Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS142111.roa
File: AS142111.roa (raw, json)
Hash identifier: YcBUrIqwrX6/n5xNtKK67n6pUS434GN5fMC0+mzGCn8=
Subject key identifier: 4F:42:32:C0:50:81:9E:0E:8B:43:29:E6:89:39:18:B0:C2:D1:C3:EE
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 2FEFCF683117A05505FF5FE784A28DFF195E80C5
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS142111.roa
Signing time: Fri 28 Aug 2026 00:02:09 +0000
ROA not before: Thu 27 Aug 2026 23:57:09 +0000
ROA not after: Fri 27 Aug 2027 00:02:09 +0000
asID: 142111
IP address blocks: 45.146.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 19:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ef:cf:68:31:17:a0:55:05:ff:5f:e7:84:a2:8d:ff:19:5e:80:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 27 23:57:09 2026 GMT
Not After : Aug 27 00:02:09 2027 GMT
Subject: CN=4F4232C050819E0E8B4329E6893918B0C2D1C3EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:ce:20:bd:66:c3:4b:8c:79:cc:f3:3e:71:
49:0e:73:86:19:49:8d:0a:82:7c:7a:c0:95:f5:30:
b7:b5:3c:b9:51:e0:c4:17:a7:2b:db:a9:10:ef:5e:
34:c2:14:7d:06:93:25:b6:53:62:24:a2:60:6f:09:
07:ea:6c:eb:15:11:02:e7:18:bb:eb:63:18:e5:cd:
b2:43:66:cf:4c:cc:a9:29:4c:33:37:a1:68:f1:bf:
bd:4e:9f:44:9b:ca:d8:d5:f2:13:b7:c3:5c:a5:b9:
03:d7:af:fe:00:6f:1b:1e:e3:f0:af:3d:96:db:a8:
c7:14:bb:0b:2e:aa:80:7f:87:4a:d4:7d:3b:eb:42:
15:0f:df:a5:43:95:a6:22:1d:1b:f3:38:ef:17:31:
02:b4:f8:33:3e:97:2c:07:1b:9f:0d:5d:63:32:b1:
d6:ba:a2:08:ec:94:05:95:be:84:c3:7e:87:1c:f4:
22:0c:2e:f9:ed:c7:ff:f2:85:f5:62:d1:24:64:c0:
25:ee:8b:e4:83:f4:7a:28:ac:ac:2b:4d:f7:39:88:
f9:77:6f:ce:7b:6b:aa:43:68:39:27:85:31:82:0b:
99:1e:6e:1f:c5:f9:08:51:97:bb:0d:43:7e:9f:36:
14:d4:51:ad:b0:e8:6c:15:58:95:f6:98:5f:f4:d1:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:42:32:C0:50:81:9E:0E:8B:43:29:E6:89:39:18:B0:C2:D1:C3:EE
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS142111.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.82.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b5:e0:a8:0a:86:38:33:0a:a9:13:5e:72:97:c9:87:93:fd:
f4:66:35:e8:5f:ef:9e:0a:81:f8:88:0c:9d:f0:ec:c6:92:be:
d1:98:15:82:b2:3a:4a:8a:c2:18:fb:05:97:ec:cc:1c:10:c2:
67:bd:9a:7c:01:19:6d:4b:4d:3b:d1:10:65:30:89:c0:48:cc:
0e:28:46:bf:19:7e:f7:44:6c:7f:f4:81:a7:76:b5:5d:4d:38:
87:40:4e:5d:56:22:96:2a:c3:1d:a3:72:c1:ee:8a:6e:94:d6:
9c:e7:d4:82:2d:5c:d9:9d:77:83:50:30:97:e6:3d:2e:ef:06:
be:90:34:62:3e:89:6b:33:fa:75:36:0e:47:b4:a4:65:87:a5:
7a:e0:47:21:b9:99:9a:ed:5b:2b:df:79:db:35:a9:2f:8c:05:
c1:a3:d3:37:a9:9d:23:08:e3:f4:a6:b1:83:c3:97:39:06:4c:
58:9c:1e:83:89:97:af:e0:8b:4f:34:e7:13:f7:50:b6:d0:59:
04:bc:5e:a5:77:03:1c:45:64:b2:13:5e:b7:9f:4d:02:f0:6a:
1c:93:8b:42:b2:71:0b:1b:f3:11:0e:d1:66:b9:bc:0d:4e:df:
9e:13:56:3b:c3:a0:7e:4f:3a:d0:6a:09:bf:7a:fc:72:c9:4e:
03:11:69:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:04:03 2026 by rpki-client