Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: V4A8/Vf0UK3C+y+2PWvvWeP1rAOJxbI1fT13JRZQB80=
Subject key identifier: 9F:2C:67:54:E5:74:2C:08:B2:AD:02:6F:BE:A3:F2:B8:5C:39:D5:44
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3E209BC11FE07AF9F76B6D68823BB3B55ADA0F47
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS147281.roa
Signing time: Tue 01 Sep 2026 09:58:51 +0000
ROA not before: Tue 01 Sep 2026 09:53:51 +0000
ROA not after: Tue 31 Aug 2027 09:58:51 +0000
asID: 147281
IP address blocks: 51.146.16.0/24 maxlen: 24
188.221.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:20:9b:c1:1f:e0:7a:f9:f7:6b:6d:68:82:3b:b3:b5:5a:da:0f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 1 09:53:51 2026 GMT
Not After : Aug 31 09:58:51 2027 GMT
Subject: CN=9F2C6754E5742C08B2AD026FBEA3F2B85C39D544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:c9:21:22:ea:70:fe:6c:6f:36:81:61:2e:
e9:41:55:6e:b8:9f:76:f3:57:9b:fa:92:96:22:51:
c6:d1:49:74:38:a1:17:7c:b7:46:0c:78:ab:ed:63:
3d:bf:98:8f:f6:c9:77:02:02:28:70:cd:ab:09:a9:
ce:9b:a4:2d:4d:6c:f4:d5:c9:90:6b:03:ba:cc:62:
73:46:4b:e4:72:45:70:95:59:10:b9:f3:53:d5:ca:
6d:23:c5:ea:42:55:e3:cb:36:dc:e9:ba:6d:5c:e0:
e3:06:6a:49:95:54:bc:04:30:c9:43:21:6b:e1:e9:
64:29:a7:f0:04:25:3d:b3:bc:63:57:1f:43:87:93:
a9:44:38:43:15:14:c9:55:5e:19:b4:99:12:9c:5c:
4f:89:16:dd:d0:ba:07:f0:70:18:92:3e:a1:cd:c9:
e3:51:57:f7:16:06:30:79:3e:8b:8b:1d:c3:fc:f1:
92:11:4a:a6:ad:cc:10:6b:b3:73:df:02:f9:6e:a4:
eb:85:82:a2:a6:00:5f:36:25:41:a4:08:79:1f:64:
fb:a9:2b:67:ea:8a:0e:1a:cb:f0:41:65:2d:ed:c1:
5a:67:4e:87:eb:e1:c4:77:90:75:3a:54:d8:6d:b1:
d2:77:a1:0e:c7:52:a2:73:a1:d2:91:5d:e3:ee:b4:
6e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2C:67:54:E5:74:2C:08:B2:AD:02:6F:BE:A3:F2:B8:5C:39:D5:44
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.16.0/24
188.221.13.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ac:cc:8b:03:42:5d:aa:5f:2b:ce:9b:30:f8:51:ee:1d:24:
73:80:c7:36:b3:0d:db:70:0a:7f:4f:9f:37:09:11:73:05:15:
d5:0b:7d:bb:ea:e6:72:49:8d:71:9a:aa:55:f0:a8:ef:cb:a4:
a5:b3:d6:e3:5e:37:86:15:4b:2c:7b:85:7d:6b:ed:42:0d:51:
a5:8a:af:aa:fc:0c:e5:6d:e5:7c:e8:8f:4e:2a:b6:8a:f4:6a:
95:8f:11:f1:33:ae:bd:bc:28:95:80:6d:5c:58:91:e9:24:f4:
08:02:8c:14:cb:0b:aa:14:0a:65:1f:2d:a7:04:95:af:26:06:
ec:f0:9d:56:fe:8a:bf:67:17:3b:f7:00:6e:fd:84:e4:2c:2a:
49:96:b7:3c:8a:b2:2b:07:df:9a:ff:98:89:e7:96:ea:09:bd:
13:e9:4a:32:65:c3:86:ff:67:08:3b:bf:33:ce:41:6d:30:4b:
87:90:87:05:4c:78:3f:2d:2d:bb:e5:21:53:f4:df:b6:61:01:
d6:8b:01:19:49:e7:81:e0:f7:16:a8:61:c5:ad:83:37:cb:b6:
c4:69:af:d3:9f:94:97:36:54:48:3e:31:c5:31:50:46:89:62:
54:70:92:ef:50:94:e2:5a:92:e8:79:fe:01:f8:4f:3f:ad:bc:
14:19:2e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:39 2026 by rpki-client