Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: nd8WE3Tw/fviIpY65PS22BP/+nksCvYOMLXdYRexSzw=
Subject key identifier: 32:B9:DE:C5:DB:F7:91:3C:6C:6C:3B:AF:E6:9D:65:70:AF:7C:88:C5
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 786BFD7AB8FDC99C262D03464DFD2BFF53FFBA40
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS147281.roa
Signing time: Fri 16 Oct 2026 09:47:54 +0000
ROA not before: Fri 16 Oct 2026 09:42:54 +0000
ROA not after: Fri 15 Oct 2027 09:47:54 +0000
asID: 147281
IP address blocks: 82.139.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:6b:fd:7a:b8:fd:c9:9c:26:2d:03:46:4d:fd:2b:ff:53:ff:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 16 09:42:54 2026 GMT
Not After : Oct 15 09:47:54 2027 GMT
Subject: CN=32B9DEC5DBF7913C6C6C3BAFE69D6570AF7C88C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d9:0e:0b:b8:dc:64:51:e1:fd:a6:75:65:6a:
af:82:d8:08:c0:e8:dc:9d:a6:5c:31:d2:e4:f3:f4:
e2:52:72:91:24:93:eb:ce:d4:f5:93:83:7b:c5:a5:
c9:9a:cb:95:d2:30:60:ed:ce:a4:5a:2d:70:3d:87:
f0:3c:8d:8b:ed:30:64:5f:dc:b9:b0:14:07:6e:c0:
b7:5f:a3:5c:a5:fc:0c:26:3d:d8:de:01:87:d2:c7:
ef:f4:8a:99:4f:eb:a8:e2:a0:3f:aa:88:a4:5e:51:
af:d2:ef:fe:b2:50:58:ee:d4:8c:f6:ac:5b:79:77:
44:84:08:18:db:04:35:fe:07:03:40:37:72:53:80:
98:e5:aa:44:fb:0b:2b:e5:31:50:00:18:15:b5:d3:
7f:f7:22:e1:30:6d:c3:99:58:0f:cf:1b:c4:9e:70:
38:d8:bf:02:65:0b:60:93:5c:d4:f0:a0:2f:6f:15:
62:38:6a:39:1a:0a:1c:cb:4e:02:b4:03:e8:77:d3:
9a:47:85:3f:f2:b6:ea:7a:38:18:ea:78:2a:77:03:
f9:54:cb:ce:bd:bb:61:1b:a2:9b:b3:0e:9b:7d:e5:
41:c4:8f:b7:fc:95:fd:7a:f3:b1:47:c5:80:2f:69:
93:58:3f:fd:ea:36:0a:a6:bf:f3:39:10:96:cb:57:
24:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B9:DE:C5:DB:F7:91:3C:6C:6C:3B:AF:E6:9D:65:70:AF:7C:88:C5
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.230.0/24
Signature Algorithm: sha256WithRSAEncryption
92:68:e6:95:e2:cd:4d:9c:1d:97:f7:58:e1:f7:86:36:71:4c:
3f:41:9d:39:d0:57:5d:3b:25:6d:f4:92:ba:c1:b9:4a:81:d2:
7e:f4:d2:64:e7:09:00:3f:51:6f:e0:e0:58:f5:25:12:e1:00:
69:d5:5a:fe:22:2b:07:fe:32:43:1f:6b:85:05:5a:50:de:ab:
7e:ed:f1:8c:61:80:c2:24:c8:af:ec:bd:42:56:72:04:79:d5:
51:85:34:a4:82:13:b5:62:b1:2f:83:9d:d1:ad:bd:9b:a8:e8:
c9:3f:c7:8c:02:48:7f:3d:92:de:2d:49:23:2a:89:26:c8:97:
15:48:21:55:6b:31:e6:f1:3f:69:28:12:aa:d7:7b:c7:67:1f:
4c:9a:ca:a8:31:40:a9:e2:22:81:7e:10:12:d3:9a:d7:66:95:
65:a0:1b:f3:39:ae:d6:0c:28:25:c4:9c:d5:14:f3:78:2d:5c:
97:a4:30:7f:8f:f1:b4:29:48:a2:47:82:9b:6c:12:65:af:fa:
59:a1:9d:98:57:1e:a7:b0:a1:c8:f2:f9:e2:02:31:1f:b1:19:
80:30:19:b0:12:e4:a9:e8:a3:c9:08:67:cf:a5:14:a3:df:f7:
79:1e:e6:9d:8a:3a:e3:af:3f:c6:18:1c:4e:7d:9d:3e:57:77:
54:04:fb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:09:57 2026 by rpki-client