Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS142482.roa
File: AS142482.roa (raw, json)
Hash identifier: jadLs1Un9CDxuII2g54nNijaVXrC+gQ/bxvLcuHV4jM=
Subject key identifier: 45:8B:13:21:B5:22:A3:AC:4F:64:F9:DF:94:26:B2:35:E7:9F:D9:BE
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 7298834A41BFEFCA7FDFD55E6D8DAABC159AF613
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS142482.roa
Signing time: Mon 24 Aug 2026 20:55:22 +0000
ROA not before: Mon 24 Aug 2026 20:50:22 +0000
ROA not after: Mon 23 Aug 2027 20:55:22 +0000
asID: 142482
IP address blocks: 141.11.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:98:83:4a:41:bf:ef:ca:7f:df:d5:5e:6d:8d:aa:bc:15:9a:f6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 24 20:50:22 2026 GMT
Not After : Aug 23 20:55:22 2027 GMT
Subject: CN=458B1321B522A3AC4F64F9DF9426B235E79FD9BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:5a:23:c4:81:fd:a4:b7:82:98:d3:90:7e:
e6:ab:00:1c:30:c5:43:02:a3:24:cb:7b:db:e9:bf:
b6:a6:0b:58:d7:8f:69:1e:cc:ee:f6:82:9f:dd:0b:
0a:c4:8b:d9:8b:9a:08:d0:d3:5a:28:ac:21:55:8c:
5b:85:e0:89:f1:7d:c1:ab:96:b8:ca:dd:06:d8:99:
6b:d4:9e:a2:43:f1:e6:5d:54:bc:d3:a8:c3:cc:fc:
fa:19:d9:0f:8b:a3:a4:03:a6:ff:22:46:07:65:3f:
36:b4:b1:e5:4f:27:f6:12:8b:77:0c:bb:17:75:8c:
33:9e:45:e2:99:d8:4d:18:b1:05:08:8a:e6:58:dd:
c0:48:fc:cb:5e:af:de:08:27:76:d9:f5:03:ab:b9:
ec:ae:40:c3:20:93:48:7e:6c:fa:cc:d5:42:29:e5:
0b:7b:98:21:c5:dc:32:fc:f0:3d:ad:23:52:57:a1:
94:16:51:be:41:35:42:f5:87:74:ed:db:a7:3c:fb:
93:5b:46:31:1f:be:81:1d:1c:7c:e6:f6:6e:d1:1a:
e4:1e:12:b9:86:88:60:4e:31:41:6b:c6:2a:6f:f3:
3e:45:4d:e3:70:3a:db:bb:2a:9a:83:90:54:3e:b8:
e7:e9:5b:41:b0:39:51:07:ac:1a:b8:a8:fa:73:75:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8B:13:21:B5:22:A3:AC:4F:64:F9:DF:94:26:B2:35:E7:9F:D9:BE
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS142482.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.145.0/24
Signature Algorithm: sha256WithRSAEncryption
32:b4:62:26:39:6c:6b:fd:df:8e:21:37:b4:c5:ca:9f:56:3a:
83:b1:6d:6c:ff:55:d0:e7:5a:6d:c7:6e:32:87:c2:c9:c3:fb:
be:28:7d:bc:17:e8:0a:b6:79:dc:78:f9:57:07:38:32:39:9a:
c3:b9:08:15:5f:92:0b:21:d9:b2:98:29:d0:17:26:62:a7:c3:
fa:57:55:9b:7b:be:eb:70:0d:8b:a2:84:4d:e1:dd:e1:3c:3c:
d9:26:c4:39:25:0f:9b:d4:04:ac:68:d4:84:46:6d:a9:3b:39:
3a:86:76:01:e7:78:42:7e:85:27:24:c7:1d:6c:ee:5a:6a:15:
71:7a:05:d4:ec:21:d6:a7:3f:7f:4e:3e:20:b1:2b:3a:4f:c7:
e8:3f:df:b9:68:19:ad:3d:15:6c:33:eb:d7:32:74:43:96:8e:
08:8f:4a:2c:af:b9:44:72:2a:89:bc:c4:cd:a5:89:d2:57:0c:
4e:76:e0:f4:56:51:17:6b:8e:6c:bf:79:2b:7c:8e:10:93:33:
05:81:74:78:e8:91:c8:6d:e3:35:6e:c5:7d:2d:5e:98:81:ea:
24:2a:7c:ed:ee:01:66:4e:4a:6f:b5:c1:3a:11:38:1b:bb:fe:
86:32:66:aa:0e:4a:62:6f:82:ec:4b:7d:f9:74:54:e3:1e:3e:
35:49:5f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:11 2026 by rpki-client