Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: NOwFRxu0ZsTH0XP4d2pjDFQWvXCr9ZRrY8fszJCpF+M=
Subject key identifier: 75:B1:81:0C:1F:42:14:AC:17:B8:E5:A5:39:B2:5A:E3:E7:26:8D:35
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 14BFAE373677C46D67538CFBA07872005ACA97
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS147281.roa
Signing time: Sat 10 Oct 2026 02:08:17 +0000
ROA not before: Sat 10 Oct 2026 02:03:17 +0000
ROA not after: Sat 09 Oct 2027 02:08:17 +0000
asID: 147281
IP address blocks: 152.89.250.0/24 maxlen: 24
194.5.148.0/24 maxlen: 24
195.206.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:bf:ae:37:36:77:c4:6d:67:53:8c:fb:a0:78:72:00:5a:ca:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 10 02:03:17 2026 GMT
Not After : Oct 9 02:08:17 2027 GMT
Subject: CN=75B1810C1F4214AC17B8E5A539B25AE3E7268D35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:12:e8:0b:c3:82:52:1c:f0:ca:74:82:6f:
7d:ba:a4:52:37:56:b2:6c:dd:17:43:ad:d3:57:7a:
83:bd:ae:b2:a7:dd:44:fd:2f:53:e0:db:25:69:ed:
0c:72:f2:60:a2:e0:be:ed:aa:f7:ad:2c:16:53:59:
83:ce:17:27:93:2a:fb:b9:86:d4:62:07:a6:66:37:
a5:40:0a:e1:f8:a5:cb:8d:7c:77:20:0c:07:a0:15:
a5:a6:d3:de:11:6b:28:77:c6:43:51:26:c3:86:50:
bf:bf:13:d7:3b:94:1b:bd:aa:e9:dc:b0:eb:60:0b:
68:08:7a:be:6e:f2:5f:ec:7e:bb:dc:d6:2d:f2:0d:
99:67:ed:4e:75:80:37:a6:a1:9e:d9:b0:a7:a9:4d:
78:c9:65:43:3f:c2:98:ac:34:e5:eb:2b:38:a0:0d:
ac:81:82:57:ef:a5:e2:17:41:28:51:99:4f:f5:0d:
77:dd:22:61:90:97:f1:00:4b:20:d5:af:60:09:42:
f4:bb:41:e8:bb:3b:10:96:1d:38:2f:ae:9d:24:d6:
c5:6e:a8:de:c7:f3:c6:a6:09:12:bf:a2:61:dc:7d:
78:7a:78:41:c2:f9:b5:c5:c2:a2:45:74:b8:74:34:
e0:17:31:5a:6b:b4:70:0c:e9:42:9f:40:5e:ec:17:
4e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B1:81:0C:1F:42:14:AC:17:B8:E5:A5:39:B2:5A:E3:E7:26:8D:35
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.250.0/24
194.5.148.0/24
195.206.235.0/24
Signature Algorithm: sha256WithRSAEncryption
41:bd:ba:e4:e2:82:cc:a7:79:b7:e5:12:73:ed:2a:13:b0:fa:
14:4d:d3:d1:5b:68:07:7f:52:32:f1:a5:f1:de:b8:f2:ca:88:
14:0e:45:6d:0b:27:a4:e6:d2:ab:90:ed:e1:14:12:0b:69:48:
3f:c2:a5:2d:66:24:93:0c:e9:c3:74:50:6b:d9:1f:cf:03:13:
93:bc:02:53:8e:00:24:d4:b5:4c:07:1d:ad:b0:d6:96:5c:63:
b9:26:81:cc:8a:04:12:72:23:be:c5:4e:e2:a9:c5:de:94:42:
3f:c9:38:ad:9f:45:20:12:8f:bf:c4:2f:05:df:ee:cd:1e:69:
18:9d:41:48:5d:cd:7b:a2:9e:9f:b7:9c:d2:e8:bb:d5:ba:45:
f4:0e:98:54:93:63:c2:a0:d1:e8:2e:b6:94:bf:f1:34:a8:5a:
86:f2:86:5b:2a:d7:a5:26:e8:e8:eb:0d:b1:dc:4b:8f:a7:50:
ca:66:85:29:4c:bb:1d:2a:2c:0b:89:19:ab:77:c2:e0:95:3e:
97:bd:74:5a:c3:5f:16:32:dc:86:30:08:54:7f:4d:2e:3e:f8:
19:f2:06:23:d4:af:8c:d1:aa:11:da:ea:94:05:74:e9:31:b6:
16:54:ae:49:41:be:3b:56:9e:d1:34:12:00:77:1c:30:38:fe:
ec:1f:d5:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:46:55 2026 by rpki-client