Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS141806.roa
File: AS141806.roa (raw, json)
Hash identifier: +etWyI3+rPh4JZnoVArqw77L8WzYlgKDUWeYb/mgSzM=
Subject key identifier: 3A:3C:DD:88:8E:1D:B3:40:0E:89:97:A5:8B:5E:7D:73:3D:FA:FC:4D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 48BD909E0BAE7F245A1079BBFB6EE9A8F7F462A5
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS141806.roa
Signing time: Thu 25 Jun 2026 12:17:24 +0000
ROA not before: Thu 25 Jun 2026 12:12:24 +0000
ROA not after: Thu 24 Jun 2027 12:17:24 +0000
asID: 141806
IP address blocks: 46.203.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Jun 2026 08:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:bd:90:9e:0b:ae:7f:24:5a:10:79:bb:fb:6e:e9:a8:f7:f4:62:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 25 12:12:24 2026 GMT
Not After : Jun 24 12:17:24 2027 GMT
Subject: CN=3A3CDD888E1DB3400E8997A58B5E7D733DFAFC4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:bd:f3:16:e9:18:f6:eb:42:62:64:a4:0e:
64:4c:09:2b:5a:a7:64:cb:20:1c:47:a7:d5:63:01:
7b:81:e2:22:54:85:9d:f6:eb:2b:2f:85:85:e1:a7:
22:e5:4e:14:8a:52:70:02:e7:15:72:07:47:a0:d0:
6a:3d:b7:6c:f2:42:0c:b0:ae:8f:0d:f2:9a:03:ff:
06:c0:e0:9a:4e:15:2b:95:9c:f6:44:98:04:48:57:
99:ac:81:80:66:73:b4:6f:f4:04:5b:51:ce:02:8a:
1c:30:56:f0:70:9e:4a:e1:cc:64:8e:64:3c:7b:85:
a7:76:39:96:c7:4d:a0:e9:23:3c:bb:7a:e6:aa:de:
30:03:c8:e8:84:dc:f9:8c:f8:aa:e4:28:b2:48:f0:
fe:a5:a6:66:c0:52:76:26:c7:fa:55:68:0b:70:f2:
b2:ff:e2:e8:43:fc:c1:ee:5b:64:24:6e:7d:12:bf:
69:a2:1d:c0:ff:3f:f0:cb:4a:b0:b2:e9:37:9a:8f:
a4:61:58:b7:8b:a2:39:aa:61:21:6c:83:b0:a8:0a:
b8:6a:c8:5b:9c:57:19:b6:89:0f:9a:66:f6:1b:8e:
5e:b3:4d:b4:f1:a1:34:bb:6e:70:35:a4:3d:c6:7f:
6a:4c:90:d4:61:24:b7:1b:1e:d6:95:01:db:4f:05:
dd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3C:DD:88:8E:1D:B3:40:0E:89:97:A5:8B:5E:7D:73:3D:FA:FC:4D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS141806.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.5.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f2:cd:a9:fd:43:6e:f2:30:61:e5:f4:90:2f:f1:8a:d6:60:
9e:02:38:5b:f1:db:56:71:ef:93:7d:8b:72:3c:bc:ec:67:97:
4b:c1:cb:95:24:5c:1e:67:9c:5a:05:92:bc:0e:df:81:62:dd:
36:10:36:11:4b:8c:e8:6d:5f:71:b5:ed:0d:ea:21:90:1c:32:
33:20:92:7b:5a:cb:60:32:d0:59:d5:4a:32:69:ad:66:a2:46:
62:0a:29:a0:68:b4:ba:49:d7:6a:39:36:62:1b:04:5d:a5:cc:
92:dd:80:df:8d:18:91:8b:3e:b5:6d:2f:10:be:83:b0:64:27:
f1:0f:4c:d2:76:29:4c:d1:2d:22:55:a2:b6:64:2c:ca:0d:59:
9a:4e:e5:aa:06:0a:2b:86:6a:48:48:eb:bc:d1:0d:11:e8:b7:
e2:9a:8e:c6:06:fe:25:4e:4b:73:4a:48:f7:ed:18:65:8d:89:
8f:63:e1:42:df:a0:ce:9e:3f:04:11:67:ff:f8:97:36:66:4b:
25:63:e5:1b:e9:b9:0f:f3:7b:8e:d7:ba:8c:31:3b:19:77:35:
59:2b:28:81:91:9e:ea:31:0e:39:d0:d9:31:66:96:de:71:4d:
b6:11:c3:45:2d:9a:16:05:83:59:d0:b5:e6:a4:8e:4e:a8:3f:
8d:2e:9c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 19:31:19 2026 by rpki-client