Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: Afy27Bh/O7u9VuyW3W4j+rYSWw8E9FG1TAIsHv/LBg0=
Subject key identifier: 34:E9:EE:83:88:B7:80:48:D3:D4:1F:05:FE:EB:C0:05:29:6C:EF:DE
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 78272F877248CBE055AAC747548A0B056563328F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS147281.roa
Signing time: Sat 10 Oct 2026 02:33:10 +0000
ROA not before: Sat 10 Oct 2026 02:28:10 +0000
ROA not after: Sat 09 Oct 2027 02:33:10 +0000
asID: 147281
IP address blocks: 45.137.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:27:2f:87:72:48:cb:e0:55:aa:c7:47:54:8a:0b:05:65:63:32:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 10 02:28:10 2026 GMT
Not After : Oct 9 02:33:10 2027 GMT
Subject: CN=34E9EE8388B78048D3D41F05FEEBC005296CEFDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:bf:da:26:57:87:8c:11:c9:34:cd:ae:c2:
1f:d2:e7:db:24:05:dd:2f:9e:c1:33:71:db:fb:a8:
e8:83:f6:0e:d7:1a:a1:53:11:57:cd:2e:dc:40:48:
a3:3e:f0:72:22:d2:f9:83:c8:42:72:15:6c:3b:24:
12:6f:d3:12:11:89:de:9a:9b:02:b2:37:51:65:da:
43:1f:42:d3:bd:5f:60:7a:8b:e0:e5:fa:0b:cc:d5:
43:c3:f2:6d:7f:42:ab:63:ff:42:da:e2:b4:e8:72:
ca:d8:52:8a:31:56:12:89:95:87:6c:20:6b:ea:3f:
6d:bb:f8:d2:4e:f2:6c:68:4e:64:ff:c1:29:22:75:
50:0a:52:8c:cc:c9:30:c3:b9:d5:eb:8c:78:e0:6a:
d4:57:0f:a2:75:8d:b9:5a:75:c1:a9:56:4d:ac:31:
a9:04:41:89:70:f2:c7:b9:71:99:25:35:58:38:33:
04:b9:f7:d5:58:e6:28:66:37:97:2b:de:2a:98:ee:
09:7d:91:03:c5:0d:92:a3:c0:fc:80:58:b5:da:79:
9e:f6:39:cb:af:5d:96:7d:90:0e:2a:db:27:5b:19:
27:39:79:6d:63:8a:21:0f:bb:90:3d:e2:c3:36:e5:
7e:0e:b2:c0:da:95:e0:a3:70:39:91:02:bc:47:42:
6c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E9:EE:83:88:B7:80:48:D3:D4:1F:05:FE:EB:C0:05:29:6C:EF:DE
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.28.0/24
Signature Algorithm: sha256WithRSAEncryption
15:39:83:50:48:fd:3a:04:1a:1c:08:36:65:ac:f2:a1:c4:48:
ed:cb:26:48:33:09:00:da:d9:2a:40:74:ae:00:dd:8e:3c:e2:
60:b8:08:b5:98:00:49:da:4c:28:da:42:af:e7:c8:9b:93:e9:
11:cb:b9:41:da:06:7b:05:41:96:00:7a:c0:ee:62:83:08:01:
79:93:7c:61:df:50:c4:67:21:85:d6:21:62:7d:d8:ab:fb:6c:
4a:c9:c8:11:98:10:8b:3e:2d:d8:28:cb:ed:94:66:03:ec:19:
1f:96:35:0a:cc:9d:e7:ec:e4:a6:a5:37:f0:2b:7b:b9:df:80:
b3:cb:2d:97:93:0c:66:74:a9:b5:f9:7c:24:00:d9:6e:6e:81:
fc:fa:5d:4d:b4:62:e4:39:ac:8a:5f:3e:ce:98:ec:85:63:25:
76:85:e5:42:30:10:85:50:80:5b:60:4d:7f:c8:56:70:c1:e5:
7e:3c:20:5b:be:ed:5f:00:fb:d5:bb:90:15:e1:d5:75:63:85:
d8:3c:7b:64:4d:cb:df:fd:7d:6f:dd:35:36:9a:5c:5b:f4:42:
0a:8d:b8:0e:f9:9a:d8:1a:27:1a:d2:7d:71:0c:16:34:21:cf:
9d:a4:7f:62:70:40:a0:d1:42:53:fc:cf:91:43:f9:2c:57:be:
ae:40:77:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 00:20:19 2026 by rpki-client