Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: R6f0LQWKijZaef+hjPG65/tOUk0mbmVj5VbcIUwxZ5I=
Subject key identifier: 55:6B:92:1F:36:BE:48:0A:4C:AA:89:3A:9A:7C:34:E1:DE:E9:47:5F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 72C646203B926D59154CC1D69535D82375E8B08F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147281.roa
Signing time: Sat 17 Oct 2026 15:06:32 +0000
ROA not before: Sat 17 Oct 2026 15:01:32 +0000
ROA not after: Sat 16 Oct 2027 15:06:32 +0000
asID: 147281
IP address blocks: 162.141.91.0/24 maxlen: 24
168.222.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:c6:46:20:3b:92:6d:59:15:4c:c1:d6:95:35:d8:23:75:e8:b0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 17 15:01:32 2026 GMT
Not After : Oct 16 15:06:32 2027 GMT
Subject: CN=556B921F36BE480A4CAA893A9A7C34E1DEE9475F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:37:25:35:9a:44:63:27:ab:5c:92:b1:0c:a9:
85:f0:73:fb:b8:fe:a9:43:21:f6:f7:5f:c8:d6:4a:
db:d4:2d:a5:ba:82:4f:a8:50:2d:d3:4e:15:27:f9:
92:50:f8:6e:32:ac:89:67:e6:48:65:1e:5f:49:2b:
af:cd:af:19:34:56:64:56:64:87:b5:a5:93:5e:8b:
3b:c9:86:05:70:14:52:56:a4:c6:ad:a7:9a:84:af:
47:50:78:ac:24:92:e9:81:7c:6c:02:41:9c:f3:09:
39:67:46:13:84:62:ad:ec:7a:a2:f3:1e:4c:ea:48:
1d:95:75:ad:8b:46:60:96:cb:27:8e:34:05:bf:ba:
f2:8d:4b:fa:63:ca:59:1c:4f:b0:c1:10:35:96:a0:
a9:33:2d:55:c0:5a:bb:97:df:6d:1f:ed:15:df:73:
bd:0e:b5:f3:76:8f:20:04:7b:73:e8:df:ba:51:cb:
78:97:73:b1:ec:f5:ec:08:ef:a6:fc:a6:fe:44:68:
d7:4e:aa:c8:41:ec:f1:02:99:90:0b:94:e6:57:ec:
83:e0:a1:b7:b0:d8:6a:8f:56:1c:56:2d:78:4d:92:
8d:5a:ee:c8:a3:64:52:69:34:69:e2:fd:69:90:9a:
07:1a:29:ae:3e:be:02:91:2f:d1:67:8d:f8:fe:da:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6B:92:1F:36:BE:48:0A:4C:AA:89:3A:9A:7C:34:E1:DE:E9:47:5F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.91.0/24
168.222.45.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:12:2c:07:de:a5:39:d0:1a:5f:9b:9e:33:55:3b:a1:92:82:
10:52:c7:5e:93:a7:9a:0d:a8:32:7f:c4:d2:7d:61:5b:b6:28:
73:62:47:60:ba:97:05:86:27:50:96:d8:dc:ff:5b:52:cf:d5:
80:1b:5a:1f:de:e6:e3:0c:d1:6c:f1:e1:3e:51:be:4a:08:58:
4f:49:d7:31:2c:62:40:3e:12:67:93:be:b4:c5:1e:33:26:62:
3b:dd:2a:9a:52:cd:fd:17:29:cc:5f:bd:1e:75:89:56:d9:3b:
d7:9a:90:23:42:07:1e:f6:43:39:a9:b1:ee:77:cc:e0:7f:20:
9c:e2:e7:87:75:c9:a2:84:db:87:80:7c:db:6a:19:7d:ef:b7:
20:c1:df:2a:e2:54:03:d8:b4:db:04:1a:a8:14:1e:2e:b8:c2:
c9:80:9e:9d:8f:a9:30:e2:88:09:d8:8a:8e:7c:f8:2c:5a:97:
ff:c8:6d:b3:fe:fe:ab:c1:1c:2b:6d:08:17:2e:f4:65:5c:78:
c4:c8:be:a9:a6:09:1b:d6:9e:29:b0:87:ad:ff:1d:0b:83:da:
2f:c8:a1:65:2c:c7:7c:83:d1:2a:f3:07:75:a4:36:a3:fa:40:
b9:80:03:43:c0:ec:c7:0c:68:ec:dc:0b:7b:18:91:09:8d:de:
4b:c9:ee:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:59:06 2026 by rpki-client