Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS148996.roa
File: AS148996.roa (raw, json)
Hash identifier: DeOq7sgV3mLBPzGkrKYRGoLjTaeyOimTyadGFxKobK0=
Subject key identifier: 14:C5:FF:0B:05:AA:81:4B:A5:36:04:79:13:8C:08:16:3C:83:DE:27
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 61CA481FBC6E24C9671946391EECFA1E7799C05C
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS148996.roa
Signing time: Sun 04 Oct 2026 00:52:42 +0000
ROA not before: Sun 04 Oct 2026 00:47:42 +0000
ROA not after: Sun 03 Oct 2027 00:52:42 +0000
asID: 148996
IP address blocks: 79.182.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:ca:48:1f:bc:6e:24:c9:67:19:46:39:1e:ec:fa:1e:77:99:c0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:47:42 2026 GMT
Not After : Oct 3 00:52:42 2027 GMT
Subject: CN=14C5FF0B05AA814BA5360479138C08163C83DE27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6f:89:f8:ae:59:36:bd:16:5e:a5:7d:fe:a2:
14:b7:7a:0c:c4:d9:8a:dc:db:01:88:08:f6:5c:5c:
20:fe:38:de:bb:c7:ce:aa:60:64:9d:59:af:e0:8b:
e3:29:1f:12:af:03:c0:5a:f8:d8:61:99:5a:03:bd:
19:c7:5e:50:ac:0a:40:62:a7:8d:48:98:43:ce:6c:
a3:db:a2:ef:de:9c:37:74:3d:31:fa:00:8f:b6:7f:
af:95:eb:7a:d0:ff:66:e0:97:46:1f:ac:11:64:c5:
d0:98:45:0f:d0:41:17:ef:df:25:f2:d8:2a:39:7f:
2b:be:b4:e0:2f:d6:38:21:1d:3a:de:fb:9f:10:42:
d3:21:e5:45:d4:73:77:78:25:60:64:3a:dd:9c:48:
e3:a1:5a:93:54:c5:ea:4e:b8:a4:ef:42:3b:03:09:
cc:f9:34:48:a4:8b:b8:5b:c0:39:37:7e:ad:a4:e6:
35:46:dd:2c:5f:ba:e1:fb:d0:f5:8a:c7:e0:9f:79:
d9:51:89:ba:39:f2:7e:06:07:10:e8:e9:64:a6:a7:
74:88:27:95:fc:02:a7:b0:58:e0:e2:75:27:24:b3:
78:c4:44:d0:d5:4e:d0:a2:a6:79:d3:a8:fe:82:21:
64:b9:33:09:08:7d:b0:99:54:d7:96:59:d8:14:fd:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C5:FF:0B:05:AA:81:4B:A5:36:04:79:13:8C:08:16:3C:83:DE:27
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS148996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.19.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:06:20:3a:2d:fe:62:ee:5d:7c:32:c1:ee:e7:20:00:91:aa:
76:2e:b3:52:2a:6b:76:5c:92:f7:a3:b3:8b:38:05:bf:a7:3f:
a0:6b:c5:06:09:7f:3b:11:a9:54:0e:f8:de:85:1c:69:df:68:
ff:0e:fa:52:3c:4c:81:ee:e0:c4:d5:40:ab:e3:32:e7:9b:db:
40:13:45:f8:7d:1f:84:23:0c:fd:9a:23:cc:03:71:b6:57:26:
77:77:36:74:cc:e6:c6:b2:6f:bd:69:25:36:15:f2:57:aa:9c:
6f:2a:a1:1b:9c:a6:1b:b3:fa:2a:f0:bb:88:0f:2f:e2:69:6c:
2e:8e:23:57:92:ac:41:cc:f1:9a:9d:bd:53:2a:d5:e5:90:fb:
a9:c9:d6:7d:03:de:e6:e4:df:e9:52:91:1b:64:7d:d9:19:69:
ac:27:6d:69:13:a4:58:83:b3:b1:c4:fb:bc:18:2d:be:71:92:
4a:7d:e7:72:82:20:cb:4f:21:46:60:69:35:cf:f2:e4:da:a8:
f9:2e:31:61:6c:ea:10:94:ba:5c:58:a8:26:77:b9:22:c5:1b:
8f:0d:cf:34:22:8b:e7:b8:f1:98:3d:ef:64:d8:7f:e6:4d:00:
10:53:9d:68:73:38:eb:a8:5e:fc:a0:ca:c7:19:16:b1:92:b0:
58:17:ba:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 09:04:13 2026 by rpki-client