Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS142285.roa
File: AS142285.roa (raw, json)
Hash identifier: EIxL/6XM2VAF+Mv5yLnJOqh2a3NgkOxzfOfTSLRoOHE=
Subject key identifier: 5E:42:E9:10:20:33:B4:C5:5C:CA:7F:FD:1C:EA:6F:6A:4A:88:A9:C2
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 538BCC230C8A564848476C448E75372D105DF2CC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS142285.roa
Signing time: Thu 23 Jul 2026 13:04:41 +0000
ROA not before: Thu 23 Jul 2026 12:59:41 +0000
ROA not after: Thu 22 Jul 2027 13:04:41 +0000
asID: 142285
IP address blocks: 178.94.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:8b:cc:23:0c:8a:56:48:48:47:6c:44:8e:75:37:2d:10:5d:f2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 23 12:59:41 2026 GMT
Not After : Jul 22 13:04:41 2027 GMT
Subject: CN=5E42E9102033B4C55CCA7FFD1CEA6F6A4A88A9C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ed:43:67:4b:ec:14:02:70:64:98:de:c5:b9:
f0:de:8c:a5:4c:54:54:99:7b:dd:47:a1:87:15:f3:
b8:12:a7:e9:82:56:6e:7e:d7:c3:ab:95:e5:5f:5a:
02:21:8f:5f:ec:c6:a9:35:95:64:db:0f:db:7b:f0:
95:63:19:21:ba:ca:12:b6:34:40:88:70:ef:5e:96:
88:1e:39:70:4c:e8:d9:df:28:21:30:8f:db:49:25:
a0:b2:84:08:09:1f:fd:11:04:fc:5b:7f:42:4a:9e:
b3:bd:7a:eb:fe:53:7a:22:a1:07:8c:5a:be:ee:bf:
04:9b:b2:8e:0b:b8:b4:17:95:51:ac:5f:fe:20:09:
e1:b4:1f:ca:f0:a2:67:52:06:b0:ba:36:55:d9:ab:
a7:18:90:bb:26:e7:0a:82:7e:e2:82:08:dc:e5:72:
5c:e1:9e:f0:fe:e9:62:7d:ef:41:ab:b2:7b:b2:f5:
b3:28:30:d2:59:7b:4c:8e:f9:02:f8:ef:17:4e:81:
07:32:ee:36:ae:94:0e:74:5f:24:38:71:81:3e:a9:
79:b6:0c:79:ac:0a:ce:ac:08:9e:33:3f:f4:36:36:
5b:9f:d2:e7:35:01:bb:14:07:6c:f8:ca:0a:11:08:
61:9b:c3:67:6b:7e:66:bf:b6:a2:40:86:a1:de:86:
49:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:42:E9:10:20:33:B4:C5:5C:CA:7F:FD:1C:EA:6F:6A:4A:88:A9:C2
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS142285.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.94.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:bb:ee:d0:1e:a1:56:fe:ca:95:28:ba:7e:ec:3f:be:bc:e1:
6d:a9:fe:90:0c:17:a6:17:6b:48:a6:b4:ad:c6:24:34:64:a3:
64:e1:94:c5:4d:79:71:9a:af:be:64:fa:b7:d2:f7:0c:94:71:
9d:02:7f:2d:ef:68:c4:94:bc:41:e9:c1:e0:a4:42:07:35:85:
82:6d:ea:bf:7e:7c:eb:e2:5b:74:65:c1:5f:06:f5:f0:41:6d:
c5:e1:40:c6:87:7e:ce:d4:14:55:33:20:7d:f2:76:54:9b:3b:
cc:71:d5:82:ca:c9:03:2c:f3:75:7c:d0:bf:21:ac:aa:a8:a7:
2a:96:7a:87:c6:87:e7:73:79:05:9a:9a:7c:c2:4f:d5:81:0d:
eb:fc:17:0f:d2:ad:f7:76:0e:f1:80:0e:ed:13:6a:73:b1:53:
10:1e:28:b5:8f:47:ce:23:bf:78:62:c4:cd:31:ff:c7:ca:d5:
eb:83:88:5e:49:dc:b0:0b:d0:58:70:ee:44:d1:07:d3:44:cd:
e6:ea:46:22:f6:ba:a8:e8:ac:46:d7:57:ad:b7:dd:15:19:a7:
de:83:f2:e9:1f:29:4e:62:93:ef:e8:ea:a4:53:55:05:18:a8:
28:5b:4d:3e:bf:ba:f6:1d:7f:51:c1:21:5c:32:60:26:ca:d4:
f4:e4:ac:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:59 2026 by rpki-client