Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3139302e302f32342d3234203d3e20343032323638.roa
File: 3138362e3234312e3139302e302f32342d3234203d3e20343032323638.roa (raw, json)
Hash identifier: 4oMlO6aAzDb42XYxfOMkEHCq1dfDiV/Ji4lLCEt07Nc=
Subject key identifier: 65:57:57:DD:25:8C:A0:99:66:80:08:53:5F:EE:78:86:69:22:24:1C
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 21A7EBB5218E911823F34306B0A66A8A26332406
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3139302e302f32342d3234203d3e20343032323638.roa
Signing time: Sun 26 Jul 2026 10:28:59 +0000
ROA not before: Sun 26 Jul 2026 10:23:59 +0000
ROA not after: Sun 25 Jul 2027 10:28:59 +0000
asID: 402268
IP address blocks: 186.241.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 11:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:a7:eb:b5:21:8e:91:18:23:f3:43:06:b0:a6:6a:8a:26:33:24:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 26 10:23:59 2026 GMT
Not After : Jul 25 10:28:59 2027 GMT
Subject: CN=655757DD258CA099668008535FEE78866922241C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:6e:75:1e:9b:37:b0:40:ff:57:38:8c:de:
c2:9c:a4:e8:52:e7:6e:76:1e:9d:32:7a:a2:94:c4:
2a:95:cf:07:7a:37:d4:7e:f3:ec:5f:68:b0:ed:61:
eb:72:1b:71:4c:ad:aa:34:4e:4f:b3:11:7e:05:38:
57:f3:3e:65:4d:36:ea:a0:2d:49:69:85:8e:7d:e3:
d3:98:86:5f:dc:b3:a4:8b:fb:58:6b:df:a9:79:ca:
41:8a:27:bb:ad:c1:bf:0a:8c:46:08:9f:05:d0:17:
f5:38:65:84:8f:6d:2f:82:d8:9e:03:a9:d6:a2:29:
09:ef:a5:3e:ea:94:b5:22:9c:a8:10:77:95:4c:cf:
42:f6:01:b9:80:fc:71:41:9f:9e:fb:5a:ff:ed:13:
9f:57:07:cc:d7:d1:80:e4:47:2d:f0:01:f5:7c:63:
68:67:b6:f2:67:c3:57:7d:24:4f:9b:5c:98:3f:73:
20:83:94:db:08:c1:fd:8d:c9:c3:56:09:b7:09:ab:
9e:b8:93:04:3a:bb:15:5e:9d:41:ef:75:05:70:86:
28:b6:8f:06:eb:11:9b:2b:fe:76:7c:67:31:ba:c0:
41:98:11:bd:c2:76:c6:ee:0f:34:02:07:99:6b:56:
b2:7d:96:2a:3f:5a:0c:e9:e4:03:df:38:a0:16:fd:
51:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:57:57:DD:25:8C:A0:99:66:80:08:53:5F:EE:78:86:69:22:24:1C
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/3138362e3234312e3139302e302f32342d3234203d3e20343032323638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.190.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ed:5b:64:f0:38:b1:97:87:5f:75:8f:29:a4:1e:f9:3b:17:
a9:76:0f:9c:4e:0a:6d:c1:52:f8:49:f9:db:12:38:ff:98:fb:
1b:93:c8:38:28:4f:1b:b7:98:93:4f:4a:5a:9f:dd:d4:a5:13:
ce:22:a9:7c:7e:91:74:c3:b4:65:65:02:82:71:f5:38:3e:8b:
0f:21:9f:51:f4:c9:03:87:1a:8f:dc:8a:58:0a:98:95:84:c2:
3f:9b:62:46:3a:50:7b:33:98:17:0b:00:85:8a:d1:bf:c3:1b:
03:fa:6a:0b:40:e8:c0:ce:1a:ef:af:10:81:de:12:d4:88:f3:
9d:2e:2a:a4:8d:a1:b6:69:39:d2:e2:54:22:aa:ac:e2:81:0e:
f0:41:e6:de:f5:68:bb:60:cd:57:f6:bc:c2:75:50:d5:c4:fa:
cc:20:a5:23:9d:ea:b2:1c:e0:dd:59:be:50:6b:eb:76:d8:28:
53:2c:29:3f:f5:d0:1c:43:50:58:99:14:f3:61:03:4d:66:f7:
97:a6:9f:1b:5c:49:dc:39:60:18:4c:44:ba:c8:5c:a3:8a:91:
12:02:4f:bb:26:bf:79:6d:d0:fe:23:70:57:89:a5:3a:51:25:
93:47:eb:51:b2:9f:b7:90:94:a6:f8:06:36:10:ee:c5:47:3e:
15:0c:b6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:30:21 2026 by rpki-client