Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS142240.roa
File: AS142240.roa (raw, json)
Hash identifier: KJMY0icgJy2W1kbCxN2A5TNW6QH7OLI+RcHSvskNrNk=
Subject key identifier: B1:4D:A0:56:69:C2:B2:56:8A:4E:AD:6F:BB:5E:6E:AE:DE:86:BF:A6
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 2918C68501A5600C46D84BA81DA0D11EC2129F90
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS142240.roa
Signing time: Mon 24 Aug 2026 09:11:50 +0000
ROA not before: Mon 24 Aug 2026 09:06:50 +0000
ROA not after: Mon 23 Aug 2027 09:11:50 +0000
asID: 142240
IP address blocks: 78.41.49.0/24 maxlen: 24
82.139.243.0/24 maxlen: 24
82.139.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:18:c6:85:01:a5:60:0c:46:d8:4b:a8:1d:a0:d1:1e:c2:12:9f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Aug 24 09:06:50 2026 GMT
Not After : Aug 23 09:11:50 2027 GMT
Subject: CN=B14DA05669C2B2568A4EAD6FBB5E6EAEDE86BFA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:0c:20:f4:17:94:c4:8a:f7:f0:2e:e3:c3:
53:02:0f:c3:03:66:0b:63:33:ff:df:ad:6a:ee:3d:
a5:f7:94:94:52:37:ca:4b:34:00:12:86:13:41:f5:
a9:46:fe:89:3e:d8:09:44:81:09:0e:33:ac:5d:a2:
5c:2b:9e:a5:ea:e9:16:2a:5c:96:4f:93:7c:75:0d:
53:09:64:96:30:68:5e:87:4c:47:a7:1e:c0:12:1a:
10:33:ba:82:62:c2:ea:96:b9:bb:ac:ce:b3:9c:8b:
f5:ec:83:c0:6e:18:18:5f:b2:f2:65:fb:80:30:2a:
31:83:12:38:7b:fc:33:8f:09:03:6f:d4:63:c4:4c:
31:c5:eb:be:f3:81:76:07:59:a8:41:3e:bc:56:7a:
25:4f:70:86:4d:ae:86:b4:50:3d:58:35:1a:f2:a3:
a3:b4:9b:d9:81:6a:05:27:05:2d:13:e4:94:c6:1c:
c1:9f:eb:97:5b:62:6d:c5:d5:41:4d:88:40:65:d7:
9d:de:1d:00:88:d5:88:53:28:70:c0:c9:e9:28:43:
50:ed:c8:1a:68:7c:bc:d3:9e:5b:bb:05:a6:69:45:
0f:e8:11:e1:f1:58:3c:a9:81:9f:4e:b0:18:ed:5d:
20:34:2e:08:31:d9:3a:38:6f:6b:6e:62:50:61:b0:
67:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4D:A0:56:69:C2:B2:56:8A:4E:AD:6F:BB:5E:6E:AE:DE:86:BF:A6
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS142240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.49.0/24
82.139.243.0-82.139.244.255
Signature Algorithm: sha256WithRSAEncryption
0b:b9:f1:af:e9:2e:24:db:24:88:bb:9d:c4:9f:29:5a:ba:67:
be:0f:e9:29:8d:39:4b:27:19:90:0b:75:91:99:f3:52:7f:92:
c4:cc:5a:86:0c:cb:69:c5:34:48:b7:c2:4f:53:e5:ce:9d:50:
32:05:72:d5:e0:aa:97:b6:8d:a6:57:da:43:28:d0:1d:1c:39:
7c:aa:a3:f2:36:c6:a0:86:bf:3a:a4:ae:c7:7b:03:fd:24:91:
f1:84:37:92:cb:c4:bb:87:a3:23:77:39:01:66:b2:70:b1:e3:
42:60:ab:c0:97:0f:6b:38:7c:34:c1:e2:84:ca:3b:93:23:ac:
0d:8b:eb:1b:6c:13:c6:61:5e:d5:69:4e:55:f7:c6:39:6b:a3:
17:ac:51:19:16:24:d8:cd:f3:7f:e7:c2:5c:11:7d:a5:2b:c9:
e1:f1:38:df:8e:f3:1d:dd:82:35:a7:b1:f4:f2:a5:45:ec:81:
ba:f5:a3:23:ec:ee:17:6c:33:3f:ed:bc:6a:f5:66:6f:dd:37:
a9:7c:03:c6:c1:08:b7:19:d0:7c:86:1b:0f:72:6a:8b:75:94:
54:3c:4a:c3:8b:fe:8a:7e:5e:00:0a:75:5f:5d:86:d8:1a:d1:
0d:1e:20:14:64:fd:03:31:82:92:e3:23:8f:c0:a1:e6:6d:75:
bd:37:25:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:19 2026 by rpki-client