Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS146914.roa
File: AS146914.roa (raw, json)
Hash identifier: wL/6sqWHAMYNWdxFrIGU+uAWldn/PzLrLaRAPRjRW7U=
Subject key identifier: A5:9B:DA:9D:9A:73:BF:B2:FE:66:5E:86:38:7A:B3:C1:EE:97:C5:B1
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 7477C68AB6EEFACC4DF81103714CB4A163DF0EB6
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS146914.roa
Signing time: Mon 20 Jul 2026 11:39:45 +0000
ROA not before: Mon 20 Jul 2026 11:34:45 +0000
ROA not after: Mon 19 Jul 2027 11:39:45 +0000
asID: 146914
IP address blocks: 212.60.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:77:c6:8a:b6:ee:fa:cc:4d:f8:11:03:71:4c:b4:a1:63:df:0e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 20 11:34:45 2026 GMT
Not After : Jul 19 11:39:45 2027 GMT
Subject: CN=A59BDA9D9A73BFB2FE665E86387AB3C1EE97C5B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f7:e9:93:46:c0:85:dc:6d:26:92:e1:0c:01:
57:f8:ee:51:9e:b7:69:f0:5c:98:6a:82:ac:f2:5a:
cd:96:d0:b1:7f:49:f0:23:28:38:18:20:6f:e8:90:
ea:17:68:c3:d4:28:15:08:d5:ff:39:ac:fa:dc:87:
e0:f0:60:f0:84:c3:98:44:3f:8b:f0:06:33:ea:35:
6e:29:3e:27:b6:90:b0:c2:d2:14:7f:2c:d6:c6:56:
41:24:5b:8c:94:14:34:50:64:53:e9:92:a5:6c:67:
09:54:3c:ab:d8:e3:9e:38:cc:a9:ed:a9:90:37:93:
ae:bb:f8:25:2e:96:49:f1:33:21:dd:70:6b:2b:55:
3c:8e:c5:90:7c:ae:28:97:e9:51:a4:2a:7a:2a:69:
a5:6d:3b:c6:3b:e2:f7:b7:13:db:65:e6:1f:c4:db:
70:9f:13:81:28:4b:0e:1f:b7:88:75:ba:cc:6f:c4:
02:37:d2:8f:88:a8:8c:42:5b:3a:19:13:4d:b3:a3:
53:a4:38:35:31:99:d5:9a:5b:02:4a:9d:58:20:28:
55:02:2a:cb:63:cc:59:6e:a3:9b:07:66:1c:c9:1c:
7d:73:35:11:6d:1d:8e:54:f7:84:3d:13:a4:27:b9:
ce:f0:61:1b:1a:39:a3:e2:ae:a7:5a:b1:a0:a1:66:
17:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9B:DA:9D:9A:73:BF:B2:FE:66:5E:86:38:7A:B3:C1:EE:97:C5:B1
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS146914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.158.0/24
Signature Algorithm: sha256WithRSAEncryption
50:6c:a2:7f:d1:d8:e7:db:17:a7:53:2e:9d:dc:d4:94:54:99:
13:cd:b5:42:23:c8:ae:c9:28:77:c9:8d:2e:30:44:18:80:4d:
23:59:91:22:f6:ed:70:27:c8:6c:3f:c3:64:8d:a6:47:e9:5f:
3c:54:68:5d:43:d4:62:44:ba:6f:8c:02:f4:b2:25:c4:05:35:
e8:0b:ca:07:7b:1e:51:89:33:25:b8:2b:dc:87:b5:b7:30:fd:
0d:73:92:b6:e4:79:63:22:f7:d9:00:a1:12:51:94:d5:51:1a:
72:1b:01:3b:49:6c:58:8a:78:b4:ef:e8:13:0e:3b:cb:6e:f6:
21:5e:93:f4:da:34:2d:25:05:40:ce:13:92:c8:ca:7b:bb:c4:
ba:b3:b8:ca:0d:6b:5d:8e:2d:0c:8a:35:67:96:4a:3e:73:b7:
57:36:3b:92:47:91:44:b0:60:00:61:8b:d6:c1:3b:29:85:a9:
1a:63:e5:37:e8:8d:c2:16:e8:c2:fb:e3:88:be:df:90:16:be:
90:39:0c:ca:ba:1c:1e:7d:5d:a4:bb:b6:1e:f5:90:10:7b:8e:
75:55:9e:b4:3b:06:da:c7:b9:09:ac:de:04:d6:02:af:10:3a:
f9:8b:17:fd:34:2b:b8:54:dc:ef:9f:7b:69:74:21:12:47:39:
f6:4b:f8:a4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUdHfGirbu+sxN+BEDcUy0oWPfDrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA3MjAxMTM0NDVaFw0yNzA3MTkxMTM5NDVaMDMxMTAvBgNV
BAMTKEE1OUJEQTlEOUE3M0JGQjJGRTY2NUU4NjM4N0FCM0MxRUU5N0M1QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW9+mTRsCF3G0mkuEMAVf47lGe
t2nwXJhqgqzyWs2W0LF/SfAjKDgYIG/okOoXaMPUKBUI1f85rPrch+DwYPCEw5hE
P4vwBjPqNW4pPie2kLDC0hR/LNbGVkEkW4yUFDRQZFPpkqVsZwlUPKvY4544zKnt
qZA3k667+CUulknxMyHdcGsrVTyOxZB8riiX6VGkKnoqaaVtO8Y74ve3E9tl5h/E
23CfE4EoSw4ft4h1usxvxAI30o+IqIxCWzoZE02zo1OkODUxmdWaWwJKnVggKFUC
KstjzFluo5sHZhzJHH1zNRFtHY5U94Q9E6Qnuc7wYRsaOaPirqdasaChZhc7AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUpZvanZpzv7L+Zl6GOHqzwe6XxbEwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMTQ2OTE0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Dye
MA0GCSqGSIb3DQEBCwUAA4IBAQBQbKJ/0djn2xenUy6d3NSUVJkTzbVCI8iuySh3
yY0uMEQYgE0jWZEi9u1wJ8hsP8NkjaZH6V88VGhdQ9RiRLpvjAL0siXEBTXoC8oH
ex5RiTMluCvch7W3MP0Nc5K25HljIvfZAKESUZTVURpyGwE7SWxYini07+gTDjvL
bvYhXpP02jQtJQVAzhOSyMp7u8S6s7jKDWtdji0MijVnlko+c7dXNjuSR5FEsGAA
YYvWwTsphakaY+U36I3CFujC++OIvt+QFr6QOQzKuhwefV2ku7Ye9ZAQe451VZ60
Owbax7kJrN4E1gKvEDr5ixf9NCu4VNzvn3tpdCESRzn2S/ik
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:21 2026 by rpki-client