Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147060.roa
File: AS147060.roa (raw, json)
Hash identifier: V3BcJr3qRoB0QyAsuGZ+thsJcEarp/+CoROhXF2eOWA=
Subject key identifier: E2:00:0F:CC:F8:84:DE:8A:3E:D0:33:86:F6:95:4F:3A:59:08:39:24
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4379CDF29703321A2981D99225C5C84CF355A1CE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147060.roa
Signing time: Wed 02 Sep 2026 08:49:32 +0000
ROA not before: Wed 02 Sep 2026 08:44:32 +0000
ROA not after: Wed 01 Sep 2027 08:49:32 +0000
asID: 147060
IP address blocks: 147.79.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:79:cd:f2:97:03:32:1a:29:81:d9:92:25:c5:c8:4c:f3:55:a1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 2 08:44:32 2026 GMT
Not After : Sep 1 08:49:32 2027 GMT
Subject: CN=E2000FCCF884DE8A3ED03386F6954F3A59083924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:bd:91:2e:31:29:30:15:6c:07:fd:07:8e:73:
8a:58:93:0b:f8:30:40:30:b6:da:2a:8a:fb:61:57:
02:38:9f:eb:c5:78:68:45:28:55:f4:f0:7a:fc:6b:
35:2d:1b:51:56:0c:7b:4a:64:6d:7d:82:c8:45:1c:
84:60:db:51:1b:3a:4b:6f:76:b5:b9:48:ba:ee:45:
d6:ee:18:d5:eb:21:51:3e:a8:39:1d:87:7d:ed:bb:
4a:bc:11:9c:f3:d9:8a:54:45:7b:a5:79:4e:25:e3:
b7:5f:18:ca:6b:44:a4:58:c9:61:cb:58:e9:bd:40:
ff:96:94:57:9a:33:a4:83:68:52:97:61:a9:63:8d:
76:da:f4:55:2e:b9:d7:f6:39:84:00:8f:a0:cf:3c:
78:87:f2:54:6c:58:19:a9:30:12:1b:08:f6:55:08:
77:2e:90:2b:04:d3:2f:bf:92:9c:20:1e:77:54:ac:
41:31:7c:84:64:e3:b0:2e:4b:5c:79:10:18:6d:33:
c0:07:83:66:10:26:03:2c:00:e3:9b:30:31:85:a1:
17:1d:0e:cf:b9:1b:b3:a8:7d:26:95:86:ff:0d:c8:
7d:5a:c9:ba:a3:99:d1:a4:a3:d6:79:35:8d:96:10:
d6:b0:c9:fa:91:c8:13:3f:be:e3:8b:04:6b:cf:48:
8e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:00:0F:CC:F8:84:DE:8A:3E:D0:33:86:F6:95:4F:3A:59:08:39:24
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147060.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.3.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:f2:c1:66:24:3f:dd:38:4c:9e:55:59:51:f0:4e:15:7e:06:
b6:bc:b5:02:34:38:cc:86:a8:4b:fb:42:ba:de:6b:2a:9c:8e:
81:b3:0c:27:72:8c:c8:b2:4d:d3:75:5f:21:c5:d7:bd:59:27:
81:2b:a7:f3:fa:a6:63:6a:16:b7:9e:06:79:5b:42:af:8c:66:
1a:3d:6e:2f:5e:0c:a9:53:57:50:03:a5:bf:64:ae:c0:01:a9:
fa:7c:55:e2:59:58:5d:ca:b4:7f:31:e3:4d:c0:fa:94:91:32:
8b:cd:38:cb:84:66:b8:e7:99:5f:cf:9a:02:c1:f6:ed:e4:b8:
74:aa:56:31:e7:d8:c2:13:be:00:22:c5:65:83:4d:78:8f:58:
83:e2:d5:82:66:87:cb:e8:17:11:b7:71:16:70:8f:0e:f8:fd:
52:f0:59:aa:9a:5b:57:9e:88:61:f6:65:72:cf:b2:ff:28:11:
cb:76:19:73:e7:3c:4e:ba:a9:28:15:f6:e6:f4:45:1c:ed:29:
2d:80:d9:7c:a3:4f:7e:26:e4:c1:7d:f7:8a:f1:6c:54:cf:1e:
68:47:a7:97:e9:b1:3a:66:2a:c1:b7:2b:83:d5:cb:3d:d8:8f:
bf:69:a4:76:48:12:5d:b2:64:69:f9:16:9b:75:ea:86:76:d3:
d6:35:d9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:11:58 2026 by rpki-client