Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS141280.roa
File: AS141280.roa (raw, json)
Hash identifier: fOc8U9+VcLb7AD0QV/ZWe1g6h57wcIKzyQ4gExzGAdI=
Subject key identifier: 99:F6:0A:B5:00:B7:24:CC:CB:0D:D7:F7:7D:92:8B:AE:4A:7C:D5:FE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1B45C60B96FD7794FB419A2FBF6BD990FCAE28F2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS141280.roa
Signing time: Sat 20 Jun 2026 18:24:27 +0000
ROA not before: Sat 20 Jun 2026 18:19:27 +0000
ROA not after: Sat 19 Jun 2027 18:24:27 +0000
asID: 141280
IP address blocks: 178.83.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:45:c6:0b:96:fd:77:94:fb:41:9a:2f:bf:6b:d9:90:fc:ae:28:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 20 18:19:27 2026 GMT
Not After : Jun 19 18:24:27 2027 GMT
Subject: CN=99F60AB500B724CCCB0DD7F77D928BAE4A7CD5FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6d:fc:27:81:59:46:46:67:35:ce:62:9d:26:
ab:22:52:3a:72:3a:79:30:b1:dc:0f:c3:c4:78:23:
3a:30:75:8c:83:88:e6:95:83:8a:0a:e7:2d:73:6f:
73:5d:6d:b5:0e:b2:ef:7b:40:64:17:b3:01:60:60:
76:4e:ea:db:dc:ac:aa:b6:cb:75:7a:71:88:e5:9b:
d8:29:54:c0:f1:0d:02:9c:a3:53:4c:3a:09:a2:6d:
e9:b7:d1:18:01:9d:ce:54:03:04:83:43:16:14:18:
a9:ad:9d:1c:2e:82:32:6a:93:4f:b3:6f:71:51:85:
76:62:c8:50:d5:db:81:c3:ff:cc:10:26:cc:6b:03:
f1:b1:89:00:2f:ab:70:d0:e7:da:b2:c5:75:af:1d:
cb:07:a1:ff:2c:7b:65:c9:a4:46:4e:ea:88:47:5f:
62:0f:21:4d:4c:94:49:97:61:b2:f2:07:59:08:0a:
8d:d6:49:5a:d7:c2:5a:73:10:2a:4b:de:16:9b:cf:
f1:a4:ee:65:9e:9a:49:c5:d7:ec:24:1a:50:bc:f1:
07:cd:c0:0d:b0:39:af:59:2d:b2:f8:89:bf:1c:a5:
1c:e3:e1:b4:a9:d0:b8:5b:e0:ef:7b:9e:f8:c0:b9:
39:20:39:e7:71:22:fa:fd:8b:a7:2d:ae:22:f2:bb:
30:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F6:0A:B5:00:B7:24:CC:CB:0D:D7:F7:7D:92:8B:AE:4A:7C:D5:FE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS141280.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.225.0/24
Signature Algorithm: sha256WithRSAEncryption
62:34:ef:01:4b:07:15:1f:1f:ab:d1:98:3d:56:74:74:0c:84:
f2:47:cc:cd:c4:62:8a:1e:3c:98:2e:58:32:30:ad:41:9f:ef:
43:3f:1b:dd:b8:6c:df:78:b4:29:5b:b6:d6:b9:a5:a4:f3:88:
92:f0:c8:71:80:5c:dc:5e:3c:93:3b:19:ff:49:2a:11:1e:2b:
34:f2:04:f5:b6:d0:f6:14:e6:2b:76:90:6a:ff:e5:b6:af:ee:
21:69:ed:81:64:3d:03:d8:f6:81:ff:18:df:e5:15:d1:c5:d4:
aa:d6:db:f2:f4:b5:99:1e:34:53:38:35:16:94:e5:d0:93:53:
4c:12:96:51:38:19:f0:be:4c:c9:e2:dd:52:3a:7d:e5:3e:7c:
fa:70:a0:34:ae:35:fc:37:1e:d1:38:dd:42:9f:5d:6e:f2:d5:
e1:98:c7:d7:dc:4e:ee:3c:03:87:f5:76:0b:7d:77:70:e3:1c:
5b:21:61:98:ec:8b:64:6a:1a:87:9f:ba:f9:ae:92:b0:9c:80:
8b:6b:18:ba:87:9c:08:ad:a6:d8:c7:6c:e0:3b:54:e7:c2:9f:
4f:7e:18:cd:9a:86:59:39:a8:12:6b:92:ac:c1:87:5c:a7:02:
3f:af:a3:19:95:51:5f:b9:95:f4:13:c3:57:7d:0a:f4:26:53:
3d:f9:b7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 22:04:49 2026 by rpki-client