Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: k/sklDGrqK8Vby5rIWKHo6EjANnPVfQlV8TUvRiyAHU=
Subject key identifier: 35:F0:CF:C6:6A:C7:3D:EE:C2:0E:50:34:CC:78:44:3F:AE:CB:AD:14
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 574E2747F2473A481781087BEBD7F018A5E5B0BC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147281.roa
Signing time: Sun 30 Aug 2026 05:06:39 +0000
ROA not before: Sun 30 Aug 2026 05:01:39 +0000
ROA not after: Sun 29 Aug 2027 05:06:39 +0000
asID: 147281
IP address blocks: 146.103.51.0/24 maxlen: 24
168.222.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:4e:27:47:f2:47:3a:48:17:81:08:7b:eb:d7:f0:18:a5:e5:b0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 30 05:01:39 2026 GMT
Not After : Aug 29 05:06:39 2027 GMT
Subject: CN=35F0CFC66AC73DEEC20E5034CC78443FAECBAD14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:b6:28:39:a8:f8:b9:97:97:b5:3c:ab:f6:
e4:a5:51:95:c6:82:b7:e1:f0:96:79:49:a7:41:f9:
c9:41:9a:06:12:be:88:98:5b:77:77:64:42:58:38:
91:f4:4e:81:d3:4b:d1:68:be:18:d9:b0:36:c4:95:
bb:96:33:3d:22:ed:db:40:9e:30:2b:da:8d:7c:4f:
2a:43:21:c6:07:75:d9:53:b9:d2:18:b1:97:f4:7e:
f4:f1:8d:52:c9:52:47:aa:fc:cf:b6:44:6e:9b:8d:
cc:ff:72:ba:3c:74:d0:8a:53:8a:76:c5:be:6b:0a:
b7:a3:fb:b7:75:95:82:10:a5:94:b7:8a:f9:c4:59:
f3:df:2a:7f:c9:1c:48:49:51:b4:ce:2d:ef:2d:65:
cf:c3:fe:d6:57:be:e9:db:2f:fa:44:83:79:a3:66:
80:0c:0d:fa:38:96:5d:41:cc:38:38:0a:21:70:d1:
3f:ec:ad:e2:d1:5d:01:92:90:ff:cb:ed:af:5e:4e:
f4:b9:b2:7b:b3:43:bf:54:dc:0b:3a:9c:87:58:08:
d2:d4:53:47:e7:ff:7c:f5:96:8c:86:3c:a5:cd:44:
13:77:7f:c4:39:ce:bf:d3:6c:0b:dd:d1:fd:2b:d8:
a0:9a:67:52:1a:08:59:5e:ed:1a:fb:ba:88:6f:17:
bd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F0:CF:C6:6A:C7:3D:EE:C2:0E:50:34:CC:78:44:3F:AE:CB:AD:14
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.51.0/24
168.222.38.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:5c:97:52:6c:86:2b:fd:80:99:62:68:1f:42:ef:38:44:3d:
21:92:a4:c2:71:60:25:fe:1d:8e:8f:bd:9f:62:2e:9b:e1:16:
f2:d3:3c:aa:6e:db:ec:cd:b3:56:af:88:04:84:68:25:f4:cd:
d1:4d:e9:b1:59:6c:5d:78:8e:a7:d3:5c:13:aa:f1:61:59:3c:
04:45:60:26:17:dc:e7:6e:59:c6:1c:1e:0d:d5:49:4a:bd:a8:
2d:41:d3:08:74:df:74:3f:28:f9:56:bb:2e:3e:ee:23:64:4f:
22:b2:25:62:e9:73:9b:bb:e3:59:38:0f:ae:3c:be:01:e8:8b:
35:0a:e4:de:99:7f:b6:71:0f:31:87:3b:31:9a:53:fd:63:09:
b4:16:14:58:93:46:9a:d1:d4:a0:fc:df:7b:20:14:dd:f9:7d:
72:73:a2:dd:70:86:a7:09:62:57:ef:4c:2b:b0:26:ae:75:a1:
10:a3:f7:2e:b3:bd:ea:2e:6b:42:04:fd:cf:a6:4c:b5:ec:39:
59:e8:12:10:4b:a4:c8:b0:6f:c3:a6:2c:b0:bb:3b:88:e9:99:
20:af:1f:23:8b:df:9d:37:78:d6:99:f4:52:a0:12:1f:f4:69:
61:fc:34:11:6a:60:8f:73:cb:ce:07:e6:1e:a6:8f:63:7a:6c:
af:83:8b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:34 2026 by rpki-client