Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS147242.roa
File: AS147242.roa (raw, json)
Hash identifier: MKXXbj3R3QHntYNAilHjdXTLiaKdlBWF0TlOYsugnqA=
Subject key identifier: 66:95:2D:0F:E9:09:31:AC:CF:AC:82:A8:7C:37:88:A3:F1:56:98:BA
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4AD2E04C778527BA1C6AB0FBFE49E85BD69A26B0
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS147242.roa
Signing time: Mon 20 Jul 2026 17:44:24 +0000
ROA not before: Mon 20 Jul 2026 17:39:24 +0000
ROA not after: Mon 19 Jul 2027 17:44:24 +0000
asID: 147242
IP address blocks: 141.11.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 21:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:d2:e0:4c:77:85:27:ba:1c:6a:b0:fb:fe:49:e8:5b:d6:9a:26:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 20 17:39:24 2026 GMT
Not After : Jul 19 17:44:24 2027 GMT
Subject: CN=66952D0FE90931ACCFAC82A87C3788A3F15698BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:34:b1:09:65:a8:76:da:c0:85:11:c2:74:
05:46:4c:93:36:eb:60:48:ab:5f:92:aa:dc:17:06:
d8:f2:a6:cf:0d:76:12:4a:d1:d5:85:45:0d:19:ab:
94:71:bb:3e:97:e9:e5:be:72:09:bc:fb:46:ed:bf:
31:8b:1b:15:85:01:52:93:07:cd:40:c5:56:b5:b6:
bd:65:c4:09:09:6c:5f:44:7c:92:6e:df:fc:7f:7c:
4a:42:91:79:91:50:d3:3d:13:86:bf:05:a3:ce:bf:
f1:56:4e:16:4b:4a:da:84:f3:a8:bb:3d:0c:34:1a:
c5:00:ad:49:ff:82:7a:05:f7:8a:6c:13:89:b6:fe:
2f:59:e7:86:a2:32:12:2a:cd:bb:02:d4:cf:81:c9:
36:8f:dd:da:f9:8d:79:16:16:ab:55:1e:8d:38:4f:
20:c7:9a:c7:eb:d8:10:57:bb:21:f9:eb:cb:a0:7b:
1f:ef:d6:5c:7d:ff:f0:0a:5a:79:b5:8b:56:20:7b:
e6:76:99:81:1f:ae:bc:7e:7f:a7:8e:5d:d0:57:1f:
73:c0:32:87:90:1c:61:d8:b0:2e:64:c5:2a:23:22:
b3:c3:fb:46:12:99:95:3f:fe:0e:d2:f0:67:db:0f:
20:30:bc:d3:ab:3f:58:f6:a2:3b:0f:21:54:ab:66:
b9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:95:2D:0F:E9:09:31:AC:CF:AC:82:A8:7C:37:88:A3:F1:56:98:BA
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS147242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.60.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f3:7d:c1:11:56:bd:3c:f7:61:78:ec:d4:24:44:c4:de:4e:
82:e2:0c:a3:72:d2:f2:50:e6:1f:cd:3f:fb:1b:3b:0b:96:37:
dc:85:45:60:b8:4b:1c:d2:92:b1:86:b4:70:1a:e1:9b:2d:f9:
4c:fb:70:1f:ff:af:bf:64:99:78:ee:d9:04:63:83:70:6d:c0:
68:5d:cd:93:7b:f1:53:07:a6:57:db:db:30:2b:bc:9e:40:24:
25:73:9e:f0:7c:75:a6:af:fa:f2:a3:d6:23:25:45:78:a6:e6:
91:a0:c4:a5:68:25:bd:e6:ae:61:3e:a2:6c:00:29:83:33:cc:
1f:9c:b3:e2:13:2b:58:81:33:1b:ff:18:ba:e7:7e:4d:90:21:
1c:16:ba:76:9e:fd:3b:03:e3:c4:90:73:f5:44:f4:ae:66:17:
44:96:15:e9:bb:ad:5a:f6:ee:25:fe:ae:74:a2:2f:63:fb:b2:
9f:9f:f8:86:31:1a:84:2f:53:4b:ae:44:1a:f3:b2:6c:47:6b:
06:9a:9c:b8:a3:2e:6f:2f:a3:dd:71:0d:19:68:77:bb:12:70:
e5:28:f2:62:61:4e:e9:31:09:02:78:5d:cd:88:3a:48:73:21:
8f:9d:9f:89:a4:7d:63:97:78:85:b9:a4:d3:d5:3f:5e:df:14:
5d:7a:e3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:06:08 2026 by rpki-client