Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: n2W5pctaoXT+cTVoFVQxhI7YaSWFTSkZ4fEwbxXoU08=
Subject key identifier: 1A:52:12:AE:F3:CB:2F:63:9C:20:1B:55:83:67:F7:BC:74:48:3D:25
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 77687B6F16D7A53241A9CDBD1AEA83B5AC8B65AA
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS147281.roa
Signing time: Fri 28 Aug 2026 21:51:34 +0000
ROA not before: Fri 28 Aug 2026 21:46:34 +0000
ROA not after: Fri 27 Aug 2027 21:51:34 +0000
asID: 147281
IP address blocks: 178.94.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:68:7b:6f:16:d7:a5:32:41:a9:cd:bd:1a:ea:83:b5:ac:8b:65:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 28 21:46:34 2026 GMT
Not After : Aug 27 21:51:34 2027 GMT
Subject: CN=1A5212AEF3CB2F639C201B558367F7BC74483D25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:fe:50:46:21:ac:9a:89:74:f8:8d:1f:f0:
e4:b3:87:24:84:ae:ca:01:5f:e0:f3:d0:b4:90:9b:
d6:3f:26:a3:64:a7:93:bb:07:b3:f7:fb:c8:f0:24:
d2:7b:b6:16:64:b8:dc:a0:65:0b:d7:48:35:03:3a:
7b:a7:52:15:60:ff:4b:98:a7:2b:50:f0:ee:e7:b3:
a1:8f:a4:b3:32:c7:f1:d4:60:1e:51:2a:3c:28:84:
bb:42:18:95:03:2d:25:9f:4a:2b:98:bc:57:38:1c:
b3:3d:b6:c6:71:10:ab:8d:76:71:d1:08:c6:c4:4b:
3a:ae:1a:99:30:f2:58:2c:1e:8f:be:63:fb:10:b6:
a9:f7:14:d4:7e:d0:df:cf:93:9a:c8:45:92:e4:d9:
64:a2:ff:cb:3f:46:95:f2:8d:76:d8:6f:3d:9a:d6:
4d:e0:1b:d5:40:02:ff:74:72:24:b8:43:9e:13:78:
3e:ec:07:a4:9f:a2:1c:ca:7c:d9:3e:48:bc:9d:e8:
b2:0f:d0:c9:bb:c5:16:d4:64:e7:93:04:42:bd:7b:
78:d9:e2:c9:14:76:63:af:e6:10:80:cb:31:d8:41:
7a:56:47:7e:58:35:61:54:d5:46:96:ff:54:4d:bb:
25:b8:f6:df:e9:da:96:d8:09:91:5f:17:e9:ac:4b:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:52:12:AE:F3:CB:2F:63:9C:20:1B:55:83:67:F7:BC:74:48:3D:25
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.94.140.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:15:03:f4:13:1f:83:66:ac:8f:51:2f:96:bd:0e:dd:19:8e:
53:48:36:c4:32:7f:40:7d:50:b6:be:48:ed:2f:34:16:64:4a:
95:56:68:1a:eb:04:90:1d:26:9c:29:3c:62:06:cb:a1:ac:cb:
c6:fa:87:57:0e:7f:ba:3f:5c:46:18:c2:62:a5:d0:3a:35:ee:
aa:0e:b3:f9:e4:78:26:25:97:6a:88:59:4f:3f:a2:28:e6:da:
c5:df:43:64:b0:cb:39:1b:e6:cf:16:70:ef:cd:a4:8e:bc:83:
da:52:24:f8:41:d5:4a:fd:2f:c6:99:3f:a9:c6:4a:18:d7:65:
b8:ef:aa:a8:71:7b:49:da:9c:2e:a2:e2:a2:89:4a:da:38:88:
9d:1d:c8:d0:a0:cb:ca:4f:dc:2a:11:de:ea:eb:03:4f:d9:4a:
75:af:1b:28:84:d3:ea:ca:31:8d:9d:77:58:0a:1c:a8:30:d6:
72:9d:dc:e3:90:eb:17:e3:5c:5d:47:27:6d:16:f1:91:00:2f:
6b:c9:ad:5c:db:26:f1:f7:ca:a1:2d:19:6c:ec:f9:3c:77:36:
69:a0:5e:3a:ec:a2:85:0c:de:06:86:5f:42:94:b7:06:bc:b5:
cf:cb:00:a1:92:69:e3:d0:29:75:f1:80:a3:dc:dd:d5:c9:9c:
80:78:96:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 00:07:15 2026 by rpki-client