Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS142240.roa
File: AS142240.roa (raw, json)
Hash identifier: Nmq2+nppGpSlSOOIaJa8aFqyuA1n84wR78w/7qz7Qqw=
Subject key identifier: 72:07:ED:60:F5:6F:D6:83:88:DB:6C:B8:0C:6E:E7:1B:A0:18:95:FC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 794991AF0946460BFFB79FA2BF2ECE1D3B935DB8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS142240.roa
Signing time: Sun 09 Aug 2026 04:35:32 +0000
ROA not before: Sun 09 Aug 2026 04:30:32 +0000
ROA not after: Sun 08 Aug 2027 04:35:32 +0000
asID: 142240
IP address blocks: 96.62.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Aug 2026 05:58:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:49:91:af:09:46:46:0b:ff:b7:9f:a2:bf:2e:ce:1d:3b:93:5d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 9 04:30:32 2026 GMT
Not After : Aug 8 04:35:32 2027 GMT
Subject: CN=7207ED60F56FD68388DB6CB80C6EE71BA01895FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:a9:17:31:b3:91:e7:11:05:a0:2e:fb:f8:
72:b1:19:95:d1:de:f5:e4:1e:49:25:0f:fa:dd:2a:
5a:0f:aa:f9:64:0b:ea:b8:6e:70:31:f3:14:d9:d5:
13:8e:f2:e0:36:2c:13:b9:f4:fa:5e:bd:9e:ba:b0:
77:d9:0c:e6:94:45:6a:5f:e5:14:db:34:4b:b5:be:
80:48:7a:37:ec:e5:f4:97:5a:25:ff:cd:b8:2c:ca:
ba:3f:4c:fb:02:3b:20:cd:63:84:12:d5:54:5f:3f:
21:5e:ae:7c:8e:9e:c0:e4:86:d2:c9:6d:71:05:1b:
bb:9e:1b:7d:22:46:82:e5:f4:5c:b8:7f:4a:ed:0c:
b3:f6:b3:64:f7:99:0a:a2:31:ec:94:62:38:a1:22:
54:48:22:66:d9:a6:c7:34:9a:d6:41:6b:8c:d5:02:
f6:cb:33:90:40:3f:82:5e:52:15:22:06:d3:c5:b8:
43:4d:78:ba:db:6f:14:1d:0f:df:a5:c0:71:4f:ce:
df:62:10:cd:3b:56:9c:a5:a1:f0:2d:2d:9f:1a:75:
c2:cf:de:49:e3:5c:0d:d0:a8:a3:62:23:c2:71:74:
c5:71:af:e8:d2:96:f3:ad:0d:91:49:de:04:1b:f4:
f1:d0:a4:3d:e5:6f:ad:d2:b6:42:1e:a0:aa:51:13:
ea:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:07:ED:60:F5:6F:D6:83:88:DB:6C:B8:0C:6E:E7:1B:A0:18:95:FC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS142240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.219.0/24
Signature Algorithm: sha256WithRSAEncryption
67:82:df:58:b8:f4:2c:75:ad:84:c9:37:0d:64:a1:6c:8f:ea:
ed:18:d9:33:f9:41:f4:4a:65:1a:08:5e:af:4c:68:b1:f8:75:
32:05:08:ff:80:3d:4a:53:3c:b7:7f:4d:6d:6a:c1:17:14:9b:
44:67:6d:7e:d6:5b:6b:d3:f4:4b:25:d1:d0:d9:17:8f:d6:87:
e4:b2:2a:c3:dc:d2:8f:04:1d:c8:ba:2a:19:28:99:5f:f0:d5:
11:cc:6d:39:38:ef:d7:f5:60:6f:79:30:09:0e:ef:7c:ea:77:
c4:0d:d3:be:f9:14:72:78:d4:53:24:de:5e:bf:f0:79:1a:d9:
7a:1d:0d:0d:38:42:d8:cd:9f:4e:50:e2:42:a3:1a:19:46:2d:
6b:f6:4c:b4:c7:34:71:b8:f3:37:35:44:50:17:ec:10:03:b0:
05:17:55:4d:94:25:d3:2c:09:7f:de:8c:1a:cd:a0:a3:86:4a:
65:92:51:d8:fc:64:ee:8f:00:cd:6f:6e:d0:29:a0:48:a2:57:
6e:49:f5:ae:62:c6:cb:46:4a:9b:ef:95:7a:56:fc:0d:b5:f1:
c1:cd:7a:e1:dc:56:97:fa:c0:34:43:0d:c1:86:99:a3:24:ce:
6c:d0:e2:4c:b2:c7:54:61:17:07:cf:4f:15:88:e5:26:3c:11:
66:a5:2f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 15:14:59 2026 by rpki-client