Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS146813.roa
File: AS146813.roa (raw, json)
Hash identifier: 2uaoGpR4cWBCG60pFoXQ4e+HwDWT4AnzUhNd4ivTRKI=
Subject key identifier: 13:76:7C:11:F6:38:42:58:E5:E4:0F:7B:A3:AE:A4:77:AA:C9:B5:8E
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 03B5EEB76DA5A444F334E9E1B597D61BDE41754D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS146813.roa
Signing time: Fri 25 Sep 2026 02:19:01 +0000
ROA not before: Fri 25 Sep 2026 02:14:01 +0000
ROA not after: Fri 24 Sep 2027 02:19:01 +0000
asID: 146813
IP address blocks: 2.57.18.0/24 maxlen: 24
5.182.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 09:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:b5:ee:b7:6d:a5:a4:44:f3:34:e9:e1:b5:97:d6:1b:de:41:75:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 25 02:14:01 2026 GMT
Not After : Sep 24 02:19:01 2027 GMT
Subject: CN=13767C11F6384258E5E40F7BA3AEA477AAC9B58E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:27:fb:15:40:97:c9:3d:d5:ce:14:c1:fa:0b:
d1:87:3f:41:c8:29:c8:f8:fa:b3:bf:1a:56:fd:01:
92:3f:3c:a6:ef:0a:5a:c1:b8:03:9b:4d:d9:12:ea:
78:b4:cb:1c:25:0d:6f:0f:31:4f:6e:4f:25:78:56:
b4:28:69:52:c9:84:35:b2:42:e3:0b:1c:2e:e2:18:
f3:18:35:34:44:47:da:29:78:8c:21:14:a8:e3:36:
f9:a8:29:85:98:96:f1:21:f8:14:0e:d2:86:ad:68:
cc:2e:89:92:e7:78:6b:6f:25:10:28:1a:e3:a0:30:
d3:ad:9b:57:a1:5d:31:e1:d8:20:51:4a:37:c2:b0:
0f:59:f0:70:0b:fa:b1:c5:38:40:b3:ec:ae:7c:07:
a1:db:b2:ee:2a:6b:bd:53:7a:c2:e9:1b:03:a5:15:
71:ae:a6:01:67:b3:0f:38:45:a4:1e:2e:d2:42:eb:
05:87:d9:7b:5a:15:a4:cc:d2:6f:5c:65:03:ab:3f:
c5:7d:cd:3a:c7:6c:e0:04:1d:0d:ca:a2:2c:ca:87:
d1:09:67:20:9c:22:ab:0a:28:e7:39:b0:56:f7:ee:
54:8b:72:ec:ef:7f:47:fc:ae:7e:20:be:00:0a:48:
08:b6:68:f6:36:ed:16:81:f5:6e:3e:59:de:47:ee:
47:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:76:7C:11:F6:38:42:58:E5:E4:0F:7B:A3:AE:A4:77:AA:C9:B5:8E
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS146813.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.18.0/24
5.182.110.0/24
Signature Algorithm: sha256WithRSAEncryption
40:58:a0:7f:3b:f3:c3:99:5a:26:20:09:f2:89:56:8c:c2:57:
13:aa:5e:9a:09:c5:b2:42:f8:c1:da:18:66:fb:59:da:19:84:
09:49:f6:5d:90:4d:ab:d0:79:58:c9:15:c7:ed:47:97:c6:52:
ae:bb:4e:67:4b:53:d0:b6:1f:fb:9a:b1:b5:a6:1e:c9:23:b0:
e7:aa:8d:be:84:60:ac:07:79:57:9a:51:8f:3f:a6:cf:c8:01:
34:a9:c4:6c:3a:18:11:19:1f:2e:76:90:1f:7a:b9:36:8c:ff:
c9:4d:90:ee:9f:b4:8d:c9:67:48:28:a3:61:22:91:3b:cf:a0:
8c:c2:56:86:11:ec:4d:57:94:4c:43:53:2c:16:fa:9e:79:38:
11:74:cb:d9:74:ac:d5:44:f8:c8:ec:3f:7b:84:cd:8e:09:ab:
3d:21:8c:43:9c:f8:6d:26:e5:8f:8b:14:7b:52:9d:c6:ad:7c:
81:ba:ab:d0:95:6c:04:33:08:9e:ea:c5:68:eb:ed:bd:ce:8e:
43:e6:dc:83:ad:0f:39:d8:36:94:30:fe:5b:dd:34:3b:49:e1:
d7:6c:36:9b:35:61:e5:fe:31:7e:2c:40:8b:41:25:32:d8:70:
a2:b2:8f:a4:25:90:89:7d:56:da:15:97:9a:01:c7:b5:13:5b:
e7:ae:89:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:05 2026 by rpki-client