Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138362e302f32342d3234203d3e20343032323638.roa
File: 3138362e3234312e3138362e302f32342d3234203d3e20343032323638.roa (raw, json)
Hash identifier: iT5XuP28mXdBzlkIal6EGJOTaeEuEJl5LDeVx1/kY3M=
Subject key identifier: 2D:E1:F5:E3:7A:A8:ED:2D:52:A5:C3:40:EB:BC:DA:B1:2C:86:13:D3
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 5E50E5F05C19BDA91B564D3227CBC269AE76A690
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138362e302f32342d3234203d3e20343032323638.roa
Signing time: Sun 26 Jul 2026 10:32:03 +0000
ROA not before: Sun 26 Jul 2026 10:27:03 +0000
ROA not after: Sun 25 Jul 2027 10:32:03 +0000
asID: 402268
IP address blocks: 186.241.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 11:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:50:e5:f0:5c:19:bd:a9:1b:56:4d:32:27:cb:c2:69:ae:76:a6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 26 10:27:03 2026 GMT
Not After : Jul 25 10:32:03 2027 GMT
Subject: CN=2DE1F5E37AA8ED2D52A5C340EBBCDAB12C8613D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0e:c3:63:8a:af:d3:a8:9b:b7:90:e9:d5:fb:
00:8b:ad:93:d6:d6:d5:b0:a8:61:d7:0f:86:90:0d:
9e:b7:4d:e2:87:64:96:72:35:11:dd:9e:e3:50:04:
c4:ec:81:10:73:c6:cd:af:20:89:22:ef:f0:43:03:
a4:8d:29:06:11:a3:e9:ae:73:c0:e4:03:0e:a4:61:
e8:6e:c1:50:a1:58:f5:3f:cc:c0:13:c3:31:2a:3c:
e6:51:3d:b3:c8:cd:6e:6f:8d:40:b6:67:60:ac:55:
30:14:7e:e8:a1:c9:dd:11:07:6d:61:b3:a6:86:bf:
36:90:18:d4:18:25:ec:4a:f9:31:68:91:41:ec:11:
31:26:c9:9f:77:ee:9a:57:f3:f0:be:6c:58:88:1d:
fb:3c:e2:e3:85:1a:c6:de:94:00:85:fe:52:6a:ea:
5d:7d:cb:7f:ed:a5:e5:6a:bf:c7:2b:e9:fb:7f:bb:
a6:0d:2b:73:0a:7e:10:37:2d:cf:fc:e8:b3:5f:ce:
c2:3a:23:ef:d2:a9:d7:af:6e:0c:72:6a:17:0f:4e:
95:7a:ce:44:bd:83:61:8c:58:76:d1:b2:31:e3:88:
3e:ab:d1:fe:3f:b0:cd:d1:d0:b3:b5:cb:e4:c5:40:
60:09:b7:28:00:85:95:d1:3f:82:62:e1:a8:d4:c3:
5b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E1:F5:E3:7A:A8:ED:2D:52:A5:C3:40:EB:BC:DA:B1:2C:86:13:D3
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3138362e302f32342d3234203d3e20343032323638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.186.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:2f:4e:2e:06:1d:56:43:b0:d9:51:63:3a:01:13:c5:7f:38:
f0:0a:d1:42:b2:0c:74:41:fa:44:99:34:a4:ed:70:fc:97:32:
0e:ba:ef:7a:16:31:17:58:77:d7:75:62:ac:a3:e3:63:b4:0a:
4c:a4:11:7d:ac:21:c5:58:3f:03:80:24:c4:b4:93:ec:9a:25:
91:4f:11:60:5e:92:6e:9c:c1:4e:37:e8:5f:6f:9e:c4:f3:e2:
2e:96:c9:2b:fc:fe:92:e2:cd:9f:05:68:e3:98:94:bb:10:5b:
bf:06:b0:fb:f5:93:c8:fb:34:55:a9:58:55:a4:8f:b5:66:c1:
f7:bc:72:cc:e0:25:23:72:da:30:a3:48:5b:55:ac:b2:9c:8e:
a3:b0:0f:1d:9d:40:13:f0:43:9a:c6:b3:79:2d:23:01:3b:c4:
93:48:62:9d:5b:43:6b:f5:e4:25:03:88:59:b1:d3:9e:11:82:
8f:2b:80:20:c8:39:8c:da:95:f7:e3:53:ef:36:e0:6e:5d:bb:
5c:b6:ff:53:e4:36:e1:57:67:38:7a:2c:58:d1:a2:c6:98:28:
f4:06:7b:24:a7:d0:29:b1:35:7e:68:62:a7:fa:be:0b:12:35:
20:d8:19:1c:d4:a5:81:a2:8a:dd:a6:9c:da:70:f5:4c:1d:4b:
1a:31:fa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:30:21 2026 by rpki-client