Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS140198.roa
File: AS140198.roa (raw, json)
Hash identifier: l5q+s7/dTk4CDCyjILt3JOf7NonGtFiJEGfT4Lzh9zI=
Subject key identifier: 56:62:5E:99:A9:27:E2:8D:68:14:04:96:7E:0D:69:55:67:D5:A7:17
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 458D3482CFC11F9587E87B21F97C38CC0AECD8B4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS140198.roa
Signing time: Sat 04 Jul 2026 03:09:21 +0000
ROA not before: Sat 04 Jul 2026 03:04:21 +0000
ROA not after: Sat 03 Jul 2027 03:09:21 +0000
asID: 140198
IP address blocks: 145.223.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:8d:34:82:cf:c1:1f:95:87:e8:7b:21:f9:7c:38:cc:0a:ec:d8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 4 03:04:21 2026 GMT
Not After : Jul 3 03:09:21 2027 GMT
Subject: CN=56625E99A927E28D681404967E0D695567D5A717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:67:d4:17:44:c5:c5:79:78:64:da:4e:3a:
16:48:70:30:0a:97:8a:b4:52:10:67:ee:7e:8f:38:
97:41:37:89:a6:35:8e:64:48:7d:41:25:1a:10:d9:
30:01:3b:df:41:56:ab:8b:36:c0:ca:24:87:74:f8:
75:16:79:93:b4:e0:c5:34:0c:5e:72:8c:e8:56:f1:
52:7c:b6:b8:2f:26:28:c0:4f:ae:dc:f2:8e:73:e1:
00:93:4e:81:ad:9f:ec:25:c8:9a:d9:d8:87:cd:2c:
1f:a5:8d:0f:a2:03:c1:69:82:a2:b6:50:ba:d3:a4:
71:cf:8d:26:76:e3:ca:95:9e:70:2b:9f:c8:9c:b3:
d9:25:d1:3e:d0:7d:bc:f8:d7:24:0f:7a:9f:a8:01:
15:0f:30:a1:d9:f1:9d:4e:c4:6b:ce:d7:fe:8d:a0:
b3:ec:a8:32:74:9a:5d:34:eb:a0:bc:da:07:c4:51:
2d:f0:9b:fb:c7:64:cb:16:51:b4:15:7e:29:33:72:
19:74:7b:a8:bc:07:0d:18:b8:b6:18:06:33:72:7c:
33:d9:55:a8:c2:89:f2:e0:a2:34:fe:9c:b1:7e:b3:
bc:1f:0c:9b:b5:73:83:d4:f0:e5:be:e8:7d:54:78:
c7:25:1b:8a:c5:85:6a:be:f5:31:0f:12:d7:ab:c6:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:62:5E:99:A9:27:E2:8D:68:14:04:96:7E:0D:69:55:67:D5:A7:17
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS140198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.5.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ed:92:87:43:1b:f4:ee:8f:5b:dd:58:bf:ab:ea:cb:25:52:
bd:e3:9b:a4:29:07:6d:cc:ea:89:ea:62:84:b3:26:ed:4c:6f:
16:0b:c7:db:9b:e4:6e:89:f0:e1:1c:f1:6e:66:c4:75:a0:d5:
be:f3:82:a6:ec:f1:48:24:4c:e2:7d:4e:41:d0:f5:cf:f9:09:
be:5f:21:4e:01:8f:74:58:ba:0a:af:85:8f:fa:3d:c1:58:2c:
92:db:f0:10:ee:60:e1:f3:d1:27:4c:93:d8:31:ef:8a:08:63:
bb:e2:28:a7:68:b5:20:6c:94:1f:88:1f:b9:23:39:87:82:b6:
6f:a6:66:e4:4f:99:56:32:5f:cf:f2:a0:18:6b:31:a7:77:ea:
9e:5d:f1:45:ee:1d:d8:ad:bb:17:7c:e4:4d:95:09:f3:0d:75:
3d:97:1b:aa:3b:ea:b9:32:05:7e:5c:83:2a:bb:46:23:34:fc:
95:0f:01:62:fc:5a:4a:35:ee:43:72:5c:4d:10:bb:90:bb:50:
21:57:8e:4c:e1:ca:f0:fb:a6:77:60:5c:0b:37:16:33:66:7b:
ae:ad:e3:24:9f:d9:b0:f0:b8:d9:d2:00:76:89:29:a0:23:ed:
5b:c9:6d:04:44:0e:29:72:9b:7c:7b:73:51:62:e2:ce:86:46:
fc:f4:34:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:27 2026 by rpki-client