Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS140641.roa
File: AS140641.roa (raw, json)
Hash identifier: 6FDiW7H+9DnDf3Vk3NHE9P3WwM00Z0855FeyqRM6euw=
Subject key identifier: B4:96:4D:DC:0E:62:96:E3:E7:56:45:ED:68:DF:C5:C7:3A:C9:70:A8
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 118E6E77735120E34C40BE3721F1AEF2EF759000
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS140641.roa
Signing time: Tue 11 Aug 2026 05:03:39 +0000
ROA not before: Tue 11 Aug 2026 04:58:39 +0000
ROA not after: Tue 10 Aug 2027 05:03:39 +0000
asID: 140641
IP address blocks: 178.92.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Aug 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:8e:6e:77:73:51:20:e3:4c:40:be:37:21:f1:ae:f2:ef:75:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 11 04:58:39 2026 GMT
Not After : Aug 10 05:03:39 2027 GMT
Subject: CN=B4964DDC0E6296E3E75645ED68DFC5C73AC970A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:ba:eb:a4:1d:af:a8:40:79:27:41:5d:41:
30:01:7e:ba:dd:7c:a7:7c:88:9d:4d:05:6b:b0:c6:
aa:97:70:63:4c:ce:f6:b2:82:fd:c9:3b:e2:17:ec:
aa:d3:a3:89:ed:39:3a:cd:e8:b2:d6:3b:75:64:45:
75:4b:ac:56:20:8b:76:aa:9d:e7:aa:64:06:62:e3:
28:db:63:7f:99:7d:bc:8c:71:bd:2d:de:e3:87:cd:
58:fd:74:e4:b4:50:eb:af:26:4c:c6:2b:37:48:b4:
38:2a:64:22:8f:f4:1a:bc:5e:8c:86:2d:92:2e:6d:
58:9f:da:64:ac:ff:76:77:16:dd:85:fd:3b:19:ed:
3b:65:f6:7d:70:d7:7c:95:11:aa:7d:eb:89:7a:4b:
3a:06:dc:17:f7:1d:68:b8:6c:1a:36:27:7b:4e:72:
c5:78:f6:1b:20:f3:2d:cd:a4:98:0d:29:53:70:2e:
05:ab:4e:2f:6f:2a:ba:09:18:61:d8:21:72:50:f8:
2a:5f:ce:f1:d0:46:f3:bd:82:c8:1a:26:59:87:67:
dd:e5:e0:39:95:28:ce:c2:b0:79:1f:d6:55:75:01:
a0:9d:87:3a:7e:c8:3e:a2:83:15:36:05:22:9a:47:
36:fd:80:c0:2f:9a:55:87:78:52:0e:f0:c6:8e:95:
18:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:96:4D:DC:0E:62:96:E3:E7:56:45:ED:68:DF:C5:C7:3A:C9:70:A8
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS140641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.110.0/24
Signature Algorithm: sha256WithRSAEncryption
57:64:7c:60:cd:cc:8f:10:16:30:58:7a:2c:10:c9:2b:84:bb:
f1:ed:aa:e0:5c:c8:74:4c:07:18:4e:1a:71:82:4b:1c:cf:ff:
b8:4b:e8:cf:20:d5:16:71:71:db:c2:fd:5e:d3:5f:66:16:fa:
83:dc:fe:a3:fe:aa:a0:ec:13:2a:0a:0d:7c:87:dd:fc:b9:b4:
44:ac:e3:34:0c:60:7a:92:0c:85:ec:37:d0:db:6e:bf:5d:d1:
fc:c9:47:b8:5e:ad:10:46:ba:4f:bb:15:9b:9a:15:02:90:fd:
fb:d0:e6:9d:7f:70:ca:45:84:93:c9:d1:2a:07:3e:8d:53:8c:
5a:7f:73:77:61:f4:e3:b0:ec:e6:a9:10:ce:ca:8d:9a:33:90:
1f:61:84:7d:c8:09:e3:6e:d9:c9:5d:d7:42:1c:b1:58:a2:7d:
f9:0d:13:ac:6d:b1:07:8e:ff:fa:d8:7a:bd:10:a5:4d:75:b6:
be:96:d3:eb:96:6f:66:64:95:b9:4c:13:df:c7:db:05:b9:8b:
a3:6e:94:8d:f2:3f:76:22:dc:a3:1a:a9:37:03:d0:f5:8c:4d:
a8:8b:b9:d2:c0:fd:40:3c:76:b3:e6:3a:4e:52:43:07:99:bb:
a0:0b:fc:d4:cc:62:24:d8:3f:52:88:25:71:16:09:0a:0c:b3:
68:cb:68:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 07:50:26 2026 by rpki-client