Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS140681.roa
File: AS140681.roa (raw, json)
Hash identifier: tEVfeZh4YKNiz1Y0iBVGFMSTE4bX88s8FO8DHYNQwjc=
Subject key identifier: 97:DF:81:0C:AB:3F:4E:9D:BF:F5:17:BE:D9:F8:A7:B8:59:6F:C4:E2
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 0A800637D5113821A95B915D9726D8FFBD69EF5F
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS140681.roa
Signing time: Tue 08 Sep 2026 18:07:20 +0000
ROA not before: Tue 08 Sep 2026 18:02:20 +0000
ROA not after: Tue 07 Sep 2027 18:07:20 +0000
asID: 140681
IP address blocks: 201.4.17.0/24 maxlen: 24
201.4.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 22:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:80:06:37:d5:11:38:21:a9:5b:91:5d:97:26:d8:ff:bd:69:ef:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 8 18:02:20 2026 GMT
Not After : Sep 7 18:07:20 2027 GMT
Subject: CN=97DF810CAB3F4E9DBFF517BED9F8A7B8596FC4E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:4c:52:38:d6:b7:7d:85:57:01:25:b6:01:
bb:be:9a:dc:5c:4d:3c:3a:b0:02:f7:b4:7f:6e:46:
ad:a7:ea:4f:ef:a1:6f:98:0b:7d:3f:6a:e8:a0:dc:
44:74:8a:00:7c:f1:21:1c:14:23:30:73:5f:c4:65:
0d:e8:a8:59:50:10:d6:22:14:43:2f:bd:20:5d:30:
00:a8:08:03:75:bb:f1:a1:2a:f8:31:2d:9e:7b:c9:
90:35:fd:65:0b:d8:42:a0:a3:cf:19:b1:38:4d:b6:
fb:0b:9d:df:a6:e5:dd:6a:50:19:f5:85:78:91:82:
46:a9:e2:03:17:d3:57:ec:ce:08:88:3d:2c:b3:d2:
6d:c9:20:07:e8:0b:5e:7b:74:de:fe:3e:c5:16:a0:
2f:b5:1e:68:fb:fc:ca:33:c0:db:94:d6:91:96:4d:
bc:1b:29:29:ac:e5:e4:4a:13:08:f8:a2:31:0c:d1:
74:93:60:2b:d0:e1:4f:03:a6:ac:7b:16:d2:8a:50:
15:d3:ff:98:d1:71:02:e0:1e:2b:fe:38:24:06:b8:
02:6e:9f:b7:67:df:82:6f:a0:be:b1:13:fa:1e:62:
62:c2:1d:cb:35:f7:b7:17:c7:3c:d9:f8:1f:af:a1:
26:8e:df:ac:b5:29:d2:56:78:02:56:4f:39:5f:12:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DF:81:0C:AB:3F:4E:9D:BF:F5:17:BE:D9:F8:A7:B8:59:6F:C4:E2
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS140681.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.17.0-201.4.18.255
Signature Algorithm: sha256WithRSAEncryption
89:7e:6e:15:f9:40:7c:5d:ec:ae:70:8f:cb:4e:34:30:6c:36:
37:50:22:46:fb:b4:62:51:33:4e:54:df:1f:44:0e:cf:f5:d7:
ea:dd:68:41:ef:50:40:04:dc:5f:ea:f7:94:ef:50:45:b6:4c:
3e:bc:05:17:4b:b2:4a:64:54:f3:3a:cd:c6:f7:21:85:da:a9:
11:82:7c:c3:de:33:fd:8a:24:6d:b9:2b:47:99:eb:02:b1:50:
3c:84:cc:31:53:a6:7c:1b:e0:e5:3a:f6:39:3d:63:9a:fc:f3:
6e:38:58:c2:d4:96:e2:ec:a6:f7:d1:c0:51:94:46:3c:c3:c6:
80:75:5d:ac:2f:83:f6:5c:41:a1:98:41:1d:eb:7b:ba:f0:f9:
f5:3a:ff:8f:60:96:49:2b:76:d5:9a:4b:1c:7a:2a:ab:5b:82:
a3:b0:ef:22:e8:3d:9e:41:a3:e6:67:a4:1e:64:8c:a4:ce:b0:
53:e0:a5:23:48:3b:5e:42:50:63:af:30:74:27:12:87:15:75:
8a:ea:8f:6c:c0:dc:ad:1b:9c:f4:5c:18:03:26:df:e8:84:d3:
64:58:9d:de:a8:da:18:0a:2f:15:f2:bb:fb:94:73:ab:11:ed:
7d:1f:10:25:31:56:f0:23:d0:32:a9:24:69:ec:c3:87:eb:bc:
6b:83:fc:f5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIUCoAGN9UROCGpW5FdlybY/71p718wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA5MDgxODAyMjBaFw0yNzA5MDcxODA3MjBaMDMxMTAvBgNV
BAMTKDk3REY4MTBDQUIzRjRFOURCRkY1MTdCRUQ5RjhBN0I4NTk2RkM0RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7JkxSONa3fYVXASW2Abu+mtxc
TTw6sAL3tH9uRq2n6k/voW+YC30/auig3ER0igB88SEcFCMwc1/EZQ3oqFlQENYi
FEMvvSBdMACoCAN1u/GhKvgxLZ57yZA1/WUL2EKgo88ZsThNtvsLnd+m5d1qUBn1
hXiRgkap4gMX01fszgiIPSyz0m3JIAfoC157dN7+PsUWoC+1Hmj7/MozwNuU1pGW
TbwbKSms5eRKEwj4ojEM0XSTYCvQ4U8Dpqx7FtKKUBXT/5jRcQLgHiv+OCQGuAJu
n7dn34JvoL6xE/oeYmLCHcs197cXxzzZ+B+voSaO36y1KdJWeAJWTzlfEtN9AgMB
AAGjggISMIICDjAdBgNVHQ4EFgQUl9+BDKs/Tp2/9Re+2finuFlvxOIwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcyNjk0NWVhLTA3Yjkt
NDI4Yy1hZjc0LTk2MTQ5ZTg5MTg4NC8wL0FTMTQwNjgxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADJ
BBEDBADJBBIwDQYJKoZIhvcNAQELBQADggEBAIl+bhX5QHxd7K5wj8tONDBsNjdQ
Ikb7tGJRM05U3x9EDs/11+rdaEHvUEAE3F/q95TvUEW2TD68BRdLskpkVPM6zcb3
IYXaqRGCfMPeM/2KJG25K0eZ6wKxUDyEzDFTpnwb4OU69jk9Y5r88244WMLUluLs
pvfRwFGURjzDxoB1Xawvg/ZcQaGYQR3re7rw+fU6/49glkkrdtWaSxx6KqtbgqOw
7yLoPZ5Bo+ZnpB5kjKTOsFPgpSNIO15CUGOvMHQnEocVdYrqj2zA3K0bnPRcGAMm
3+iE02RYnd6o2hgKLxXyu/uUc6sR7X0fECUxVvAj0DKpJGnsw4frvGuD/PU=
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:52:37 2026 by rpki-client