeJTs21lnNSD0f
H2uXESOsxjDqWawhYI2kvaLMwaZ2dHHr8Apr3PxAaljDPyRAwhwu8aAP1pMWY4Om
CEgIFZdgHyahMwSxBKgSFbMprrXB3h1D878fCi49kkVGEBsSsxz/nzP2kDJj6tv9
5hdjexl4bfl1kr0X6fNjxQvszmCWkCWHGmKwbGDG0FSQBznroQx9DXSQbcJ2F9NL
aUbVLOlFYr88S2/o59ZQSCuaPctSbVz1B8/YRYMEDq/TotulZJ7TOknewdwpsU8l
kCQGiEQ4rzD5aq5kiVdHvFiyjylal/qTuUeAAOoYnYukiE22XDKO0W+xwg==
-----END CERTIFICATE-----
Generated at Sun Jul 26 23:30:05 2026 by rpki-client