Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS146869.roa
File: AS146869.roa (raw, json)
Hash identifier: RqO8MtsAVMzbFLu03g4tkeoqR7XKSvo56D2VdDKpzQk=
Subject key identifier: 90:D8:B8:CF:D1:31:A3:52:C1:0D:9B:4F:FC:58:12:FF:DE:2E:E3:23
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 4D42A76EE306E22CD9C5988F5A6B3735AC0F606A
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS146869.roa
Signing time: Mon 10 Aug 2026 11:08:38 +0000
ROA not before: Mon 10 Aug 2026 11:03:38 +0000
ROA not after: Mon 09 Aug 2027 11:08:38 +0000
asID: 146869
IP address blocks: 194.104.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 19:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:42:a7:6e:e3:06:e2:2c:d9:c5:98:8f:5a:6b:37:35:ac:0f:60:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 10 11:03:38 2026 GMT
Not After : Aug 9 11:08:38 2027 GMT
Subject: CN=90D8B8CFD131A352C10D9B4FFC5812FFDE2EE323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:6c:e6:1a:b5:47:02:c8:d0:02:a3:b1:5c:
1d:d0:1e:93:df:03:c0:df:8c:d2:83:c7:41:1b:0c:
5d:6c:76:4f:db:95:71:e9:98:4f:14:a5:36:02:72:
df:22:18:66:7e:33:3d:61:71:54:5b:41:94:ae:89:
02:b4:43:73:a4:b8:2a:bb:86:2e:74:33:d4:14:34:
0a:14:13:73:2e:46:ee:df:ee:08:26:eb:a2:ed:f9:
d7:e0:a9:bd:22:3d:31:f1:ae:4f:05:57:dc:bd:ac:
2b:a7:d7:01:02:88:88:d9:e1:b8:91:b6:34:29:17:
59:b5:f6:bc:a3:9f:b1:a8:e7:de:02:2f:31:62:a8:
c6:de:da:20:08:5a:2c:2b:a4:ac:53:d1:e9:c7:7a:
16:04:ea:89:f0:e3:39:8e:d3:f3:c8:39:05:24:d7:
f5:c3:59:6c:bc:fc:f3:05:cb:ae:d7:b7:ee:d0:82:
bf:b5:fc:ff:41:bf:7c:11:c1:1d:d5:2c:a6:7a:79:
d1:73:6e:f2:20:91:5c:19:32:89:3f:4e:dd:7d:92:
95:34:bd:6d:ab:d3:fc:41:4c:55:38:39:87:34:c8:
a2:b9:41:7b:8f:d8:07:5a:b4:7f:1f:fb:e9:63:8c:
37:88:c3:80:72:66:b7:93:a9:b3:ec:68:ab:3a:bd:
17:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D8:B8:CF:D1:31:A3:52:C1:0D:9B:4F:FC:58:12:FF:DE:2E:E3:23
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS146869.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.156.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:af:3c:c3:37:dd:e6:96:1d:4a:b9:e0:0f:64:32:f7:72:8f:
c9:9f:df:d1:f4:9c:01:fe:0b:c6:3c:64:f4:74:9d:fa:a2:4b:
79:38:3c:5e:96:89:44:02:6c:c5:0d:ce:4d:5b:3a:a2:79:e6:
25:0b:d7:ab:29:52:e7:ca:08:09:40:d7:ea:ac:1b:f7:f9:ae:
4c:69:70:76:b2:bf:8b:f9:e2:46:ec:6a:a8:e8:9e:36:14:3f:
39:70:16:ec:a6:5a:bd:0a:28:25:17:24:ef:88:70:81:a5:13:
59:2f:73:47:99:bd:0d:86:68:1c:1b:11:21:a0:1d:ca:f0:75:
02:46:f3:7c:75:ab:57:1e:f6:f7:ce:40:9e:86:85:9e:f0:79:
47:be:57:3f:de:e3:2a:9e:35:c6:18:b2:12:0d:1b:bd:31:1d:
4e:03:4f:25:24:e0:22:0c:67:0e:22:4a:e3:9a:99:7a:f7:77:
53:02:77:4c:16:22:a5:1c:d5:f1:63:f4:b8:93:d3:d2:d0:de:
9e:81:62:37:b5:e2:6f:52:46:7a:e8:5b:85:48:a5:1b:48:83:
c3:df:60:d0:0a:9d:ab:45:98:2e:75:43:b3:75:ae:e4:60:15:
a2:cb:e9:a5:cf:46:af:ac:ce:bd:c3:54:2b:7a:36:e3:66:dc:
7b:e8:ae:4b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUTUKnbuMG4izZxZiPWms3NawPYGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjA4MTAxMTAzMzhaFw0yNzA4MDkxMTA4MzhaMDMxMTAvBgNV
BAMTKDkwRDhCOENGRDEzMUEzNTJDMTBEOUI0RkZDNTgxMkZGREUyRUUzMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIh2zmGrVHAsjQAqOxXB3QHpPf
A8DfjNKDx0EbDF1sdk/blXHpmE8UpTYCct8iGGZ+Mz1hcVRbQZSuiQK0Q3OkuCq7
hi50M9QUNAoUE3MuRu7f7ggm66Lt+dfgqb0iPTHxrk8FV9y9rCun1wECiIjZ4biR
tjQpF1m19ryjn7Go594CLzFiqMbe2iAIWiwrpKxT0enHehYE6onw4zmO0/PIOQUk
1/XDWWy8/PMFy67Xt+7Qgr+1/P9Bv3wRwR3VLKZ6edFzbvIgkVwZMok/Tt19kpU0
vW2r0/xBTFU4OYc0yKK5QXuP2AdatH8f++ljjDeIw4ByZreTqbPsaKs6vRcTAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUkNi4z9Exo1LBDZtP/FgS/94u4yMwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMTQ2ODY5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmic
MA0GCSqGSIb3DQEBCwUAA4IBAQALrzzDN93mlh1KueAPZDL3co/Jn9/R9JwB/gvG
PGT0dJ36okt5ODxelolEAmzFDc5NWzqieeYlC9erKVLnyggJQNfqrBv3+a5MaXB2
sr+L+eJG7Gqo6J42FD85cBbsplq9CiglFyTviHCBpRNZL3NHmb0NhmgcGxEhoB3K
8HUCRvN8datXHvb3zkCehoWe8HlHvlc/3uMqnjXGGLISDRu9MR1OA08lJOAiDGcO
Ikrjmpl693dTAndMFiKlHNXxY/S4k9PS0N6egWI3teJvUkZ66FuFSKUbSIPD32DQ
Cp2rRZgudUOzda7kYBWiy+mlz0avrM69w1QrejbjZtx76K5L
-----END CERTIFICATE-----
Generated at Fri Sep 4 06:56:57 2026 by rpki-client