Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136382e302f32342d3234203d3e20343032323638.roa
File: 3138362e3234312e3136382e302f32342d3234203d3e20343032323638.roa (raw, json)
Hash identifier: A6EXvunPt7Osi5bNWLKl17FNK7vlJb1g5rqa16OLnYc=
Subject key identifier: 5D:F4:1D:7B:EF:03:21:0E:71:62:6B:C3:BF:DF:CF:5E:20:77:32:88
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 0BE4908F4FEE35D6810E5386F05B6DA8E28709BD
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136382e302f32342d3234203d3e20343032323638.roa
Signing time: Fri 24 Jul 2026 13:28:43 +0000
ROA not before: Fri 24 Jul 2026 13:23:43 +0000
ROA not after: Fri 23 Jul 2027 13:28:43 +0000
asID: 402268
IP address blocks: 186.241.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 11:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:e4:90:8f:4f:ee:35:d6:81:0e:53:86:f0:5b:6d:a8:e2:87:09:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 24 13:23:43 2026 GMT
Not After : Jul 23 13:28:43 2027 GMT
Subject: CN=5DF41D7BEF03210E71626BC3BFDFCF5E20773288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:f2:72:8d:1e:06:87:b9:b5:65:30:1e:f1:
c1:6c:fc:2f:38:34:f3:68:9c:63:df:84:6f:63:81:
92:4d:fd:b0:2c:e2:a0:d9:a1:21:9f:7d:14:81:a9:
49:99:a0:ba:f1:ec:a3:41:18:99:5b:df:64:32:37:
6e:cc:c1:53:a2:ee:30:2a:5f:ca:d7:02:ad:dc:f2:
39:32:06:84:b2:8b:46:b8:83:7b:29:5a:38:f8:b9:
5f:4d:e8:14:d3:e6:ae:b0:e2:3a:44:0f:1b:a6:d0:
d3:84:7f:9e:6e:99:17:69:ed:4c:f3:74:aa:43:d6:
bc:27:9e:c0:c0:21:3d:19:79:82:d7:03:0f:a0:70:
09:6f:58:84:ef:4e:96:42:e2:e0:f9:1e:73:3d:7b:
9f:7e:73:7f:10:bc:b0:9c:91:2a:ac:e6:13:82:a6:
55:cc:8d:3e:37:d4:d4:cd:3e:38:07:13:08:22:5a:
b6:be:a5:56:9b:4a:2f:68:aa:5c:02:f1:4f:6e:21:
f1:8a:a5:69:f8:50:5b:9a:a4:78:12:9c:24:62:d4:
04:36:ac:60:6e:32:82:bc:1e:3c:21:ee:fb:37:18:
d7:ad:68:bd:b2:75:28:95:1a:d8:bd:31:b7:06:ee:
64:45:02:37:81:22:b8:c7:e8:62:3b:82:42:6b:08:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F4:1D:7B:EF:03:21:0E:71:62:6B:C3:BF:DF:CF:5E:20:77:32:88
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136382e302f32342d3234203d3e20343032323638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.168.0/24
Signature Algorithm: sha256WithRSAEncryption
87:9f:db:dc:95:f0:30:ab:6a:e2:9f:d2:d9:43:9b:4b:c7:cb:
64:68:4a:f7:02:dc:88:9c:9b:14:37:7e:ed:64:fe:09:79:13:
9a:f4:db:6e:63:15:26:42:07:69:33:02:e7:24:9e:ec:da:f5:
52:9a:78:53:31:30:e9:47:5b:7d:9e:bc:6e:67:b5:6b:20:20:
79:f6:0f:de:fe:af:ff:dc:e9:cb:45:22:28:b0:4f:78:4b:e0:
33:15:eb:96:e6:13:85:93:e7:38:d3:e8:c5:2a:c8:12:f3:61:
2f:0e:99:53:3c:92:86:59:d4:22:30:f5:e2:62:f8:b4:b3:c0:
ab:8d:06:ee:d4:f4:d6:28:2d:fd:92:24:8c:f4:44:5b:cd:96:
b6:8d:38:ab:a3:85:af:ce:37:8d:d8:91:a9:02:84:47:fd:0e:
bc:09:b6:81:14:0a:b6:97:86:d6:e9:a1:94:4f:e6:f4:99:15:
80:c0:63:9a:8c:a8:1e:c0:87:3a:18:64:79:53:5d:b3:55:68:
e5:15:d8:5e:53:dc:da:9d:18:f4:54:92:67:76:d1:11:03:bb:
47:ec:06:dc:9f:8d:3e:7e:91:a1:2f:56:d5:63:8b:b7:e7:03:
2e:8b:a5:e2:c4:54:ed:df:fc:dc:9d:b2:cd:6d:2b:99:b6:96:
52:a8:94:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:30:21 2026 by rpki-client