Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS140681.roa
File: AS140681.roa (raw, json)
Hash identifier: ugRwJm+3cl+Boe9cq6kStk3Xxd3XDT6LUqDn/yMg/t0=
Subject key identifier: CB:79:07:92:A1:18:D6:B1:C8:28:CF:10:A1:20:AA:82:BF:B1:7D:DE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7F443639EF0771AAE0312C5F3C64B17FCF14AE8F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS140681.roa
Signing time: Tue 08 Sep 2026 16:44:19 +0000
ROA not before: Tue 08 Sep 2026 16:39:19 +0000
ROA not after: Tue 07 Sep 2027 16:44:19 +0000
asID: 140681
IP address blocks: 147.79.12.0/24 maxlen: 24
147.79.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:44:36:39:ef:07:71:aa:e0:31:2c:5f:3c:64:b1:7f:cf:14:ae:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 8 16:39:19 2026 GMT
Not After : Sep 7 16:44:19 2027 GMT
Subject: CN=CB790792A118D6B1C828CF10A120AA82BFB17DDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:6a:0f:b6:77:78:45:39:f9:70:0d:ce:de:
c4:db:d6:47:cd:a0:bf:3d:1d:2d:b6:77:7d:b6:0f:
1e:c8:0e:03:1d:31:2f:56:f6:5c:77:2b:89:c2:e3:
d8:c0:4d:cf:09:4c:f4:4e:74:43:a1:70:66:35:8f:
c0:03:18:15:b5:2f:82:ef:49:5b:7e:6a:b7:61:ed:
14:8f:39:b6:55:c7:95:50:12:fd:ca:ac:a6:c2:a9:
ad:8e:69:26:9e:8f:3f:46:84:d0:3d:3e:b1:8d:ee:
fb:f7:ab:49:32:39:48:9d:e9:5c:d4:ef:4b:82:62:
42:51:17:71:30:65:21:78:36:50:6e:69:fd:30:ee:
b0:ff:59:88:eb:26:06:53:9d:38:3c:2e:6f:4d:cd:
cd:36:b8:87:31:c6:4b:d1:7e:85:e8:fc:e1:7b:71:
45:e5:15:9d:69:fe:98:ec:f2:28:34:fc:59:46:ac:
1b:db:af:bb:1d:a5:8d:30:19:68:74:22:0c:83:cf:
58:ef:36:df:c4:ef:60:50:8d:72:90:c6:a0:7c:96:
2b:eb:56:8e:26:4f:ee:79:b4:0b:47:71:01:8b:2e:
da:dc:5a:64:a9:8b:bd:99:ca:40:84:3f:21:82:2b:
3b:e5:af:ab:a5:7c:37:c0:e6:1d:55:5c:b3:ab:6a:
05:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:79:07:92:A1:18:D6:B1:C8:28:CF:10:A1:20:AA:82:BF:B1:7D:DE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS140681.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.12.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:2a:96:ad:68:1a:94:6f:9f:1b:e8:41:b3:f2:48:a2:87:be:
88:e6:1a:56:45:e5:2a:86:1d:b7:3d:b0:c9:76:71:03:ea:6c:
05:8d:7c:2f:29:a8:c5:5c:41:6b:0d:bd:ab:0a:cd:54:60:d1:
e9:57:e4:a1:0c:77:05:58:15:e8:b1:06:30:62:e8:7e:39:16:
64:c5:c2:b8:aa:f2:85:d3:e8:08:62:81:51:92:f8:f9:5a:20:
42:ef:a9:44:f5:46:c3:d1:96:ab:8a:c3:32:1b:6e:a2:a6:15:
1e:47:2b:88:10:59:26:8a:89:6c:54:de:c1:61:8d:b1:cd:d8:
98:73:19:62:a9:1b:af:6a:37:5d:6d:55:33:35:3b:1e:db:56:
40:8c:82:48:5f:6d:35:06:d4:dd:23:bd:55:77:39:d3:15:3c:
fc:f0:90:5a:c9:68:8c:fe:eb:06:f8:8c:fd:36:23:8d:05:fb:
92:d5:5e:f5:36:6e:00:5d:ef:38:c5:06:b2:f8:53:70:ff:53:
5f:ca:cf:f0:8a:63:52:97:b1:d1:4b:e0:75:ec:7b:a8:33:1a:
87:e6:4b:af:fa:14:78:8c:a9:66:e0:61:cb:ae:b1:b0:a9:dd:
44:c0:a5:ab:cc:c9:6b:09:96:e2:88:aa:d6:94:7f:12:81:8e:
7e:8e:2c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:52:38 2026 by rpki-client