Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS142240.roa
File: AS142240.roa (raw, json)
Hash identifier: NaBuIYhDRET4nshqV9A6K5FM7WAB3IWJE+GwrzSX5lk=
Subject key identifier: B4:35:E5:27:00:42:82:A9:A6:A8:C5:71:2C:CA:51:B8:32:B6:DF:CE
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 77E1D8CD278C3B4C439889F0AF3CE724E1AE0248
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS142240.roa
Signing time: Wed 12 Aug 2026 06:15:21 +0000
ROA not before: Wed 12 Aug 2026 06:10:21 +0000
ROA not after: Wed 11 Aug 2027 06:15:21 +0000
asID: 142240
IP address blocks: 51.241.21.0/24 maxlen: 24
188.220.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:e1:d8:cd:27:8c:3b:4c:43:98:89:f0:af:3c:e7:24:e1:ae:02:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 12 06:10:21 2026 GMT
Not After : Aug 11 06:15:21 2027 GMT
Subject: CN=B435E527004282A9A6A8C5712CCA51B832B6DFCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:15:71:41:6f:00:42:ef:9f:02:38:84:e3:d0:
fd:0c:29:14:e7:fa:f3:16:87:48:cf:7a:f6:51:5d:
96:ce:f9:15:1a:4e:c7:c0:4d:8e:02:79:2f:bd:1e:
53:f9:95:73:b0:3f:8f:19:68:ba:4f:ff:5d:4d:e1:
c3:94:82:9c:0f:cd:a5:14:f9:78:45:3a:69:80:c7:
e3:b0:48:ec:47:62:79:a4:bf:48:79:8e:0c:6a:34:
82:3d:51:11:70:4f:74:47:71:ed:1e:1c:ee:8b:a8:
7c:2b:cf:73:a1:45:92:58:49:45:6a:f7:9e:f0:f2:
6b:35:b2:9b:1b:9d:82:a8:fa:ff:a7:8e:ee:4f:63:
99:19:5c:54:bb:d4:2e:77:40:64:6a:c5:b3:c7:ba:
f0:84:e8:ff:b2:34:bd:f8:18:ca:33:48:12:5d:fe:
8d:0b:85:de:51:c3:bd:e4:45:c9:60:d9:92:fc:5a:
5e:d6:0a:01:0d:cf:52:a2:44:19:50:43:88:e1:0f:
92:b7:99:c9:96:39:15:5a:08:1d:23:81:3d:9c:1a:
ad:61:ec:07:60:65:d6:1a:74:a1:77:59:dc:1f:67:
48:2f:a0:2a:1e:aa:a2:5f:43:7c:f6:89:a1:79:30:
80:af:84:c0:28:8d:4b:ec:07:72:e2:e7:59:4d:a7:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:35:E5:27:00:42:82:A9:A6:A8:C5:71:2C:CA:51:B8:32:B6:DF:CE
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS142240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.21.0/24
188.220.2.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f0:f2:82:d6:65:d3:42:d6:73:51:af:8c:7b:4f:24:59:0a:
1a:a8:fb:6f:5c:da:85:36:e4:a3:dc:81:50:ef:04:15:dc:f9:
46:a4:d0:c3:e0:a9:60:b1:de:eb:ad:ed:03:25:55:6b:46:1d:
0f:e9:fd:6e:f2:22:f4:6d:5b:e6:79:f2:b2:57:59:52:c1:12:
ba:c6:a8:be:8f:b9:2e:cc:8f:4c:96:c7:56:4a:9e:c3:38:ad:
04:43:7f:b9:8d:0e:a7:fb:5a:08:be:f7:f8:b6:77:03:7e:c5:
93:a9:aa:3b:da:84:29:17:9c:af:b1:4d:36:90:b4:4c:00:67:
1d:93:a0:36:66:25:86:9e:18:03:1b:7e:99:d6:54:f2:76:b1:
cb:db:28:b8:e5:23:90:5b:96:2a:23:55:94:4d:58:a5:2b:63:
e8:0c:6d:7e:b3:2e:42:78:80:95:ae:42:6d:96:76:ed:55:6a:
b1:3b:a4:6a:46:73:ed:b9:a7:41:b3:0c:ec:c2:73:b3:20:b3:
86:3b:1a:bd:b0:13:46:10:61:c4:3c:bd:3f:e5:e3:3a:24:6b:
03:2a:07:c6:00:1d:35:0b:9d:20:fb:9f:a9:e8:75:74:41:9b:
a6:13:c4:e6:53:56:40:36:a1:7d:56:ce:7f:b2:ce:1f:79:11:
93:26:44:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:48 2026 by rpki-client