Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142264.roa
File: AS142264.roa (raw, json)
Hash identifier: YiWgvvLDRieszd/g/JeZotUywfCXzI1mvM8IWWI9NGQ=
Subject key identifier: DF:FF:3B:15:1B:DB:38:E3:DD:BA:E1:87:B9:60:8D:94:FF:DF:25:5D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0100511542DC16D51E262C2A556EACBE5C5F1763
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142264.roa
Signing time: Fri 02 Oct 2026 10:30:45 +0000
ROA not before: Fri 02 Oct 2026 10:25:45 +0000
ROA not after: Fri 01 Oct 2027 10:30:45 +0000
asID: 142264
IP address blocks: 2a13:9500:1e7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:00:51:15:42:dc:16:d5:1e:26:2c:2a:55:6e:ac:be:5c:5f:17:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 2 10:25:45 2026 GMT
Not After : Oct 1 10:30:45 2027 GMT
Subject: CN=DFFF3B151BDB38E3DDBAE187B9608D94FFDF255D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:ed:ec:cf:0c:0d:c9:1f:21:27:bd:6f:bd:
6a:a3:66:29:d6:a8:81:9a:e6:d4:fc:82:6e:e9:4b:
65:a5:8c:cb:e9:6d:ec:d8:ac:0a:23:18:a6:c6:f1:
52:b0:b8:6a:cf:d3:4f:47:6f:0b:38:b0:c5:30:8c:
66:f7:83:69:f2:b6:da:17:49:20:51:01:3e:49:11:
0b:0e:9b:72:42:68:9e:5a:73:35:c8:65:ad:44:0c:
7b:d0:9b:c3:3b:30:da:af:5e:b8:98:b7:33:14:4e:
d7:9a:55:fd:9f:9d:78:5b:f3:20:fa:ca:c5:f0:b2:
5f:13:49:fc:01:35:4b:37:0b:c6:b6:16:ad:fd:ae:
8f:d6:da:ab:aa:62:e7:3a:c9:af:1f:e5:da:58:82:
32:58:2c:2d:28:4c:5a:9e:5e:cc:02:67:30:18:6a:
63:48:13:4f:d4:cb:0e:35:61:1f:aa:5e:da:15:59:
90:c4:96:a7:a3:41:8b:42:00:96:e7:9c:ab:c7:1b:
a5:d0:d3:02:da:56:c7:73:9f:d2:db:90:8e:20:1a:
aa:45:37:dd:cf:95:60:86:57:28:0b:6a:35:5f:19:
f7:f2:46:cc:e3:77:b4:a0:c7:61:24:eb:f6:7a:ba:
8d:12:c6:f4:fc:09:4c:81:eb:54:ef:27:c7:fd:ec:
11:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FF:3B:15:1B:DB:38:E3:DD:BA:E1:87:B9:60:8D:94:FF:DF:25:5D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142264.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1e7::/48
Signature Algorithm: sha256WithRSAEncryption
96:df:13:81:84:5c:2f:4b:7a:fd:be:4c:71:ec:71:46:4a:ed:
33:a3:ce:a6:80:32:c4:1f:f6:c5:0c:37:42:a7:78:df:41:bd:
2b:74:98:ff:23:32:34:de:77:b6:c2:f7:15:d1:04:f0:f3:c8:
0a:a5:e0:dd:42:b5:93:c1:61:34:6d:da:47:e2:b0:19:ef:bf:
d4:0f:49:fe:85:74:cb:56:60:5d:04:38:31:17:5a:f3:64:4c:
05:c7:37:2d:f2:d5:a4:ba:59:2e:b9:6b:76:02:51:0e:92:91:
bc:f6:e0:f1:3e:ff:fd:05:36:0e:7c:50:13:61:ca:29:21:36:
ac:ed:19:79:f4:56:4a:84:9c:7c:ea:5e:80:a5:7e:85:a8:bc:
b3:f8:c9:f5:05:79:87:18:99:cb:14:1d:7b:8b:ee:33:eb:0c:
0f:67:ea:8c:33:93:c8:23:d6:0d:1e:bf:90:6b:f0:bf:b4:33:
cc:c6:61:00:da:d1:c9:a8:08:22:5e:f8:67:3f:ff:1c:7d:4a:
43:1f:71:9e:6f:e0:e0:2e:c0:98:d8:1a:2a:ec:58:42:f1:f6:
16:69:0f:2f:b8:33:b7:22:ea:50:1d:71:91:09:c8:1f:83:66:
c8:28:d6:19:1a:09:e2:6b:bc:b5:d0:0c:d0:09:3e:a5:e7:87:
ca:b3:fb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:13:09 2026 by rpki-client