Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147003.roa
File: AS147003.roa (raw, json)
Hash identifier: hiEqvBiPs38Mfrd1fOberX2xAscAqiTcix3jtsnxbXc=
Subject key identifier: D9:F5:43:C1:6E:6A:B5:D6:BA:E4:2D:E8:08:7F:08:14:95:5F:C5:A7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4603439608DF903A0BF60563BB4176020DB917E0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147003.roa
Signing time: Tue 07 Jul 2026 13:39:31 +0000
ROA not before: Tue 07 Jul 2026 13:34:31 +0000
ROA not after: Tue 06 Jul 2027 13:39:31 +0000
asID: 147003
IP address blocks: 82.41.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:03:43:96:08:df:90:3a:0b:f6:05:63:bb:41:76:02:0d:b9:17:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 7 13:34:31 2026 GMT
Not After : Jul 6 13:39:31 2027 GMT
Subject: CN=D9F543C16E6AB5D6BAE42DE8087F0814955FC5A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:f9:5a:d4:46:e9:c3:d0:41:04:8b:0a:08:
7b:89:de:75:f5:04:95:51:b2:92:21:61:06:41:ef:
61:ff:f8:88:4c:c7:bf:dc:e1:79:29:d7:81:a5:62:
f4:a8:d2:37:9b:24:76:3e:cf:d9:3f:f3:bb:1f:15:
fc:ac:c7:35:4b:c9:ed:75:39:07:e9:e9:5d:16:63:
26:9a:32:a7:d5:b4:6d:5d:f7:44:ac:0d:50:4f:89:
92:8b:8a:e9:74:9f:16:c7:4f:e4:07:e0:5a:6e:b4:
1d:7f:24:10:0e:f9:42:96:7a:92:a1:d6:8f:31:5b:
31:ef:89:12:6d:e5:80:01:97:7f:3c:ef:7e:9a:3d:
cb:c7:dc:7e:66:18:27:48:8a:a2:26:aa:bb:15:f8:
94:4b:06:35:69:35:97:56:97:ba:8f:8e:cf:cc:80:
6c:df:80:85:cb:88:e8:8d:36:1b:c0:2c:e6:cf:4f:
27:72:bb:98:3a:e9:42:d4:eb:f3:c1:14:2f:bc:77:
de:ed:7a:53:23:b6:1a:cc:67:f7:86:cd:78:9c:48:
5f:7f:5c:d7:62:cd:8e:25:a7:23:c4:3f:68:2e:1e:
ef:12:46:a9:32:e6:b2:09:82:e0:5a:96:7c:78:f5:
37:34:6e:df:4b:07:4b:2a:f9:b2:7c:d3:50:f8:7e:
ff:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F5:43:C1:6E:6A:B5:D6:BA:E4:2D:E8:08:7F:08:14:95:5F:C5:A7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147003.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.138.0/23
Signature Algorithm: sha256WithRSAEncryption
06:a9:88:92:63:7c:fd:2c:a6:51:96:ae:0b:ab:db:3f:cd:7e:
6a:c3:e9:92:d3:57:a5:60:70:73:68:4a:40:bd:ae:3f:82:24:
70:b3:34:48:d4:39:3b:03:99:ef:ff:03:17:f6:87:33:41:c4:
df:d3:05:9d:ed:fc:7b:9e:39:aa:5a:7d:fc:5c:f0:8a:95:03:
d3:4e:f6:43:a0:32:5f:7a:b5:f9:71:b2:d8:85:22:d5:26:3f:
f8:d5:59:e7:e1:36:b6:a3:3c:fb:76:e7:dc:ad:e9:e3:f5:fe:
ac:90:f3:f2:f8:b3:62:35:00:c9:fe:72:77:22:1b:7c:5f:7a:
46:8d:6f:17:b8:6c:d7:e2:dc:c3:b8:a7:4b:56:61:3b:8a:97:
b3:26:43:83:d6:bd:eb:62:7b:df:be:0b:67:7a:b4:80:81:d5:
63:11:34:80:21:31:ca:e5:c6:c3:12:c0:f4:89:34:4e:bc:2e:
a1:62:e6:5a:cd:57:df:03:9b:fe:a1:bc:4d:64:85:ab:85:a3:
c7:65:c7:48:e9:8c:a1:1c:09:5e:2b:d0:06:10:ad:52:ef:94:
db:0f:23:38:ce:87:4a:11:e2:d3:5f:71:be:19:28:00:8b:c9:
38:e4:0b:25:46:e6:33:8c:dc:d1:ba:b4:70:13:c0:1c:30:5c:
8d:4a:ef:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:06:37 2026 by rpki-client