Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142146.roa
File: AS142146.roa (raw, json)
Hash identifier: hr02Qxc4+y0GolxKebdzjchXi/JpgjHY6sRryV2wHak=
Subject key identifier: FD:AD:81:60:75:22:7E:DA:51:5E:05:E8:D9:4B:95:10:E5:4A:C7:EF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3B7FB0A3F9458CA757658B542BDAA554F7017081
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142146.roa
Signing time: Wed 01 Jul 2026 09:09:31 +0000
ROA not before: Wed 01 Jul 2026 09:04:31 +0000
ROA not after: Wed 30 Jun 2027 09:09:31 +0000
asID: 142146
IP address blocks: 178.83.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:7f:b0:a3:f9:45:8c:a7:57:65:8b:54:2b:da:a5:54:f7:01:70:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 1 09:04:31 2026 GMT
Not After : Jun 30 09:09:31 2027 GMT
Subject: CN=FDAD816075227EDA515E05E8D94B9510E54AC7EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:73:9f:e4:dc:d0:10:3c:0f:2a:2f:2e:ac:
cd:54:28:69:9b:74:52:b0:36:b6:b8:77:9d:9b:60:
ae:32:58:37:be:7a:39:a5:eb:a5:2f:9c:21:f3:a4:
81:59:45:9e:4e:fa:36:b2:67:b4:51:66:a3:4d:d3:
68:a1:11:69:e5:5b:34:44:bc:d8:ec:b8:01:35:6e:
02:7c:2b:81:96:14:3b:d7:ac:c7:eb:13:b3:dd:d7:
8a:b1:69:d1:24:55:ec:5f:7f:c5:4e:49:56:04:f4:
d5:ec:e5:5b:e7:07:cc:66:f3:19:33:b3:7d:e5:6f:
8f:c9:b6:08:27:91:2f:f3:1b:de:04:6a:39:f1:d7:
66:f1:73:66:32:e0:69:7f:e0:c0:8b:f4:9a:2b:30:
b6:64:5c:30:39:8e:c8:90:39:08:69:59:a2:9e:d4:
41:37:70:c5:17:0a:5c:52:b1:d1:1e:77:1f:f5:eb:
1a:ad:3f:c9:4f:86:fa:0d:40:27:50:c4:ca:45:d2:
8e:52:08:7e:d3:5c:f5:f2:96:80:55:c5:79:f1:f9:
ff:43:d3:13:0f:8f:d5:ce:86:df:14:ca:94:61:d0:
76:13:cd:c7:71:93:a8:17:ae:54:99:83:eb:26:33:
5f:2e:58:ec:fb:04:7f:0d:07:4f:21:b2:9d:40:ab:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AD:81:60:75:22:7E:DA:51:5E:05:E8:D9:4B:95:10:E5:4A:C7:EF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142146.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.39.0/24
Signature Algorithm: sha256WithRSAEncryption
71:6b:30:00:50:78:2b:a5:09:8d:f3:c7:b9:bc:45:93:f2:7f:
13:3a:72:df:ef:39:42:7e:59:63:c1:bc:e8:7e:b8:16:64:38:
85:61:92:50:3d:b9:63:c9:b9:3f:6b:44:e1:b4:af:ff:35:3a:
29:40:0c:21:1c:88:f8:a3:b1:9c:4f:a5:d3:35:9d:9d:1b:f4:
c0:f7:c3:f4:1d:4d:b8:66:4d:e9:1e:e0:fa:ea:c4:36:04:b3:
72:8d:94:7d:2d:c7:bd:40:b4:23:13:bc:4f:31:61:e6:b2:c8:
3d:e3:f6:5d:b1:90:63:3c:fc:ab:d9:44:a1:ce:9b:63:56:dc:
ce:9d:3b:46:8a:f6:24:aa:e7:92:7d:4c:e6:b6:5b:50:98:48:
be:e9:7d:be:d5:ea:41:e9:2e:a7:1c:2e:57:a1:49:39:89:7b:
6c:c0:02:45:40:ed:19:85:03:4d:d1:b8:41:af:b9:af:c9:fd:
ae:76:09:fd:cc:fd:46:e3:f8:9b:2e:56:89:45:4a:63:af:4a:
7e:44:ca:ae:40:93:50:7b:0c:e4:f5:30:90:a8:94:d7:8b:7d:
78:b5:17:8b:d0:2a:85:a2:56:42:8d:26:cd:96:85:a9:63:1b:
04:4f:44:20:41:7c:79:c0:bf:8c:d5:33:12:b9:88:81:b2:74:
5f:42:36:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:06:32 2026 by rpki-client