Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: S98mIolkpSgkYfdIn6TKWr23okNyQINEj2avM2rWAmY=
Subject key identifier: 8A:7D:29:DF:49:63:C8:A6:C9:DB:DC:2C:E3:89:6A:7F:1C:0A:B0:A0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0DB77012D8DCD5BB21B8BD475AEB65F4DD27C89A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147281.roa
Signing time: Sat 10 Oct 2026 11:30:19 +0000
ROA not before: Sat 10 Oct 2026 11:25:19 +0000
ROA not after: Sat 09 Oct 2027 11:30:19 +0000
asID: 147281
IP address blocks: 82.21.96.0/24 maxlen: 24
82.39.129.0/24 maxlen: 24
82.39.170.0/24 maxlen: 24
82.39.185.0/24 maxlen: 24
82.39.246.0/24 maxlen: 24
82.40.26.0/24 maxlen: 24
84.75.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:b7:70:12:d8:dc:d5:bb:21:b8:bd:47:5a:eb:65:f4:dd:27:c8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 10 11:25:19 2026 GMT
Not After : Oct 9 11:30:19 2027 GMT
Subject: CN=8A7D29DF4963C8A6C9DBDC2CE3896A7F1C0AB0A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f1:86:0b:05:f7:f6:3d:08:b8:2c:c2:17:c7:
46:1d:c6:57:51:66:c9:5c:0a:2a:ad:63:e5:f7:df:
96:45:94:c4:8e:bc:4d:38:c6:97:45:59:95:62:2b:
16:e4:3c:39:a9:32:a8:13:67:f7:4b:39:eb:93:ce:
1d:31:2a:70:3a:72:68:78:be:57:7d:49:fa:9f:0f:
06:32:b2:4d:5e:c2:36:68:78:4c:ca:d6:fc:32:ff:
36:1b:a2:02:09:6f:5b:23:e1:e3:1b:24:ec:1d:09:
dd:51:27:42:5d:8b:37:04:ec:ec:a9:cc:41:ab:3a:
96:38:e6:8c:02:e4:d4:20:34:3f:85:98:08:48:35:
75:4a:32:5f:77:76:a0:3e:29:2c:3f:1b:8a:13:29:
64:a3:f3:e6:88:57:19:7d:e1:f5:14:84:3b:b9:38:
f4:65:e7:00:76:b4:4f:bd:c7:ec:a4:19:19:5a:a4:
f9:b7:7a:64:0d:f8:82:4b:b1:3e:be:0d:45:90:fa:
32:ba:10:71:d1:ff:aa:22:93:ed:d1:38:8e:78:c4:
81:c9:72:91:27:02:a3:20:e8:2f:81:46:71:ca:58:
d4:be:23:93:b4:a4:67:d9:61:97:ae:81:12:e1:5a:
c9:f9:a1:74:75:1f:dc:3c:6a:9d:3a:77:4a:41:dc:
17:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7D:29:DF:49:63:C8:A6:C9:DB:DC:2C:E3:89:6A:7F:1C:0A:B0:A0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.96.0/24
82.39.129.0/24
82.39.170.0/24
82.39.185.0/24
82.39.246.0/24
82.40.26.0/24
84.75.53.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:56:ac:01:09:3b:65:74:e4:21:cf:f6:73:21:0f:51:db:d7:
8e:c2:f4:fd:f6:5f:77:9c:3d:b7:a0:5e:50:24:ae:14:95:4f:
4b:52:4a:da:28:ae:d4:2b:ca:ab:2f:a8:36:1d:30:7d:f1:96:
ca:95:bf:00:62:81:6b:f5:6b:cf:42:31:a6:7f:2e:36:6b:79:
39:d8:36:09:45:c8:53:f5:8e:fb:d9:ea:dd:4c:e0:90:a9:48:
3a:86:08:77:fa:fd:a2:30:c2:5d:4a:94:2d:be:04:4c:ab:11:
74:49:50:61:fd:ff:31:6a:65:95:57:62:2e:17:46:a9:39:7d:
36:a9:ca:09:d6:b4:d7:b5:61:2a:64:e3:14:fc:e2:4c:99:af:
e9:c6:00:6b:3b:ab:08:e8:05:e5:7f:dd:09:7a:00:eb:b9:c9:
5b:ba:d8:07:50:1e:6e:06:f5:e9:76:77:34:98:64:6f:53:25:
b7:09:eb:17:a4:09:1c:0b:21:bf:0a:8c:64:52:0e:fb:61:31:
a7:eb:ac:4f:73:0c:ec:11:04:a0:b3:51:8d:d7:d4:d0:ee:71:
f3:43:04:18:3e:ca:91:52:82:6d:b7:6e:cd:84:d2:6c:89:95:
1e:5d:6b:3a:ba:80:b8:b5:15:c9:8a:17:2a:7c:f6:32:97:72:
02:33:5a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:46:59 2026 by rpki-client