Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS146943.roa
File: AS146943.roa (raw, json)
Hash identifier: J6l1qLRuFN7xxv1JQyTgmHBV+NkBDgQ9HLGT2nZPhPQ=
Subject key identifier: 18:A9:CB:96:62:5B:E4:56:AB:6E:25:05:C8:31:5C:B9:8D:B5:12:6D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3EDB1C5EF228568C1E0855889B1ADBFD5B5C59EC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS146943.roa
Signing time: Mon 29 Jun 2026 07:54:11 +0000
ROA not before: Mon 29 Jun 2026 07:49:11 +0000
ROA not after: Mon 28 Jun 2027 07:54:11 +0000
asID: 146943
IP address blocks: 95.135.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:db:1c:5e:f2:28:56:8c:1e:08:55:88:9b:1a:db:fd:5b:5c:59:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 29 07:49:11 2026 GMT
Not After : Jun 28 07:54:11 2027 GMT
Subject: CN=18A9CB96625BE456AB6E2505C8315CB98DB5126D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6f:05:76:47:d6:52:61:c8:ca:e4:82:79:17:
86:4e:c9:da:41:53:17:b1:86:8e:96:87:20:2f:fc:
d2:8b:0a:98:9b:4a:e8:d7:77:83:cd:df:37:b8:77:
27:e8:08:97:50:ca:41:1a:ca:a4:4b:af:d7:69:7b:
20:80:26:0b:92:2a:ab:b4:ad:8c:57:fc:9b:09:25:
c2:8a:52:7f:54:16:84:b3:06:ac:80:2d:86:6b:45:
5b:cd:4d:3d:7e:eb:62:dd:6b:76:6f:5f:17:ed:bb:
6d:5b:ff:c1:46:a8:4a:f2:cf:e4:cd:e7:96:9f:f8:
ae:23:c9:bc:31:e9:cc:3c:01:c2:c4:2f:ad:00:95:
48:20:51:77:38:b3:e1:0e:a8:d5:93:71:82:3c:2a:
e8:2d:1a:57:4d:79:f4:0a:07:b8:c5:00:2e:ec:e5:
6d:e1:b5:7f:4a:47:aa:0b:7b:f2:c0:5c:b5:dd:a9:
0d:76:a7:09:77:10:5a:cf:7f:51:94:b6:e1:e8:14:
e4:2b:6f:b2:7d:f8:2d:48:bb:a6:13:26:9c:0f:e7:
20:48:b3:94:69:42:a9:6c:83:31:ac:ce:e4:f2:ef:
c3:54:59:b3:13:40:17:2b:53:76:01:20:af:9d:87:
af:ea:81:38:8a:c8:54:9a:9c:c3:62:b2:14:f2:50:
ac:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A9:CB:96:62:5B:E4:56:AB:6E:25:05:C8:31:5C:B9:8D:B5:12:6D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS146943.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.254.0/24
Signature Algorithm: sha256WithRSAEncryption
09:4d:ed:c3:fd:0b:1e:87:ea:63:df:46:78:db:20:f8:d1:7a:
18:0a:0a:4f:e3:0f:4e:db:52:9e:ce:30:ef:c3:cb:34:41:3c:
cd:e6:28:f4:df:b2:d6:94:46:34:80:ef:6b:65:86:b8:b9:05:
e2:d4:45:f2:1c:3c:36:2d:fe:53:15:ea:09:0a:56:a6:15:f0:
ef:9c:cb:08:34:12:03:d9:a1:94:ae:6e:b1:39:d8:cf:17:3a:
33:63:c8:3e:93:d2:d5:fe:d4:b5:81:ca:a5:5a:0e:b9:5c:24:
60:10:a9:1b:64:ed:4f:2d:fa:91:89:0d:7e:ae:b9:e9:e1:2d:
4b:ba:06:3e:42:0d:31:47:c8:6b:bb:fc:84:96:13:35:49:2a:
3d:61:b9:bb:f4:6c:48:69:c2:7c:81:1b:47:98:38:16:70:de:
68:66:a5:16:f6:ad:57:f8:9c:ad:b8:b3:a4:77:36:0d:0d:eb:
02:b5:f3:91:e5:f2:7c:12:3e:0e:2d:3a:5c:98:bd:3f:53:8c:
0b:e0:7d:2a:d5:fa:2b:05:01:7c:20:21:46:8d:39:bc:0e:96:
95:b0:4c:1c:ea:dd:da:0a:f9:03:95:1e:2e:e4:06:9e:24:cf:
b8:60:9a:82:87:5a:bb:68:db:57:d4:04:1e:c8:ed:d5:ba:f7:
72:0b:eb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:58:44 2026 by rpki-client