Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137362e302f32342d3234203d3e20313432353137.roa
File: 3138362e3234312e3137362e302f32342d3234203d3e20313432353137.roa (raw, json)
Hash identifier: /XakExgsh29Vix7wYSbdefU+g0+c/sfgXa2QTdJUZVM=
Subject key identifier: CE:56:84:40:7A:83:A8:61:5D:E1:9A:BE:BC:D9:30:F7:03:3A:9E:AB
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 4943CFA7B4729EF7DC7306A25AD558799D6C5C30
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137362e302f32342d3234203d3e20313432353137.roa
Signing time: Fri 17 Jul 2026 07:13:51 +0000
ROA not before: Fri 17 Jul 2026 07:08:51 +0000
ROA not after: Fri 16 Jul 2027 07:13:51 +0000
asID: 142517
IP address blocks: 186.241.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:43:cf:a7:b4:72:9e:f7:dc:73:06:a2:5a:d5:58:79:9d:6c:5c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 17 07:08:51 2026 GMT
Not After : Jul 16 07:13:51 2027 GMT
Subject: CN=CE5684407A83A8615DE19ABEBCD930F7033A9EAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:d2:ad:15:d2:54:ca:dc:75:7e:d0:39:35:
cf:1a:58:23:29:86:cc:13:db:a1:98:d1:04:04:a0:
28:fe:d3:81:61:9f:7b:3a:8d:0e:13:c0:f9:21:fe:
60:66:70:5b:a6:62:8a:f3:a6:8b:8e:1b:c0:e3:36:
9f:e3:e7:19:86:5a:61:12:60:10:2a:fa:83:b1:2f:
77:57:55:ad:ba:0f:0b:2d:35:88:ef:ed:2c:ed:ab:
e5:d9:60:7f:69:0b:81:35:c4:74:eb:fb:4d:6a:e3:
11:a2:41:ba:0d:14:53:e1:e1:d6:0d:a2:90:46:4d:
23:17:64:0b:fb:21:53:98:83:b4:cf:30:9d:a7:70:
05:79:34:89:0f:69:9a:d1:fb:71:2a:13:89:bd:a6:
47:fe:71:19:48:08:f0:82:73:ae:f6:20:68:1f:10:
f3:a4:e0:9b:8f:64:e6:7e:88:ed:d2:6b:8a:a8:03:
85:1a:e3:5d:b0:73:10:47:44:3e:5f:18:50:28:93:
6e:58:bd:c0:1d:59:00:ea:56:b9:aa:66:3f:25:6a:
ed:b9:8c:8d:8f:9a:87:39:95:2d:39:22:e8:b4:c4:
8c:03:1c:a9:85:93:32:ce:3d:30:63:64:29:ff:9d:
0c:b9:1c:33:80:02:9c:e1:14:8b:cb:7d:44:a5:d3:
ee:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:56:84:40:7A:83:A8:61:5D:E1:9A:BE:BC:D9:30:F7:03:3A:9E:AB
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3137362e302f32342d3234203d3e20313432353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.176.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:6e:c4:48:19:3f:81:69:c9:7a:b6:92:62:b3:9f:76:d8:d3:
0f:23:37:64:5e:40:36:8d:14:19:ff:06:74:c8:66:22:65:13:
b2:50:28:e8:bb:0d:da:fe:76:dc:e1:f1:a4:e8:f4:ba:a7:fe:
94:44:c9:be:b1:9b:6a:ee:90:11:06:0f:b0:ef:1e:14:fa:ed:
d6:92:98:9b:9e:eb:59:ed:72:72:7b:86:f1:01:d1:fb:94:3e:
68:15:0b:12:dc:db:60:55:8d:2c:5c:6a:92:af:4f:04:55:06:
23:9a:8c:8a:8d:36:3d:9e:f0:25:fe:bb:3b:33:c2:7d:75:dd:
49:05:d1:f5:93:f6:7d:83:2e:0a:4e:eb:d5:0f:52:b4:1d:ad:
63:4b:52:35:72:85:3e:ca:d5:81:5b:f7:c7:5e:e7:10:7b:cf:
c4:aa:d0:7a:9d:b2:c7:bb:aa:cd:03:66:11:a5:48:5f:1b:cd:
4d:97:63:2a:d8:47:13:b1:bb:24:85:6e:c6:da:57:97:74:1a:
2d:ab:f9:bb:76:8d:d2:99:f9:b7:96:6d:91:70:86:7e:6b:fa:
29:95:93:0a:89:50:cd:42:d4:14:77:7b:5a:b4:51:7a:58:43:
3b:fa:4d:57:4e:07:c1:32:64:a5:e6:02:b6:b4:3f:5c:f6:ca:
e2:a6:bf:3f
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUSUPPp7RynvfccwaiWtVYeZ1sXDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA3MTcwNzA4NTFaFw0yNzA3MTYwNzEzNTFaMDMxMTAvBgNV
BAMTKENFNTY4NDQwN0E4M0E4NjE1REUxOUFCRUJDRDkzMEY3MDMzQTlFQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr3dKtFdJUytx1ftA5Nc8aWCMp
hswT26GY0QQEoCj+04Fhn3s6jQ4TwPkh/mBmcFumYorzpouOG8DjNp/j5xmGWmES
YBAq+oOxL3dXVa26DwstNYjv7Sztq+XZYH9pC4E1xHTr+01q4xGiQboNFFPh4dYN
opBGTSMXZAv7IVOYg7TPMJ2ncAV5NIkPaZrR+3EqE4m9pkf+cRlICPCCc672IGgf
EPOk4JuPZOZ+iO3Sa4qoA4Ua412wcxBHRD5fGFAok25YvcAdWQDqVrmqZj8lau25
jI2Pmoc5lS05Iui0xIwDHKmFkzLOPTBjZCn/nQy5HDOAApzhFIvLfUSl0+7JAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUzlaEQHqDqGFd4Zq+vNkw9wM6nqswHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEt
MDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvMzEzODM2MmUzMjM0MzEyZTMx
MzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMjM1MzEzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALrxsDANBgkqhkiG9w0BAQsFAAOCAQEATm7ESBk/gWnJeraSYrOfdtjTDyM3
ZF5ANo0UGf8GdMhmImUTslAo6LsN2v523OHxpOj0uqf+lETJvrGbau6QEQYPsO8e
FPrt1pKYm57rWe1ycnuG8QHR+5Q+aBULEtzbYFWNLFxqkq9PBFUGI5qMio02PZ7w
Jf67OzPCfXXdSQXR9ZP2fYMuCk7r1Q9StB2tY0tSNXKFPsrVgVv3x17nEHvPxKrQ
ep2yx7uqzQNmEaVIXxvNTZdjKthHE7G7JIVuxtpXl3QaLav5u3aN0pn5t5ZtkXCG
fmv6KZWTColQzULUFHd7WrRRelhDO/pNV04HwTJkpeYCtrQ/XPbK4qa/Pw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:50:52 2026 by rpki-client