Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS146906.roa
File: AS146906.roa (raw, json)
Hash identifier: ZEEtv4RPLk1tW8/TkzCXbd9xLazwobFpfHVLXjOPssM=
Subject key identifier: D0:D6:FB:5E:AD:0E:96:7C:DB:A6:93:3B:D9:38:88:8B:25:83:46:F2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4EA25929212A5952C035AD0A299AA5656E692CD3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS146906.roa
Signing time: Fri 17 Jul 2026 11:39:35 +0000
ROA not before: Fri 17 Jul 2026 11:34:35 +0000
ROA not after: Fri 16 Jul 2027 11:39:35 +0000
asID: 146906
IP address blocks: 96.62.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 14:46:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:a2:59:29:21:2a:59:52:c0:35:ad:0a:29:9a:a5:65:6e:69:2c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 17 11:34:35 2026 GMT
Not After : Jul 16 11:39:35 2027 GMT
Subject: CN=D0D6FB5EAD0E967CDBA6933BD938888B258346F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fa:a5:fa:6d:2f:4f:fa:16:fe:09:b4:71:b9:
71:a9:d8:cd:c8:9d:1e:d2:c8:aa:a6:4d:ab:79:51:
30:75:73:6f:07:b2:f8:0f:32:87:bf:20:48:72:94:
43:b5:a6:77:e1:3e:16:6b:10:be:57:de:26:fa:33:
00:7b:19:3c:5d:fd:c3:75:dc:82:47:70:42:bf:cb:
5e:e5:51:43:e5:ac:66:b1:d3:dc:d8:c6:2c:dd:b4:
d3:95:ef:8a:e2:e3:f2:b3:bb:4f:a2:0e:e5:5a:4f:
59:ec:19:91:51:cd:a0:14:24:32:e1:34:b6:f7:78:
55:20:72:fa:c1:4c:b5:a2:95:da:c4:02:57:9c:8e:
73:2e:c9:d6:4a:53:5d:1e:5c:f2:99:c6:d6:4e:04:
b1:4a:f1:0f:9f:89:37:86:60:20:a4:31:3b:aa:80:
32:e0:95:36:2d:c6:05:81:6e:ff:95:77:3c:64:da:
84:cb:29:bd:47:4b:50:2c:cc:b8:03:25:9f:57:92:
5a:72:7d:4a:24:68:36:02:5b:af:2c:45:6e:f8:95:
6b:af:bf:78:d4:1b:57:bf:de:c2:5b:64:35:33:b1:
b1:37:37:91:cd:7d:6c:93:85:28:d7:fa:f1:e2:e8:
fb:8e:21:17:1c:fb:3f:cc:d8:90:f4:a0:ed:8d:68:
08:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D6:FB:5E:AD:0E:96:7C:DB:A6:93:3B:D9:38:88:8B:25:83:46:F2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS146906.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.249.0/24
Signature Algorithm: sha256WithRSAEncryption
78:5a:2c:b8:58:79:31:b4:b4:8a:51:3a:e4:7c:cf:56:38:3c:
37:a2:61:98:01:0c:b7:5e:01:fe:ac:15:19:f7:33:8a:05:59:
2d:6f:73:98:10:06:e7:32:c5:11:33:13:64:7c:51:2b:42:03:
c0:24:1f:0f:85:d4:dc:a6:6f:8c:e3:d1:da:21:7a:ca:c7:2c:
68:7c:08:6e:09:1d:15:9e:a3:4b:1f:d6:d3:89:c0:54:56:53:
35:44:a1:32:a5:49:68:28:8b:a9:cb:12:cf:f1:46:06:c1:52:
c3:6a:8b:45:c4:1e:70:6d:ba:3b:ab:77:bd:2a:c6:c4:92:58:
7b:2c:87:5a:f3:03:1e:3c:cc:17:fc:4c:6f:07:a0:2c:9a:07:
49:e6:e9:ad:fa:6a:30:76:8c:47:e9:d5:c1:51:d8:0f:4d:b5:
28:b5:59:7a:82:1e:9f:c6:a1:90:53:24:15:86:d8:1a:f8:76:
3b:9f:03:ff:86:1b:f7:26:61:9b:22:2e:2b:f5:fa:76:ca:1f:
61:fe:36:35:23:e9:84:b7:83:b8:13:08:d6:d1:85:e1:e7:09:
c4:5b:e3:f1:af:9e:f8:9b:e8:b2:3d:92:ac:07:0d:da:57:8f:
91:41:6f:a1:4c:46:b0:1a:25:85:38:30:61:bb:df:38:97:f9:
70:86:5e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:14:57 2026 by rpki-client