Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS141383.roa
File: AS141383.roa (raw, json)
Hash identifier: NfOH6Rx2H7n67UNhI6ON582cPLI2fvDQC8eIA8ImCtY=
Subject key identifier: 94:10:54:77:42:BF:08:30:96:F6:6C:B5:79:34:60:35:0B:82:B3:F4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0C681F67FDE2231CAE07F85B31DE20B80102E483
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS141383.roa
Signing time: Fri 30 Jan 2026 14:41:04 +0000
ROA not before: Fri 30 Jan 2026 14:36:04 +0000
ROA not after: Fri 29 Jan 2027 14:41:04 +0000
asID: 141383
IP address blocks: 2a13:9500:130::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 19:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:68:1f:67:fd:e2:23:1c:ae:07:f8:5b:31:de:20:b8:01:02:e4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 30 14:36:04 2026 GMT
Not After : Jan 29 14:41:04 2027 GMT
Subject: CN=9410547742BF083096F66CB5793460350B82B3F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:d7:be:9b:4d:be:5f:94:4a:df:6f:da:7f:
8d:45:37:53:4e:75:d8:51:8a:e1:26:75:52:45:b5:
9a:ed:25:c9:9f:24:72:4b:3a:c3:ba:49:c3:c7:5a:
bc:40:60:33:59:d8:c8:f1:14:29:d1:c6:95:4c:8a:
97:6b:70:e2:56:ed:b4:4f:b4:11:e9:cc:3d:71:e3:
b6:46:41:34:af:50:d5:c8:14:b4:c8:0d:f6:2b:e3:
90:c1:0f:f9:e8:89:ce:76:de:1b:65:e0:b6:fc:00:
1f:e9:36:c8:e5:ca:fc:b5:6c:47:a7:51:28:c1:b9:
2b:61:c3:58:a9:5f:69:3e:09:a0:36:ed:c8:4e:d2:
73:a9:f2:c7:c8:82:86:d5:d0:8f:8f:11:17:c2:02:
a3:1b:8f:bb:65:0b:ec:e4:75:98:93:46:c6:cb:5b:
88:25:dc:1c:6d:8c:36:a0:2c:e3:74:fd:52:1a:e8:
10:91:21:20:43:48:f9:d1:a2:5c:1f:03:84:0c:fc:
8b:74:72:76:02:c5:5b:42:7a:8d:c2:0d:f3:76:f0:
dc:df:ef:15:89:89:9e:5b:78:62:6d:c4:3f:91:9c:
0b:d0:91:b2:bc:9e:34:a1:e3:5b:4d:83:c1:1a:94:
dc:10:e4:7b:fb:0c:1a:23:36:dc:87:f4:38:c0:31:
91:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:10:54:77:42:BF:08:30:96:F6:6C:B5:79:34:60:35:0B:82:B3:F4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS141383.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:130::/48
Signature Algorithm: sha256WithRSAEncryption
8c:4b:41:39:fa:02:76:e2:e9:c1:33:ac:f1:54:aa:13:df:7c:
6a:ba:d3:f0:0c:1c:33:d5:d8:bf:ad:68:44:0e:bd:2a:7f:5c:
8b:9d:1b:d1:60:45:11:3f:6b:de:30:12:48:25:cd:a1:ad:de:
eb:fc:13:c7:50:ef:20:bc:2a:3b:7f:88:b4:14:55:e6:75:c7:
9e:47:77:61:f0:55:46:35:94:8e:19:1a:4f:6c:0b:27:a6:ea:
69:5a:e1:ee:93:72:02:3d:a6:ce:1c:ab:7e:f5:c5:f4:c0:2f:
5b:9d:3b:02:2b:f8:aa:85:34:60:5a:82:d6:98:d3:6a:8c:64:
cf:7f:43:5c:1d:05:22:cb:ba:14:9c:e0:8c:a5:47:cf:f6:e4:
5e:fa:66:d9:31:89:a0:50:5b:16:8e:49:ae:9a:93:db:43:b0:
a6:da:a7:62:f8:8d:c3:f3:02:13:50:6f:8c:4b:e8:4f:e2:23:
03:9d:3a:de:f1:7e:4d:12:1f:1d:6b:d6:69:b1:37:ac:3d:c0:
11:8a:48:96:59:d9:d2:ce:2c:ee:21:62:2c:64:6a:ca:9a:28:
c9:69:88:af:08:d5:53:6b:fd:a8:63:2d:a2:18:cd:7d:34:ff:
e1:f1:f6:f9:82:53:cf:51:91:14:86:df:54:7a:3b:99:03:0f:
67:b3:bc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 04:39:06 2026 by rpki-client