Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS149448.roa
File: AS149448.roa (raw, json)
Hash identifier: EswyNOBea2X2A4hn8xlIUpyEY+4M6q3Y/CXogq5neyo=
Subject key identifier: 1D:C8:7E:B4:9D:94:0F:0B:EF:CF:E2:E5:FD:C7:0D:39:D5:C8:C8:74
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 484BBA766211C8F90D5B8C6188522646DFD0050E
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS149448.roa
Signing time: Tue 01 Sep 2026 00:49:30 +0000
ROA not before: Tue 01 Sep 2026 00:44:30 +0000
ROA not after: Tue 31 Aug 2027 00:49:30 +0000
asID: 149448
IP address blocks: 143.20.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:52:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:4b:ba:76:62:11:c8:f9:0d:5b:8c:61:88:52:26:46:df:d0:05:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 1 00:44:30 2026 GMT
Not After : Aug 31 00:49:30 2027 GMT
Subject: CN=1DC87EB49D940F0BEFCFE2E5FDC70D39D5C8C874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:96:db:73:6a:1b:5a:c5:a0:c8:63:44:63:
ed:39:a8:75:e4:c1:e4:40:b1:50:54:f5:18:a8:2b:
eb:72:ff:f9:c6:0f:d2:bb:33:c7:8e:b9:d2:4e:02:
ea:72:ca:b4:77:18:09:03:f4:26:5b:3b:eb:8a:aa:
86:79:d8:73:44:48:26:d9:03:03:e7:8e:39:74:b6:
6a:1e:23:42:4b:b7:4a:aa:3b:fd:4b:7c:41:dd:99:
47:e9:7f:e4:54:45:ce:ff:37:ef:43:ac:d1:de:33:
83:fa:9d:db:53:5c:45:3c:79:62:f5:5e:34:55:96:
85:19:f2:b2:83:03:7b:5b:bc:1d:e2:c5:cf:f1:b3:
45:a7:cf:6d:57:23:cd:5a:dc:84:ea:76:a9:a2:07:
23:ae:38:11:75:76:8b:f4:cd:3a:f8:45:bf:f2:a9:
c7:d7:7b:c8:58:64:c2:a6:6c:43:96:e9:e8:fd:80:
c3:c2:56:41:6d:71:e2:1b:cb:81:4a:06:1b:3e:4b:
ce:d7:be:59:a4:ca:34:f1:5a:28:2d:1f:cb:60:53:
a6:4c:19:4e:a2:5b:30:bd:cc:a4:f6:73:24:70:27:
04:70:c3:84:b5:fe:82:6c:2c:d7:29:e7:44:3a:e6:
8e:ea:c3:83:8f:42:6f:d9:ed:f1:3a:c0:db:d7:ef:
15:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C8:7E:B4:9D:94:0F:0B:EF:CF:E2:E5:FD:C7:0D:39:D5:C8:C8:74
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS149448.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.130.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:09:24:9f:8d:f7:2e:1c:c9:4f:8f:52:97:48:c1:3b:cc:d2:
6d:ca:e2:ee:05:bc:61:d9:61:d0:cd:90:5e:36:60:e0:78:99:
bf:18:82:a8:38:cd:db:c0:fb:59:eb:fb:e7:3c:4c:9f:a6:09:
67:a9:fa:f5:f8:54:16:4c:8b:7a:14:cb:b6:f4:27:c3:0d:be:
ff:bb:b4:07:0f:02:9c:f8:ac:87:d0:27:bc:76:26:7b:bd:a4:
0f:9e:a6:02:d5:b8:e6:24:69:75:25:4a:c9:05:5f:ff:76:06:
32:52:43:51:33:5d:62:cb:19:67:c8:e3:ad:6d:c6:ca:c4:f6:
04:77:eb:b0:ab:9d:25:48:73:3b:13:6f:54:18:a1:7d:c9:47:
a3:db:9c:5c:ec:e5:e4:8e:40:96:4c:05:34:ef:f4:80:c3:ec:
82:ab:36:9b:f3:f1:b9:7d:cd:56:70:6d:6b:a6:6a:0c:b2:bd:
58:3e:2b:d5:f9:67:47:59:7f:de:e6:26:a3:56:8d:2f:3c:76:
51:ba:70:32:b5:52:aa:e8:53:fe:76:be:c2:50:0e:00:c8:73:
67:d1:23:b3:f4:8b:79:dd:31:c1:59:79:72:27:39:21:c4:23:
a5:74:29:c0:4b:cd:a6:0d:7a:ff:69:10:ad:f0:b3:63:ab:fe:
94:76:38:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:20:31 2026 by rpki-client