Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147176.roa
File: AS147176.roa (raw, json)
Hash identifier: pbYPI/rRtBkks0yiDOQyhHdJqdXSzp5qVHuynY83s68=
Subject key identifier: CF:11:CB:3A:CE:4C:BC:31:AC:C2:E2:EC:1C:82:16:B3:29:46:67:F0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 111CE6E2EE8076F1733B30DB18B5041C49454EC9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147176.roa
Signing time: Mon 28 Sep 2026 04:58:41 +0000
ROA not before: Mon 28 Sep 2026 04:53:41 +0000
ROA not after: Mon 27 Sep 2027 04:58:41 +0000
asID: 147176
IP address blocks: 147.79.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:1c:e6:e2:ee:80:76:f1:73:3b:30:db:18:b5:04:1c:49:45:4e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 28 04:53:41 2026 GMT
Not After : Sep 27 04:58:41 2027 GMT
Subject: CN=CF11CB3ACE4CBC31ACC2E2EC1C8216B3294667F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:73:d7:37:f5:e8:34:c1:83:ee:65:c2:7f:eb:
67:49:75:08:e4:a2:ef:f9:35:e1:5b:0d:dc:e4:1c:
83:31:0b:14:7d:64:2a:80:d9:89:47:34:74:28:e3:
14:65:92:a1:dc:4e:f3:ac:8e:7a:b5:d0:07:33:70:
15:80:97:44:55:a3:58:07:d3:65:9d:93:1c:64:ca:
c7:14:7d:3f:a8:57:a6:31:e9:06:79:a7:0f:21:37:
b5:d1:0f:fb:0f:27:f5:81:ee:3c:1e:1a:59:47:44:
e3:a2:4b:12:12:52:c1:77:75:f5:15:b2:64:b4:c9:
6b:2b:c6:35:6b:8f:0e:b6:fe:e5:88:fb:60:ab:72:
37:a9:f1:33:74:cf:f5:3c:41:45:99:ad:fd:de:f9:
b8:f0:47:7e:61:ba:b4:2e:57:5a:57:9c:c3:3e:05:
3e:57:1b:22:ce:c3:a0:2a:b5:3b:03:c2:01:9e:37:
00:41:12:6d:16:7b:a7:25:4a:3b:b4:ef:ec:d6:cb:
53:fd:9c:e4:1c:32:4a:2e:c4:30:fd:65:84:13:0c:
ad:31:f3:b1:ed:cf:c9:69:3b:e8:f9:d6:ac:97:6b:
60:87:a0:db:37:9d:2b:22:68:24:e1:5f:08:dd:6c:
9c:44:37:b5:85:4d:d5:3b:c3:f0:b9:19:23:74:54:
d3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:11:CB:3A:CE:4C:BC:31:AC:C2:E2:EC:1C:82:16:B3:29:46:67:F0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147176.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.55.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:63:6a:08:57:3d:b1:d8:a0:43:fd:96:d8:59:a0:9e:71:08:
db:39:c3:b2:ee:9b:30:34:ea:d1:fd:e5:0b:fd:aa:06:0f:6f:
c0:ca:8c:43:bd:69:82:90:a6:ad:e7:64:e4:ce:e6:a9:1b:86:
d3:3d:b1:53:90:3a:19:d8:47:67:c5:44:7e:3f:6e:ec:8d:34:
21:b1:b4:94:59:40:85:e8:30:0d:6d:37:16:92:08:1e:2e:53:
3f:bd:a4:90:c9:e1:61:e0:c8:19:1b:f5:8b:94:d8:c9:15:b2:
a2:a0:66:ba:2a:38:bd:94:ff:81:e3:c3:90:66:ca:66:c1:9e:
aa:0c:cf:c9:33:aa:7c:9f:9c:a3:7f:23:15:02:2e:1a:5a:4f:
d9:74:75:ec:0a:00:a7:cd:04:70:9e:53:f9:32:28:60:91:a0:
cb:83:51:38:02:5c:85:85:0c:d0:8e:b7:20:35:41:ae:d0:49:
55:24:a8:df:cd:f9:3c:63:4b:da:33:4b:44:24:a6:e8:84:73:
20:ea:de:be:80:67:7e:3f:9d:98:6f:c9:62:e5:f1:1b:d7:17:
9f:77:51:1b:23:d4:11:e0:84:b7:0c:7f:5c:31:26:98:73:57:
27:23:10:16:96:13:47:56:f8:71:1f:02:d2:14:69:08:8a:d9:
dc:51:a1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:25:32 2026 by rpki-client