Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS141482.roa
File:                     AS141482.roa (raw, json)
Hash identifier:          nSeSgcYIcDTTbtz2rrZLn0U/QoppWvXRTYN2ccr/m3Q=
Subject key identifier:   C5:D2:04:44:B1:F9:54:DA:19:A6:6D:3F:83:AE:AC:52:B6:73:CF:21
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       06D2B646F86016D5C6BE0401A31699AC625D96AF
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS141482.roa
Signing time:             Wed 24 Jun 2026 02:51:00 +0000
ROA not before:           Wed 24 Jun 2026 02:46:00 +0000
ROA not after:            Wed 23 Jun 2027 02:51:00 +0000
asID:                     141482
IP address blocks:        51.146.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Jun 2026 22:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d2:b6:46:f8:60:16:d5:c6:be:04:01:a3:16:99:ac:62:5d:96:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Jun 24 02:46:00 2026 GMT
            Not After : Jun 23 02:51:00 2027 GMT
        Subject: CN=C5D20444B1F954DA19A66D3F83AEAC52B673CF21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6a:8e:d2:65:fe:b1:27:a8:28:f9:d8:39:c2:
                    5c:34:92:53:94:0d:24:c9:5e:ce:57:6f:fa:f9:04:
                    cf:98:e0:cd:a1:58:43:84:b8:46:1b:3c:fa:eb:35:
                    2d:6d:e1:d4:53:b3:0f:a1:ea:5b:67:35:aa:d5:d9:
                    66:2b:91:21:91:7f:20:97:b2:a8:0b:bc:f8:4d:60:
                    06:96:07:84:a4:e5:b7:4a:89:43:bf:da:97:42:9b:
                    52:ca:a0:3a:15:08:e8:bc:84:7a:03:4a:c8:8a:57:
                    91:c9:0f:17:a7:05:d7:3e:27:37:18:fe:cb:f8:76:
                    4a:0b:1f:ec:31:0a:8c:2e:a7:c6:c0:17:61:5a:f4:
                    31:e5:f6:e8:b5:1c:4a:30:60:d8:df:c4:5c:51:f1:
                    b0:df:ad:f0:f6:26:b1:6d:f2:64:e0:ee:fe:2a:36:
                    16:d9:d8:f1:4c:9c:af:21:25:06:00:80:70:b6:ae:
                    73:1b:e9:9d:1d:ef:bd:20:bf:b8:28:db:0d:43:56:
                    8e:a1:0c:81:f9:4b:33:e2:d5:bc:84:43:cb:4f:e8:
                    a7:ba:d3:0b:d3:6b:fe:93:a4:b7:29:62:47:4e:24:
                    ac:04:23:dc:a6:d1:39:42:5b:ca:72:9a:3d:01:c3:
                    c7:f6:24:d9:a2:47:49:da:3e:86:19:f4:28:72:67:
                    c3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D2:04:44:B1:F9:54:DA:19:A6:6D:3F:83:AE:AC:52:B6:73:CF:21
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS141482.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.146.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:2f:b0:64:79:db:59:a7:e5:99:60:ad:9b:94:ba:21:56:a8:
         31:9a:96:60:08:7c:9d:6a:a0:db:69:d4:a7:e7:4a:2b:47:f4:
         ec:b5:16:7f:68:7f:39:f6:2f:f4:b6:93:16:d1:b6:9c:e2:3a:
         de:47:df:d8:94:a8:ac:fc:eb:de:bd:1f:94:41:bb:c0:b0:64:
         a5:30:cc:2d:c2:82:d2:b8:e3:be:1e:1e:97:27:0e:db:e2:a5:
         32:1c:8b:f5:66:0c:41:1a:09:e4:a2:d9:09:17:53:29:a2:57:
         d4:f1:30:bb:08:87:64:9f:2e:b8:5d:8b:67:44:27:ae:ad:01:
         ab:89:dc:2e:fa:cf:ab:ac:fa:64:8d:4c:2f:62:09:d8:a4:ef:
         c3:bf:9e:7c:1f:a8:60:60:a9:22:1b:1b:39:0f:98:48:00:f5:
         1c:48:97:11:3a:4e:f4:18:71:56:35:62:81:59:85:f3:7a:3e:
         a3:ac:6d:5a:1e:b0:11:95:68:d1:3a:a0:ee:14:71:1f:77:6f:
         09:3e:fe:87:53:83:c2:50:6f:e4:4d:fa:07:b5:7c:98:98:85:
         d5:a6:75:d6:1b:1d:f7:f2:3c:59:b9:1c:8d:53:5e:ff:5f:ba:
         04:75:bd:6f:e0:f4:20:3c:12:58:6d:00:72:a4:04:de:78:e8:
         b9:80:76:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 09:50:47 2026 by rpki-client