Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS142532.roa
File: AS142532.roa (raw, json)
Hash identifier: ACpKydaOCpkRUG6jETKH0RGBY24jWkpZHyPzEneLXjY=
Subject key identifier: 26:0E:08:4B:2C:9C:E5:93:42:E6:19:E2:DB:29:82:0E:C8:3B:12:01
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4F2E1CAA8BC4F86EC7F83366F1413874FF65615B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS142532.roa
Signing time: Tue 14 Jul 2026 03:31:13 +0000
ROA not before: Tue 14 Jul 2026 03:26:13 +0000
ROA not after: Tue 13 Jul 2027 03:31:13 +0000
asID: 142532
IP address blocks: 78.105.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:2e:1c:aa:8b:c4:f8:6e:c7:f8:33:66:f1:41:38:74:ff:65:61:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 14 03:26:13 2026 GMT
Not After : Jul 13 03:31:13 2027 GMT
Subject: CN=260E084B2C9CE59342E619E2DB29820EC83B1201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8d:9e:4d:41:ce:d5:68:9a:5e:e3:c8:f2:e7:
69:70:94:6a:7c:0d:f8:0a:d3:13:8a:e6:b9:bc:9d:
31:47:4f:c2:f2:0a:66:a8:0c:b9:7f:b6:43:77:18:
1d:3e:56:15:36:db:55:c2:11:14:84:ee:52:c6:b8:
f5:5a:4c:11:20:cc:64:33:bb:0e:8a:cc:ff:09:a9:
72:f2:e1:03:db:e9:9a:9c:f3:fc:e1:3d:d8:bd:0e:
3c:ed:dd:bb:f1:df:8a:55:cd:e8:37:b7:ed:b8:f9:
93:b7:dc:09:3f:43:05:ed:a0:2b:7b:8e:ff:8a:a2:
5f:ab:9e:b4:67:fc:a5:14:f9:11:ce:fb:c9:ca:e5:
ee:56:d1:30:8a:04:22:45:aa:db:12:d3:3a:00:d3:
15:84:f2:0d:aa:70:d3:36:03:8d:1a:71:0a:f8:74:
0d:fb:7f:9c:7e:a0:fd:c7:b0:3a:e2:c4:b9:cb:61:
37:15:59:cf:fa:5d:f0:dc:47:fb:80:40:da:78:53:
f4:73:af:09:0b:8f:02:98:74:b0:3a:b5:b3:f9:51:
39:b2:a8:92:1c:7d:ce:f6:55:f0:ca:60:2a:ea:85:
64:c8:dd:84:12:b9:8d:b0:32:39:0b:f3:e7:3a:b5:
55:ef:12:7a:f9:cc:59:4a:c8:02:94:52:3e:6b:dd:
98:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0E:08:4B:2C:9C:E5:93:42:E6:19:E2:DB:29:82:0E:C8:3B:12:01
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS142532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.124.0/24
Signature Algorithm: sha256WithRSAEncryption
89:87:f0:72:b9:80:43:b3:ee:03:f1:19:52:d3:69:51:fa:7d:
c8:16:91:d9:d4:bf:48:a8:82:68:39:47:e5:98:2f:bf:1a:1d:
8c:00:76:9c:9c:97:9e:74:f3:4d:68:30:69:e7:25:fc:e8:e8:
42:2e:97:25:c2:4b:71:4e:22:40:40:7d:b6:50:3c:18:b7:35:
92:ed:74:c8:9e:d8:3d:6e:32:70:40:2e:0f:ed:0e:0d:b0:0a:
8e:74:8e:d3:ac:81:80:99:86:0b:64:f6:9d:c1:77:ee:83:e7:
aa:e5:51:91:e1:ce:47:03:37:29:02:a7:e0:60:47:a6:36:d4:
10:b8:d4:7f:92:bc:1d:c3:d4:84:e5:b3:7d:34:b9:1e:69:7d:
f4:2a:33:ab:ac:b6:36:f4:e9:99:91:36:cc:29:54:cc:13:75:
71:60:ae:d4:87:2f:a7:a0:34:e3:ed:0b:11:08:20:59:d3:a4:
19:32:d6:8a:f9:e1:75:fd:86:ae:f5:36:3a:89:07:25:23:32:
4c:2b:1e:29:6d:eb:c1:d7:74:9c:c8:9c:fb:8a:4a:cb:e9:cf:
8b:33:c5:90:26:62:5d:60:99:31:4f:06:0d:0a:03:70:9e:6c:
69:d0:9e:4f:9a:15:e2:91:73:d4:df:60:98:99:04:ea:b9:ac:
4e:ba:27:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:43:33 2026 by rpki-client