Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS146943.roa
File: AS146943.roa (raw, json)
Hash identifier: 4ZA2DMgIsUs+E46rJMRf3zphqDjQ2hnHi0hHk8grEu8=
Subject key identifier: 16:E9:F7:04:8E:39:8A:43:3B:82:87:E6:12:41:64:59:56:99:45:FC
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 11C887697B68FEA09413B89071BF635C93055A40
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS146943.roa
Signing time: Thu 09 Jul 2026 06:20:03 +0000
ROA not before: Thu 09 Jul 2026 06:15:03 +0000
ROA not after: Thu 08 Jul 2027 06:20:03 +0000
asID: 146943
IP address blocks: 45.142.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:c8:87:69:7b:68:fe:a0:94:13:b8:90:71:bf:63:5c:93:05:5a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 9 06:15:03 2026 GMT
Not After : Jul 8 06:20:03 2027 GMT
Subject: CN=16E9F7048E398A433B8287E612416459569945FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:7d:0e:51:c2:cb:86:d3:d8:c9:9f:4b:f0:
ca:b7:6d:77:70:7a:11:ad:5f:ed:7b:66:bc:8b:a7:
3e:c0:f1:79:cf:c0:0c:a3:d2:76:fd:69:40:f7:1a:
24:74:97:ee:fb:0a:68:a0:10:7e:22:28:5d:f6:f3:
cc:6d:8f:93:05:c5:8e:ad:26:f3:41:19:1b:5d:03:
47:fe:7f:40:19:b9:ab:df:f9:89:82:62:6d:23:81:
d3:26:70:ea:c6:87:a2:38:8c:64:73:5f:9d:eb:eb:
89:fa:39:47:e2:eb:eb:9f:74:fa:94:c5:59:2c:ff:
b7:72:91:32:7c:4a:63:86:82:89:26:af:1a:30:8d:
ab:da:27:0a:7f:74:4f:ad:8a:e6:1f:53:95:fe:0c:
30:f5:c6:9c:58:09:de:12:20:32:07:3a:0e:4a:3b:
cc:6a:3f:9c:7b:89:6c:07:92:31:2d:63:df:89:2f:
f9:ad:04:f5:99:6a:d9:52:39:2f:b1:1f:4f:2a:73:
6a:6d:0d:75:71:09:e2:26:03:45:ae:1d:9f:83:f1:
2a:b4:75:b9:71:91:71:63:cc:33:a8:10:3b:85:49:
af:49:39:af:18:85:62:40:56:ee:49:30:4d:8c:fa:
34:ff:7d:3f:08:0a:da:27:59:9b:95:80:8a:91:16:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E9:F7:04:8E:39:8A:43:3B:82:87:E6:12:41:64:59:56:99:45:FC
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS146943.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.237.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d3:c3:e0:6e:11:64:c0:78:1c:c0:d3:c1:d8:db:47:8f:b2:
1e:d2:fd:44:8b:81:54:17:92:a4:78:a5:27:92:3a:8d:14:2d:
a7:f7:6a:2c:a6:09:b0:8a:d8:48:83:16:a2:08:8e:d1:4b:98:
1f:69:29:ea:e2:b6:c8:da:27:38:b2:17:38:02:4b:00:b4:43:
a1:cf:99:29:01:ac:04:54:32:63:34:c5:3b:cd:50:f7:51:1f:
26:e1:ed:16:2d:56:a6:87:01:61:d8:f7:e8:75:a2:f1:df:56:
9c:09:c0:de:29:09:1d:d9:d2:c6:09:ed:0e:70:6d:de:23:f6:
04:09:4b:94:a4:7e:bd:39:7b:71:05:a7:49:10:1c:47:c7:0a:
d6:c4:11:47:cb:6f:e0:1e:5d:6d:bc:d8:e5:cf:ca:58:a7:d6:
2e:ef:aa:e8:3c:d6:1f:35:5a:82:5f:c6:54:66:3c:ed:15:06:
a4:25:7f:33:13:ce:ba:98:12:86:7c:50:f1:33:43:2d:4b:bb:
92:0b:59:4e:2d:2a:e0:1d:0f:e9:23:b6:12:c4:1c:3c:62:bf:
e3:d3:28:e9:e6:59:63:9a:85:d9:d0:8b:d0:d5:ec:25:46:31:
93:68:ce:7b:9f:71:83:3e:95:c0:f6:c3:12:a4:09:9b:47:7f:
ce:f8:e7:53
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUEciHaXto/qCUE7iQcb9jXJMFWkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjA3MDkwNjE1MDNaFw0yNzA3MDgwNjIwMDNaMDMxMTAvBgNV
BAMTKDE2RTlGNzA0OEUzOThBNDMzQjgyODdFNjEyNDE2NDU5NTY5OTQ1RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoGH0OUcLLhtPYyZ9L8Mq3bXdw
ehGtX+17ZryLpz7A8XnPwAyj0nb9aUD3GiR0l+77CmigEH4iKF3288xtj5MFxY6t
JvNBGRtdA0f+f0AZuavf+YmCYm0jgdMmcOrGh6I4jGRzX53r64n6OUfi6+ufdPqU
xVks/7dykTJ8SmOGgokmrxowjavaJwp/dE+tiuYfU5X+DDD1xpxYCd4SIDIHOg5K
O8xqP5x7iWwHkjEtY9+JL/mtBPWZatlSOS+xH08qc2ptDXVxCeImA0WuHZ+D8Sq0
dblxkXFjzDOoEDuFSa9JOa8YhWJAVu5JME2M+jT/fT8ICtonWZuVgIqRFr3jAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUFun3BI45ikM7gofmEkFkWVaZRfwwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMTQ2OTQzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY7t
MA0GCSqGSIb3DQEBCwUAA4IBAQBm08PgbhFkwHgcwNPB2NtHj7Ie0v1Ei4FUF5Kk
eKUnkjqNFC2n92ospgmwithIgxaiCI7RS5gfaSnq4rbI2ic4shc4AksAtEOhz5kp
AawEVDJjNMU7zVD3UR8m4e0WLVamhwFh2PfodaLx31acCcDeKQkd2dLGCe0OcG3e
I/YECUuUpH69OXtxBadJEBxHxwrWxBFHy2/gHl1tvNjlz8pYp9Yu76roPNYfNVqC
X8ZUZjztFQakJX8zE866mBKGfFDxM0MtS7uSC1lOLSrgHQ/pI7YSxBw8Yr/j0yjp
5lljmoXZ0IvQ1ewlRjGTaM57n3GDPpXA9sMSpAmbR3/O+OdT
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:41:32 2026 by rpki-client