Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS141968.roa
File: AS141968.roa (raw, json)
Hash identifier: d51iM1UzEp8Hc1us6DvmaC21e/VkAdeJ+lYSl66BuFs=
Subject key identifier: 0F:C3:56:79:37:31:E4:00:9B:1B:3F:76:25:32:C6:A2:99:39:0B:9F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 167CB0F41AD241AEC1B221A6AE7461A37CDEE9FD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS141968.roa
Signing time: Fri 09 Oct 2026 06:49:36 +0000
ROA not before: Fri 09 Oct 2026 06:44:36 +0000
ROA not after: Fri 08 Oct 2027 06:49:36 +0000
asID: 141968
IP address blocks: 82.25.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:7c:b0:f4:1a:d2:41:ae:c1:b2:21:a6:ae:74:61:a3:7c:de:e9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 9 06:44:36 2026 GMT
Not After : Oct 8 06:49:36 2027 GMT
Subject: CN=0FC356793731E4009B1B3F762532C6A299390B9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:b4:fd:3b:25:1a:88:72:b8:88:33:37:6c:
39:98:87:1c:fb:53:a8:2d:2b:9b:ea:2e:bf:39:52:
af:b6:07:5d:bb:82:f4:55:11:d1:49:87:f0:39:d2:
42:2e:7c:99:50:65:f0:72:e1:30:5b:a9:8e:fb:9d:
12:65:79:01:57:af:33:eb:aa:f0:3f:52:c1:f9:68:
7a:bd:3a:fb:fe:04:a2:55:ad:3b:43:ed:e8:88:e2:
d5:aa:53:c0:10:30:84:03:f3:70:b9:40:f3:d5:06:
03:75:9b:5d:f4:32:04:17:e4:16:ec:55:a4:4c:16:
66:62:8a:4b:12:89:eb:ad:d5:59:1a:80:68:b4:c8:
ca:b6:ce:80:57:c5:13:a6:23:5e:bf:12:05:1d:b1:
5c:a2:48:bc:b3:ce:c0:93:f9:bd:a2:9c:5d:94:ce:
0d:74:07:b8:0d:c0:8d:59:a1:d9:ba:0b:3b:59:0f:
84:0a:26:ec:10:c3:53:fc:f4:13:44:20:c9:ed:5f:
4e:09:d2:82:d7:c2:1d:81:f5:86:4d:67:a9:cf:0d:
50:85:d8:02:6e:db:26:82:25:74:79:cd:c5:6d:fd:
1f:c9:46:a8:89:b6:9c:44:31:64:42:2b:22:e6:d2:
6c:12:83:4e:fc:ca:64:f7:93:fa:78:e3:27:92:e9:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C3:56:79:37:31:E4:00:9B:1B:3F:76:25:32:C6:A2:99:39:0B:9F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS141968.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.62.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c2:48:5b:70:d1:37:c2:00:6f:cd:e9:70:1d:7d:1e:34:db:
f1:11:72:ca:98:66:31:83:ba:94:a2:ee:20:c7:fe:c6:1b:ff:
95:d6:84:25:3f:74:3e:98:03:20:98:dd:e0:9a:d7:32:92:84:
de:e3:ed:c9:71:d1:d4:8c:66:42:a5:5d:52:f9:9c:cc:23:9d:
e9:47:e1:65:38:1e:52:fd:bd:f0:0b:bb:a6:11:7d:8a:82:23:
b0:13:b1:77:25:2c:93:bd:c8:1f:28:17:4b:56:c6:42:75:d9:
26:f3:8d:53:af:51:83:c1:29:87:4d:31:e3:64:81:ee:77:4c:
70:e3:87:55:5f:cb:17:b1:ca:58:8f:55:0c:97:78:df:94:79:
5c:1d:b6:cd:10:e1:91:81:f4:a2:da:d9:cc:b6:9a:bd:30:f8:
72:4b:69:49:99:58:2a:dd:07:f5:5b:f0:b9:6c:74:f4:0d:cd:
cb:1d:3d:ea:2b:8e:82:6b:c7:c8:02:d9:fc:93:54:b7:7b:96:
b0:52:2f:2b:4a:64:2b:15:9e:1d:ea:7f:44:e6:01:89:5f:11:
87:20:e6:40:e9:7d:f3:82:cf:c0:60:22:79:dc:95:b4:b8:0d:
b8:5b:cb:78:fb:02:c9:98:e3:e2:43:a2:5e:6b:a0:ba:13:9c:
e1:bd:84:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:25:53 2026 by rpki-client