Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS140475.roa
File: AS140475.roa (raw, json)
Hash identifier: 93H4DCVD6g8IBAhnQLmOIUj1uKZ9hWIcElLLIrNfuJg=
Subject key identifier: 3B:7E:BE:F5:79:33:83:BC:CF:9D:90:C3:E0:44:1B:7A:1A:25:51:4F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 19C71D3A0364DBB4056CC7E2C81731CD52D3ACB4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS140475.roa
Signing time: Tue 17 Mar 2026 10:47:50 +0000
ROA not before: Tue 17 Mar 2026 10:42:50 +0000
ROA not after: Tue 16 Mar 2027 10:47:50 +0000
asID: 140475
IP address blocks: 82.39.174.0/24 maxlen: 24
2a13:9500:118::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 15:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c7:1d:3a:03:64:db:b4:05:6c:c7:e2:c8:17:31:cd:52:d3:ac:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 17 10:42:50 2026 GMT
Not After : Mar 16 10:47:50 2027 GMT
Subject: CN=3B7EBEF5793383BCCF9D90C3E0441B7A1A25514F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:13:07:18:d3:a0:ab:3d:3a:61:49:e2:bb:ad:
0a:2c:2e:a2:85:70:23:f6:19:f8:91:df:17:be:3a:
f7:b2:20:b9:29:31:4c:c3:43:18:f3:18:91:eb:e5:
ef:70:53:27:0a:9b:d4:60:d1:a5:e9:4e:ed:42:9f:
2f:22:84:fc:12:68:4e:5f:08:d9:08:4a:58:df:08:
89:e9:83:54:b3:a0:46:9b:0a:8e:37:80:75:51:ec:
7e:0d:b0:3a:41:fd:ea:bf:a5:04:10:4f:81:e9:c8:
4c:bd:9a:3e:e9:1e:b7:36:c4:90:d1:b8:a1:63:02:
99:10:d6:a6:ce:bc:00:16:bc:b5:84:81:88:fc:35:
df:65:e1:99:69:2f:99:64:14:ff:17:00:f7:e4:6a:
eb:72:cb:17:92:d7:b7:2c:84:22:81:42:f0:4c:5f:
99:f5:ee:f6:57:26:27:21:a5:f0:4a:63:b9:5a:c4:
ba:b5:de:c6:20:85:e2:f5:27:b8:20:3a:10:29:53:
d4:d4:ce:b3:8e:c9:90:73:d0:eb:6a:09:5c:08:87:
66:aa:91:b7:d4:a5:1f:36:04:df:08:f6:7a:61:80:
eb:2f:e6:4a:49:79:76:47:74:66:07:9d:21:5f:d0:
f6:fe:9b:04:d6:e6:dd:2e:39:85:1f:1d:c5:c3:70:
0c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7E:BE:F5:79:33:83:BC:CF:9D:90:C3:E0:44:1B:7A:1A:25:51:4F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS140475.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.174.0/24
IPv6:
2a13:9500:118::/48
Signature Algorithm: sha256WithRSAEncryption
7c:57:85:a2:c8:ec:94:45:4a:c9:a7:f1:34:57:4f:2c:49:88:
f0:9a:fa:17:35:e0:9b:91:57:ce:d9:1f:2f:1b:46:23:e4:4e:
bc:2f:2d:a1:55:f4:38:5b:2a:21:4c:c6:f6:13:de:95:fb:d7:
21:93:86:7a:d0:0e:85:c8:f7:d4:2c:7f:56:45:d9:ba:60:bd:
79:b7:ce:89:4d:82:69:ac:f6:7f:1d:6a:f2:4e:af:2a:7d:cf:
f5:e6:20:2f:86:66:5a:30:20:89:39:78:c8:9c:1b:cb:57:b1:
b3:5e:f3:16:00:b0:0d:5f:a9:76:6a:8a:fa:93:39:b9:00:fd:
3e:eb:c6:53:03:bb:01:c6:4c:74:e7:24:5f:a6:3c:6f:fe:b4:
89:57:80:43:03:d5:31:a4:7f:2b:5b:05:5f:0c:ff:23:26:42:
aa:4c:ab:d1:c0:3e:62:85:8f:86:ad:d8:dc:81:6e:03:36:41:
24:83:ae:d7:32:8d:cc:ee:18:5b:a8:c2:60:1f:8f:37:ae:fa:
1c:fa:0f:14:18:c9:5d:11:81:36:09:8c:50:9f:5f:b8:c3:8c:
30:2f:ec:01:44:1b:0a:92:cd:f0:91:41:21:48:c0:b2:56:46:
85:68:41:de:05:41:91:f2:e2:bd:dd:8e:4d:37:f5:60:1e:10:
17:63:d9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 21:31:48 2026 by rpki-client