Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136392e302f32342d3234203d3e20343032323638.roa
File: 3138362e3234312e3136392e302f32342d3234203d3e20343032323638.roa (raw, json)
Hash identifier: sT2nXiJz2gRcfKetP/if4cF/ot26Mtah0hKSdfiyj/Y=
Subject key identifier: EF:14:BE:67:18:6E:07:7E:21:66:58:93:AB:81:0E:C4:AF:26:4B:F0
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 7D63EB0691351067B5B82FAF145188B6E7979075
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136392e302f32342d3234203d3e20343032323638.roa
Signing time: Sun 26 Jul 2026 10:35:11 +0000
ROA not before: Sun 26 Jul 2026 10:30:11 +0000
ROA not after: Sun 25 Jul 2027 10:35:11 +0000
asID: 402268
IP address blocks: 186.241.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 11:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:63:eb:06:91:35:10:67:b5:b8:2f:af:14:51:88:b6:e7:97:90:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 26 10:30:11 2026 GMT
Not After : Jul 25 10:35:11 2027 GMT
Subject: CN=EF14BE67186E077E21665893AB810EC4AF264BF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:61:f5:c9:a8:e1:5c:f1:c2:04:06:0c:3a:
db:49:07:74:ac:a8:c8:02:a4:c0:ed:87:ea:3e:a5:
1e:b2:35:6e:d4:4c:83:0e:7b:cb:a2:a9:e7:2a:43:
b5:ae:50:dd:f4:72:fa:b9:b0:27:d9:6a:cb:00:54:
9f:15:e5:83:fd:41:7d:3c:2e:4f:5f:fe:7b:12:4f:
6b:96:73:d5:80:96:f5:b0:cb:29:b3:47:81:09:a1:
f2:42:75:d3:f2:0a:67:48:3b:ac:96:a1:27:a7:30:
2a:cf:9d:53:34:c0:41:75:d7:6b:cf:64:76:83:2f:
be:72:bd:ac:15:c3:67:27:3b:cb:fe:37:76:92:79:
1b:a1:6c:b3:82:04:71:ec:21:f3:e0:bb:df:93:07:
92:fc:e2:49:16:c0:ed:7a:f3:ab:5b:26:98:50:44:
ce:ba:45:71:41:b1:06:a9:97:d1:3c:8e:52:40:01:
b4:dc:d7:df:be:48:d2:e8:c9:10:fc:77:f8:12:a1:
5d:a0:79:de:07:32:5b:41:a9:d2:52:f2:cb:b6:2f:
5c:c6:2d:1d:f7:d1:97:75:59:cf:6c:f7:7a:e1:42:
8f:e7:52:60:ca:19:32:6b:b6:b0:1b:0c:fe:e7:4c:
a0:6b:6e:c3:eb:1e:8f:f5:e6:13:f2:ac:9b:98:48:
79:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:14:BE:67:18:6E:07:7E:21:66:58:93:AB:81:0E:C4:AF:26:4B:F0
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3136392e302f32342d3234203d3e20343032323638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.169.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:86:88:59:2b:79:62:7e:b7:4b:ce:b2:fd:f8:d5:ad:bd:7c:
02:b3:a2:fc:d8:b2:35:5c:82:25:22:a9:be:38:30:56:91:58:
41:0e:1a:ab:6c:2b:fa:70:1e:17:62:cf:93:be:28:1f:4e:70:
71:3c:eb:64:54:ca:21:74:4d:d5:73:f9:32:c4:c9:6b:65:00:
45:fd:d2:6f:cc:1d:58:dd:a6:f4:7e:34:c6:ef:a4:82:d6:c6:
d5:aa:9e:9b:2c:c1:13:4f:06:6b:f5:98:53:02:fe:f7:bd:54:
63:60:ee:fa:72:0d:57:1c:6c:1c:e0:6a:a5:21:1a:2c:16:40:
ee:6a:20:27:a5:73:1e:9d:03:ed:4e:88:10:9b:da:d8:98:c9:
e7:23:2a:57:61:84:af:f9:38:f3:30:27:7f:86:da:3b:6f:36:
64:2c:6f:04:bb:2c:67:93:7c:1e:27:49:5c:e2:ef:01:ea:20:
b6:7f:1b:69:33:61:31:25:2b:a5:4b:a2:f5:5d:19:5f:39:54:
94:c3:d0:cb:fc:b6:03:64:50:f9:fd:fe:7f:37:e6:c0:89:94:
75:8c:53:d4:5f:24:d2:93:63:35:6c:7a:25:4a:6f:90:4a:cf:
7a:32:08:bb:90:18:d0:c2:a8:17:47:ff:51:2c:44:23:b3:e5:
33:09:0a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:30:21 2026 by rpki-client