Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142497.roa
File: AS142497.roa (raw, json)
Hash identifier: jdt8DsFHL4cfX4dt2jsZm+5iO+DEslRgljU0lBu++bQ=
Subject key identifier: BF:56:A7:02:05:D6:13:D2:13:D7:8E:6C:60:25:3A:E3:55:8B:02:60
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1C778FD98A3C7E1352C191D409FD56172D87A59C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142497.roa
Signing time: Wed 12 Aug 2026 06:39:43 +0000
ROA not before: Wed 12 Aug 2026 06:34:43 +0000
ROA not after: Wed 11 Aug 2027 06:39:43 +0000
asID: 142497
IP address blocks: 82.21.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:77:8f:d9:8a:3c:7e:13:52:c1:91:d4:09:fd:56:17:2d:87:a5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 12 06:34:43 2026 GMT
Not After : Aug 11 06:39:43 2027 GMT
Subject: CN=BF56A70205D613D213D78E6C60253AE3558B0260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:9d:94:41:3e:ae:7c:d1:21:45:a6:6b:ed:
27:25:3b:07:7d:ba:cc:ec:ce:0e:d8:88:f9:03:a2:
b2:d3:6e:d1:ef:df:60:2d:63:7f:d4:22:41:94:e4:
87:5b:79:95:dd:95:e2:aa:c4:fa:58:52:bc:d0:8e:
6a:c2:d9:04:24:44:d3:8f:6b:19:2e:20:6e:22:fc:
be:b9:32:9f:e1:6c:38:2d:a8:09:4d:62:58:24:72:
54:67:32:37:06:b0:c6:90:ca:07:79:fd:a5:63:42:
59:09:31:dc:9e:ed:e1:d9:05:9a:4e:fa:0f:f8:85:
87:ca:73:4e:9d:a3:59:74:0a:8b:06:a0:4f:a7:e5:
b9:17:d2:ab:78:1e:8c:2e:a4:20:48:be:08:a5:ae:
fd:ea:eb:ec:28:03:ce:e5:ea:c4:77:eb:c4:97:92:
cf:12:a4:7f:93:f1:ca:f5:56:08:b0:82:38:ea:a5:
3c:19:5a:22:b8:f9:ee:cf:0a:8c:70:6f:41:d8:ef:
c6:1a:fe:92:54:4d:f4:d4:d0:12:45:ba:04:08:f4:
af:eb:91:7b:cc:6f:2b:f0:23:47:26:a5:ef:a5:42:
6b:99:51:bf:63:8f:e5:7a:4a:39:e4:df:b2:fd:4f:
c0:75:b8:59:2a:6d:67:ab:e6:7e:25:c6:d4:48:c3:
92:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:56:A7:02:05:D6:13:D2:13:D7:8E:6C:60:25:3A:E3:55:8B:02:60
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142497.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.1.0/24
Signature Algorithm: sha256WithRSAEncryption
80:6f:81:d9:01:da:70:8b:35:c7:91:59:e4:d4:46:6a:16:2c:
1a:04:e7:7c:94:18:f1:11:08:ef:fb:1e:37:b3:56:35:71:2e:
1f:cc:2e:82:90:09:92:63:61:95:c5:fe:ce:02:e9:01:8f:2b:
8e:19:c6:f7:07:79:93:4e:5a:02:08:36:57:b0:23:de:c6:ee:
5a:9b:66:df:59:57:57:c2:a8:f4:38:e4:f6:1f:9e:b4:e0:b5:
24:9b:e6:53:66:4f:80:aa:9a:6f:bd:ca:aa:46:64:cb:dd:13:
0c:85:75:1a:e6:40:fc:68:7e:87:ce:a1:1c:f0:c1:61:a7:62:
04:6b:53:9c:fd:78:59:f7:72:30:7a:28:4b:50:98:26:2c:ee:
68:6d:ba:23:69:b8:d2:6a:1e:8e:1f:35:8f:82:bc:98:30:13:
4d:b1:6b:42:fa:23:ac:c1:7d:bf:69:2b:0e:4c:d2:65:32:ad:
54:a2:79:44:b5:f2:0c:2b:b5:43:79:a5:e7:03:23:98:92:6c:
4a:97:b1:6e:a0:98:49:67:29:ca:ca:f5:d9:e9:a2:5b:83:18:
da:ac:2e:08:f3:eb:a4:11:b8:27:ad:e8:7b:98:2f:25:52:ee:
04:94:f5:c0:05:70:1f:44:d4:a9:cb:12:ae:df:ea:c9:58:35:
73:c5:18:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:18 2026 by rpki-client