Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137352e302f32342d3234203d3e20343032323638.roa
File: 3138362e3234312e3137352e302f32342d3234203d3e20343032323638.roa (raw, json)
Hash identifier: 9dHFsrmYFxdP4klrYcxeBAMnzrot6w2PCzA5G8J4Pn8=
Subject key identifier: B0:89:09:60:C3:2D:BA:E5:81:7B:AD:67:98:54:42:FF:7C:80:EA:26
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 3CFBD4714DDDFF20DCC4A13DAE37C1E86CDD3F88
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137352e302f32342d3234203d3e20343032323638.roa
Signing time: Fri 24 Jul 2026 13:27:59 +0000
ROA not before: Fri 24 Jul 2026 13:22:59 +0000
ROA not after: Fri 23 Jul 2027 13:27:59 +0000
asID: 402268
IP address blocks: 186.241.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 11:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:fb:d4:71:4d:dd:ff:20:dc:c4:a1:3d:ae:37:c1:e8:6c:dd:3f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 24 13:22:59 2026 GMT
Not After : Jul 23 13:27:59 2027 GMT
Subject: CN=B0890960C32DBAE5817BAD67985442FF7C80EA26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:49:9c:67:4a:83:71:a1:28:cc:bb:70:56:
3c:c4:db:4c:95:6d:8e:5e:d9:74:42:b8:0f:ef:9b:
e5:e7:54:95:f9:38:11:4f:8b:a8:6d:13:b7:d1:34:
18:f0:23:99:20:ed:b5:35:a0:c5:7a:4b:ae:38:72:
12:d2:1d:1f:35:c7:10:b9:ec:f4:5b:31:45:20:47:
c1:8f:41:00:f4:ff:63:be:9b:52:60:cb:c0:4b:f9:
e4:54:58:fe:f8:b0:5f:c2:ad:5f:99:e2:dd:77:fe:
e6:85:36:fe:bf:53:a4:e5:75:eb:93:27:44:7b:5e:
aa:39:ec:59:6e:0c:a7:80:8a:19:97:0d:15:44:0f:
5a:de:4e:c0:90:80:2f:0f:62:0d:8e:29:60:dc:ca:
85:90:5c:52:74:66:62:d5:ee:ca:1e:b1:92:58:1d:
4e:1f:b6:59:76:64:f0:e3:27:ef:6e:22:4b:3f:4e:
8f:85:05:82:4d:7b:5a:03:1e:2e:39:5b:a0:0c:ed:
57:d7:c7:64:4d:e7:48:15:bf:7c:e8:a2:9a:34:2a:
74:5c:6f:6c:cc:94:1b:fa:c7:1b:8e:da:f3:5c:4c:
ec:e8:43:c2:2c:c4:35:13:d5:0e:9d:69:17:ea:25:
e3:60:ec:1c:76:47:a4:a3:7a:ca:ec:cc:57:29:11:
a8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:89:09:60:C3:2D:BA:E5:81:7B:AD:67:98:54:42:FF:7C:80:EA:26
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137352e302f32342d3234203d3e20343032323638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.175.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:22:83:50:fa:3d:23:87:c3:47:73:81:70:3c:06:e9:ec:13:
c1:df:34:98:2a:f9:06:a2:b4:6e:ee:1c:a3:42:84:e4:53:22:
b4:c2:d5:eb:44:1c:f6:71:87:74:0a:56:96:6c:70:5e:fd:dd:
b1:ef:ed:85:a4:1e:95:2d:80:34:61:a4:40:7c:81:d7:c2:c9:
34:6a:e6:ce:38:8d:de:96:3f:a1:6c:4b:7c:1b:cb:64:71:52:
1a:0b:4e:8d:76:4e:c4:d8:f6:c4:60:a5:32:e8:a4:ee:07:6a:
21:d6:6b:35:81:ba:e8:9b:fc:ed:7c:2d:6c:3d:bb:c6:0d:10:
1f:31:01:13:96:84:31:a6:7c:61:4c:17:a6:21:97:2e:58:11:
1d:65:f0:76:78:c8:18:68:4a:8a:38:b5:c1:91:3d:4a:cb:89:
bd:a5:ba:65:18:fb:60:03:e3:1c:37:6a:03:2b:d7:ad:35:54:
11:cb:56:1f:60:84:37:c1:3a:f7:54:65:da:26:fd:5f:71:e2:
2b:af:9b:ae:99:7e:1a:8f:09:2d:1a:2d:2f:4c:82:44:8f:97:
e0:30:57:90:bc:40:fc:0d:e9:54:58:54:2c:4f:ee:87:9c:2b:
64:9a:e6:d6:0d:82:83:49:3a:bf:28:12:92:70:f8:88:e1:45:
4a:bc:d4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:30:21 2026 by rpki-client