Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: LO1mCpd6nF+vif5TIn1RbNi3geIK3w+s9nCZf2JW+SY=
Subject key identifier: 51:48:3F:9B:F9:C5:5B:50:66:B2:B5:F0:C4:A5:15:4C:31:41:84:E7
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 234F325985C67BA459D9A188859B54CEE2D6FD04
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS147281.roa
Signing time: Mon 05 Oct 2026 04:35:02 +0000
ROA not before: Mon 05 Oct 2026 04:30:02 +0000
ROA not after: Mon 04 Oct 2027 04:35:02 +0000
asID: 147281
IP address blocks: 78.105.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:4f:32:59:85:c6:7b:a4:59:d9:a1:88:85:9b:54:ce:e2:d6:fd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 5 04:30:02 2026 GMT
Not After : Oct 4 04:35:02 2027 GMT
Subject: CN=51483F9BF9C55B5066B2B5F0C4A5154C314184E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:04:9c:34:3c:31:2f:2a:6e:c7:bf:be:ac:
9d:6d:ff:35:0e:90:ea:a6:3a:0f:95:a4:7c:bb:bb:
58:2d:a2:8a:00:fd:1a:5e:6d:65:c8:98:42:7a:fe:
31:39:b9:73:91:95:ed:3c:0b:54:7f:72:92:16:26:
06:90:38:2d:b0:ba:b4:f5:86:01:3e:b7:e0:be:b9:
f9:47:62:27:bb:95:f5:2b:2b:a3:78:d5:41:27:46:
81:b3:cf:22:b1:c2:67:27:f2:e5:bc:cf:78:ba:4c:
78:13:50:b3:69:b9:45:5a:1f:35:cb:a9:c6:a2:e1:
12:70:b8:78:ef:36:d7:d3:96:1c:e3:e3:d8:83:51:
c2:9c:ef:be:0b:c9:31:58:2d:e6:ac:86:5b:54:78:
3f:ed:89:5d:74:4a:be:97:ed:14:15:c5:c3:35:67:
0d:6b:0e:54:41:d1:42:8b:a7:eb:8a:34:29:3e:49:
ab:14:2a:27:62:95:72:c7:50:25:97:09:ef:21:4c:
c2:97:dd:3f:bd:3d:24:35:a6:57:fe:f4:98:fd:a8:
53:4a:78:47:d4:8e:d8:86:55:b4:7c:c7:33:22:58:
22:86:61:87:fb:66:c2:b2:6e:93:fb:03:b7:b3:1b:
1a:7f:36:8b:e4:6d:a3:89:4d:01:c4:fd:25:60:48:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:48:3F:9B:F9:C5:5B:50:66:B2:B5:F0:C4:A5:15:4C:31:41:84:E7
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.160.0/24
Signature Algorithm: sha256WithRSAEncryption
32:94:0c:bb:c9:ed:e8:40:55:60:36:a0:a1:2f:03:9c:9e:c6:
6e:b8:ea:fc:02:43:0c:c3:02:e4:5c:05:f3:a7:6a:64:97:5f:
d5:9e:c4:94:0d:ba:dc:ab:e2:ea:8e:3f:3d:a1:a7:4d:e3:09:
50:21:e9:09:6a:5c:a2:d3:7f:0c:60:ec:92:2d:82:b9:99:73:
ca:3a:50:d4:43:29:33:df:aa:25:a2:dd:6c:12:81:b6:4b:f4:
5f:68:54:38:12:a1:88:a0:fa:31:24:71:fc:78:9d:c6:bb:ed:
26:dd:5b:52:bc:0c:c4:e3:e4:60:f2:c3:b5:cd:4d:5c:22:21:
62:6c:b4:eb:98:d9:7a:2d:d5:4a:63:b3:f6:23:f5:21:7c:79:
41:fb:cc:a9:0e:8d:a0:db:2e:8b:26:83:97:c4:65:6f:7a:94:
ed:54:51:19:2c:3e:a9:e3:fe:25:72:9a:2d:52:87:4c:f3:42:
06:a2:7e:c3:10:05:3c:45:17:50:7d:d4:44:f5:dc:a9:ca:61:
d1:7e:02:1d:13:86:17:bc:32:0c:2e:77:b8:ff:11:7d:be:83:
6d:51:fb:a8:6f:b6:5a:c8:d6:84:0f:21:e6:c2:47:fb:0a:fe:
3c:e1:9d:b5:82:1f:92:41:d2:37:54:1d:14:1b:9e:21:c1:4a:
95:04:2f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:54:49 2026 by rpki-client