Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS140681.roa
File: AS140681.roa (raw, json)
Hash identifier: CgGIkRz4DTQNQnEQtzi7ZLiuWMsEqKoCAgScS8LUhf4=
Subject key identifier: A7:EA:DD:73:AD:0B:50:13:73:6B:15:CD:E1:4A:B9:F6:8D:C7:54:9F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3D47FDD8661CCB2D9173271285A654667C9A0394
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS140681.roa
Signing time: Tue 08 Sep 2026 08:35:24 +0000
ROA not before: Tue 08 Sep 2026 08:30:24 +0000
ROA not after: Tue 07 Sep 2027 08:35:24 +0000
asID: 140681
IP address blocks: 188.220.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:47:fd:d8:66:1c:cb:2d:91:73:27:12:85:a6:54:66:7c:9a:03:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 8 08:30:24 2026 GMT
Not After : Sep 7 08:35:24 2027 GMT
Subject: CN=A7EADD73AD0B5013736B15CDE14AB9F68DC7549F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:4d:26:9f:ec:5c:09:ae:ef:c7:3d:47:ed:
bd:14:92:ee:4d:34:ef:da:11:3d:c5:ad:99:c8:8a:
fd:4d:e3:87:cc:d1:45:77:e2:dd:d0:8d:51:55:f2:
3c:c9:d8:47:95:bf:76:9e:65:1c:ff:42:53:54:4d:
85:69:c0:77:32:51:1d:5d:c2:62:6c:69:21:0c:44:
05:7e:f7:25:7d:d0:9d:77:4d:bb:f8:9a:30:1f:b6:
73:6f:d0:25:8e:87:8b:66:6f:83:a8:dc:c1:c6:17:
35:ea:db:15:31:eb:e6:14:f0:b7:1e:f0:30:5d:43:
5d:41:8a:6f:a7:96:7f:f6:59:2c:48:5e:b4:3a:1f:
8f:7c:74:4f:7a:e2:31:40:9e:ac:1d:01:60:76:2c:
ba:70:40:92:a6:d4:77:c1:4e:fb:6e:3c:f2:57:0d:
44:5a:b5:23:b8:93:d0:d0:8c:15:de:2a:3c:e9:35:
9b:1a:39:55:74:98:20:ed:3a:cb:e1:6e:48:01:8c:
7d:3e:ef:c8:22:71:60:a1:1c:90:4f:32:63:a3:42:
99:a7:d3:d1:d0:e3:b0:53:be:45:13:d5:84:89:6b:
f4:86:eb:6b:33:e2:a2:84:c0:e6:5f:d0:6f:65:1a:
0e:25:47:9e:2c:be:f3:66:72:44:3a:3d:0d:71:d1:
3b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EA:DD:73:AD:0B:50:13:73:6B:15:CD:E1:4A:B9:F6:8D:C7:54:9F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS140681.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.120.0/24
Signature Algorithm: sha256WithRSAEncryption
77:63:6d:fc:fa:f0:91:41:bc:9c:12:a2:07:03:c6:4a:fb:b9:
d4:05:cb:6f:2b:9f:32:e7:a7:38:e9:67:b6:a8:74:91:d1:75:
36:64:ba:75:75:74:b4:47:c7:df:9d:7d:3e:98:5d:1a:6e:8c:
ea:dc:30:9b:ae:57:23:07:8e:d5:c6:4c:01:c7:a3:78:d4:bc:
33:60:44:47:f3:1c:cf:32:56:0a:a9:ff:87:0c:d7:31:c4:7f:
aa:dd:0b:5b:b1:ee:6f:f8:8e:77:47:6b:6d:ab:1a:1d:ad:e4:
b4:29:cf:33:84:c6:6d:99:81:1b:9a:3a:09:f8:30:1d:c0:fb:
f9:a6:02:af:a8:90:c1:28:0c:45:8d:df:ea:fd:2a:47:c0:bf:
8a:09:09:f2:f6:29:83:26:c0:33:0d:aa:92:1a:bc:d5:19:82:
4d:9e:06:80:b0:8b:32:ce:ba:d5:84:92:96:68:11:4e:b8:d0:
7a:a1:bf:b7:75:76:15:2d:9c:0b:93:dc:ab:e1:64:e2:29:92:
ce:70:e6:db:6f:b6:86:2b:d1:f2:41:10:16:fe:8e:b3:b1:da:
c2:4f:b9:d7:f8:33:34:4e:50:cb:ff:76:5f:f8:f1:e6:f2:9a:
87:32:7b:26:3c:a5:0d:c8:bf:a2:3f:3d:e5:69:42:ed:f4:46:
8a:84:1b:5c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUPUf92GYcyy2RcycShaZUZnyaA5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MDgwODMwMjRaFw0yNzA5MDcwODM1MjRaMDMxMTAvBgNV
BAMTKEE3RUFERDczQUQwQjUwMTM3MzZCMTVDREUxNEFCOUY2OERDNzU0OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpQ00mn+xcCa7vxz1H7b0Uku5N
NO/aET3FrZnIiv1N44fM0UV34t3QjVFV8jzJ2EeVv3aeZRz/QlNUTYVpwHcyUR1d
wmJsaSEMRAV+9yV90J13Tbv4mjAftnNv0CWOh4tmb4Oo3MHGFzXq2xUx6+YU8Lce
8DBdQ11Bim+nln/2WSxIXrQ6H498dE964jFAnqwdAWB2LLpwQJKm1HfBTvtuPPJX
DURatSO4k9DQjBXeKjzpNZsaOVV0mCDtOsvhbkgBjH0+78gicWChHJBPMmOjQpmn
09HQ47BTvkUT1YSJa/SG62sz4qKEwOZf0G9lGg4lR54svvNmckQ6PQ1x0TvLAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUp+rdc60LUBNzaxXN4Uq59o3HVJ8wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTQwNjgxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNx4
MA0GCSqGSIb3DQEBCwUAA4IBAQB3Y238+vCRQbycEqIHA8ZK+7nUBctvK58y56c4
6We2qHSR0XU2ZLp1dXS0R8ffnX0+mF0abozq3DCbrlcjB47VxkwBx6N41LwzYERH
8xzPMlYKqf+HDNcxxH+q3Qtbse5v+I53R2ttqxodreS0Kc8zhMZtmYEbmjoJ+DAd
wPv5pgKvqJDBKAxFjd/q/SpHwL+KCQny9imDJsAzDaqSGrzVGYJNngaAsIsyzrrV
hJKWaBFOuNB6ob+3dXYVLZwLk9yr4WTiKZLOcObbb7aGK9HyQRAW/o6zsdrCT7nX
+DM0TlDL/3Zf+PHm8pqHMnsmPKUNyL+iPz3laULt9EaKhBtc
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:52:37 2026 by rpki-client