Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142433.roa
File: AS142433.roa (raw, json)
Hash identifier: I2+s4aMcXZMmz0Zq2OY+j9UWeC9dHewr3BQRWGhKVe4=
Subject key identifier: DB:05:03:CD:B5:A8:75:CA:24:7D:C8:BC:8A:35:7F:31:DE:2A:C6:F5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2D891A4A0610A3D5CFB5BBB91CA58243D6EB9868
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142433.roa
Signing time: Wed 03 Jun 2026 07:56:20 +0000
ROA not before: Wed 03 Jun 2026 07:51:20 +0000
ROA not after: Wed 02 Jun 2027 07:56:20 +0000
asID: 142433
IP address blocks: 82.22.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:89:1a:4a:06:10:a3:d5:cf:b5:bb:b9:1c:a5:82:43:d6:eb:98:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 3 07:51:20 2026 GMT
Not After : Jun 2 07:56:20 2027 GMT
Subject: CN=DB0503CDB5A875CA247DC8BC8A357F31DE2AC6F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:d0:11:8f:05:5e:c7:b4:99:06:9c:b1:67:
44:56:27:0e:d8:dc:07:62:77:85:d6:1d:f8:ea:70:
16:7e:97:2f:00:81:f3:88:0d:18:2a:10:53:53:cd:
dd:38:ac:20:c6:b2:eb:8b:d2:03:ca:10:6e:04:e6:
a5:46:17:7d:d8:14:6c:d3:19:df:30:69:25:f6:c4:
60:b8:a3:d2:a1:1c:07:0d:59:a4:c7:17:15:b4:c1:
d5:e6:9f:aa:2a:0a:ce:34:95:57:37:cb:8d:94:9f:
0b:6b:84:91:fc:73:2e:71:e4:f7:94:64:d9:67:0c:
79:8d:58:21:19:c0:70:7b:1b:0a:87:57:26:01:bf:
0f:b1:85:38:f9:ee:c2:9d:04:f1:80:04:4b:a4:9b:
ab:ae:e3:71:11:5c:ac:d7:0f:c1:40:49:df:9d:33:
bf:52:47:e4:7f:3f:d0:86:03:73:0f:be:74:8c:28:
d7:68:52:eb:77:88:9c:26:45:cb:f1:54:4f:f4:7e:
07:af:cc:a1:33:f6:cc:6f:77:e5:10:94:a4:7e:6b:
d4:80:87:56:b7:bd:fc:9d:e3:37:55:d9:4b:ac:58:
58:42:99:8c:d1:fe:86:9b:82:67:50:91:a2:aa:65:
83:42:c8:f9:ff:c0:80:34:bc:8d:da:c4:33:98:5e:
4f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:05:03:CD:B5:A8:75:CA:24:7D:C8:BC:8A:35:7F:31:DE:2A:C6:F5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.30.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:e1:66:31:55:37:a9:f6:5f:93:ee:57:a6:3a:61:95:ed:ea:
b2:fa:9c:17:9b:91:48:9d:d3:c2:1f:cc:05:a5:03:96:16:3b:
15:23:d4:d6:55:c8:58:9b:b2:92:7c:ee:32:10:02:c4:9a:b9:
2e:23:7d:3f:0e:be:5b:ed:fb:d1:77:9a:62:a9:d1:7b:c1:f6:
77:7a:78:9b:86:c5:e6:b6:23:9f:39:ad:37:ae:9c:27:43:1b:
9a:01:41:af:e2:f7:af:b4:51:aa:ab:65:3e:cd:d9:62:1e:d4:
e1:8b:d1:74:7f:58:67:7d:ff:43:ff:c0:1c:7e:66:4b:c5:18:
9d:56:86:d9:db:a7:c7:76:ae:32:e7:2d:d0:78:97:d6:3b:33:
fe:65:2d:2c:93:5f:50:15:78:07:13:a0:75:60:42:9d:d5:f1:
bc:d1:b7:93:19:6e:de:e4:f6:bf:8c:c3:07:ae:6d:0c:4c:87:
62:a6:8c:bc:45:f3:de:0a:2b:a6:2a:79:9f:d8:f5:f6:6c:04:
a8:01:34:24:ba:24:94:88:d9:52:1d:a0:fa:9b:70:88:b0:21:
cb:3c:87:eb:fa:d8:ce:f9:c2:c4:6c:b4:89:1f:d2:dc:e2:65:
c7:6f:a1:91:79:d2:07:3f:b2:e1:2f:82:00:5b:3f:6a:db:c0:
1c:0b:1e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:14:05 2026 by rpki-client