Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS140641.roa
File: AS140641.roa (raw, json)
Hash identifier: KwK1m0b/RSRgDiUi2TkeoWltPsBJC/rc75ZZ+x6j81k=
Subject key identifier: F3:95:36:5C:A4:86:B6:2B:56:30:65:A2:7D:5A:C9:A0:94:39:EB:A8
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 66F6024A4A3B7D17BB42D6EBD4F2A4FED57D6A42
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS140641.roa
Signing time: Fri 26 Jun 2026 08:08:44 +0000
ROA not before: Fri 26 Jun 2026 08:03:44 +0000
ROA not after: Fri 25 Jun 2027 08:08:44 +0000
asID: 140641
IP address blocks: 2a0f:85c1:3d7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f6:02:4a:4a:3b:7d:17:bb:42:d6:eb:d4:f2:a4:fe:d5:7d:6a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:44 2026 GMT
Not After : Jun 25 08:08:44 2027 GMT
Subject: CN=F395365CA486B62B563065A27D5AC9A09439EBA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:7e:49:90:b5:9d:65:1f:bd:f6:03:68:8e:
b7:f9:dc:a5:18:1c:f8:ba:9f:51:fc:23:c2:e6:89:
8a:b3:4a:42:ae:e4:5f:3d:97:29:07:f3:d4:5f:e2:
b5:8d:8f:f4:12:e6:83:e6:ae:45:39:cc:9b:dc:e1:
6d:48:8a:cd:a3:44:85:95:c8:72:9d:65:53:f8:e4:
a0:b9:84:e9:f0:7b:4b:4e:b9:12:aa:ca:61:12:7b:
a8:97:80:b7:66:45:5d:c3:2d:d9:b8:9b:ed:39:91:
dd:8c:8c:53:7a:35:4c:ea:35:63:52:57:1d:bd:f2:
f3:22:23:20:5d:13:24:ee:1a:2b:c2:ec:c6:8d:c3:
e3:57:4b:aa:dc:50:ad:1a:c2:33:c9:9f:23:e7:0d:
a5:97:e2:08:24:47:fb:57:6b:29:20:2a:0e:55:18:
8f:17:1c:ac:3a:43:29:db:12:59:b8:bb:03:7e:3a:
0f:a5:a4:6e:91:3e:b3:7f:34:d4:9c:12:5f:ba:48:
75:6b:e0:a5:b1:df:9c:82:e8:70:b1:e0:60:28:6b:
15:28:0a:e3:a1:fb:43:a1:80:7b:37:46:e6:2c:3d:
7c:99:39:e0:29:ab:3d:12:64:ce:42:98:60:b0:c6:
40:9d:ef:ea:38:ef:7b:dd:c9:e7:55:e1:a7:9e:4e:
a6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:95:36:5C:A4:86:B6:2B:56:30:65:A2:7D:5A:C9:A0:94:39:EB:A8
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS140641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3d7::/48
Signature Algorithm: sha256WithRSAEncryption
b9:0d:7d:33:d4:a2:14:51:9a:a5:a2:6c:0b:3e:c5:4f:33:e1:
72:d5:55:92:3b:7a:87:1b:75:dd:5a:cc:e2:fe:0c:b8:3d:0f:
27:64:a5:f4:97:28:0e:f2:a8:8a:69:0d:e5:c9:74:05:03:3c:
07:bf:fc:77:a6:0e:a8:7a:a9:7d:d2:95:8a:18:bd:a4:7b:50:
91:de:d1:91:ca:e9:f5:9f:b4:53:b9:1d:95:c8:19:fa:7e:84:
55:aa:cd:e4:a8:61:d8:55:ca:95:8a:af:65:47:1e:1c:80:dd:
53:e9:32:e9:18:cb:b0:83:12:d1:b1:52:9e:aa:c1:79:78:33:
de:68:0d:eb:cb:7d:aa:5d:ac:20:60:7f:2e:4a:32:ff:bf:c6:
0d:de:5e:a7:fd:aa:4b:d5:cb:6f:ea:57:07:69:32:df:d0:7d:
58:56:66:57:9b:6f:d3:4a:32:58:e8:9a:a8:f3:f4:b1:b0:33:
a9:ef:0f:f9:1d:97:0d:72:3b:79:6f:7e:c3:91:4b:c9:ec:7e:
ce:67:12:10:bb:83:95:30:02:e6:70:04:71:65:c1:fe:18:9c:
4d:8e:93:2d:81:c7:7e:9d:24:08:b5:a1:44:29:64:af:ff:3c:
0e:bd:cd:6d:bc:fa:19:1f:c4:46:78:6e:f8:fb:da:af:25:c1:
90:a2:5d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:35:23 2026 by rpki-client