Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: nFpiIn4PVwN1GYPCulTfvET8eSy/zWLR3VXNVFxD5zk=
Subject key identifier: 69:3C:B2:6D:BD:DB:02:F1:11:73:04:D1:ED:BE:B0:67:3B:B8:7B:85
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 419F7B5F95C278A8A94EEEA4DC36B154936DF7B6
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS147281.roa
Signing time: Thu 15 Oct 2026 03:22:47 +0000
ROA not before: Thu 15 Oct 2026 03:17:47 +0000
ROA not after: Thu 14 Oct 2027 03:22:47 +0000
asID: 147281
IP address blocks: 46.203.22.0/24 maxlen: 24
95.134.29.0/24 maxlen: 24
178.95.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:9f:7b:5f:95:c2:78:a8:a9:4e:ee:a4:dc:36:b1:54:93:6d:f7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 15 03:17:47 2026 GMT
Not After : Oct 14 03:22:47 2027 GMT
Subject: CN=693CB26DBDDB02F1117304D1EDBEB0673BB87B85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:91:41:f6:7f:74:62:aa:26:6a:b0:eb:44:f9:
fb:6f:03:1d:5a:6b:0e:21:aa:d3:de:3d:91:d2:a3:
ae:2d:ef:8c:76:80:b1:19:ed:44:42:7e:66:25:ed:
8f:48:b4:08:b6:ab:c4:e7:f0:f5:95:e0:f3:f5:ca:
77:61:40:e5:ff:72:0b:59:3c:63:91:0b:0c:71:42:
43:e4:bb:d8:fc:f1:1e:d1:7e:64:72:38:a6:1d:50:
5e:fe:d7:39:6e:6a:cd:41:60:5c:bb:f0:dd:e5:10:
7b:a5:57:8c:c5:6f:e6:8f:d8:f6:d8:e7:c2:8f:90:
ea:8f:53:35:28:05:66:96:c7:ba:27:3d:05:6d:fe:
c4:4b:2e:33:e1:7e:ad:53:45:05:b0:14:6b:51:b6:
f9:55:b3:06:68:bd:2a:54:ab:18:ac:02:ed:93:d8:
95:a8:9e:bc:08:b0:b2:b4:80:ac:96:8d:cc:b5:f1:
65:c6:45:6c:7e:59:cd:6a:1a:6a:c0:2f:74:8e:58:
a9:98:f9:10:e6:37:65:9e:a6:f1:8f:a8:29:df:e7:
c6:68:1c:5b:80:41:e8:6c:f3:13:90:a6:5b:6a:99:
1c:e1:11:24:5d:25:27:ba:b9:8b:60:a8:3e:f2:85:
01:b2:22:f0:60:4c:e9:2a:57:85:16:56:60:77:ed:
26:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3C:B2:6D:BD:DB:02:F1:11:73:04:D1:ED:BE:B0:67:3B:B8:7B:85
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.22.0/24
95.134.29.0/24
178.95.11.0/24
Signature Algorithm: sha256WithRSAEncryption
00:6b:04:e2:09:53:f7:67:44:7b:a7:55:53:5f:21:25:18:22:
9d:b6:54:9c:e5:e5:de:99:2a:e4:6b:02:14:ac:4c:82:b4:db:
49:80:5a:71:39:b4:39:be:1e:99:04:9b:ca:60:b4:f2:e6:1e:
b0:90:fc:9e:66:5d:be:06:e2:8a:21:75:2d:72:ef:e9:bf:27:
9b:ce:e5:eb:21:0b:68:83:3d:16:ff:f6:21:70:ee:a0:50:93:
32:31:9b:8d:79:10:cf:e6:f7:86:8e:6b:6e:d5:92:62:7e:0a:
40:1e:d5:61:73:a9:5e:d1:b1:07:10:9b:f4:d1:30:39:f9:03:
0a:5b:b1:b2:0c:a6:7b:b5:c9:a8:3e:22:a9:81:ec:50:ed:cb:
4f:08:5e:50:a2:6d:2d:83:b9:4a:04:f2:45:db:b2:40:a8:0b:
ae:65:7a:47:c5:64:1f:ca:95:ff:1b:26:40:a6:51:25:d4:2c:
c6:91:c9:fd:a4:57:d2:33:64:25:67:6d:33:a6:a0:50:b0:74:
db:0d:90:ac:a0:44:71:23:c6:91:43:0a:f1:06:2d:69:1c:00:
b8:81:57:f9:0a:ff:6d:8d:d2:9d:f0:21:75:61:c2:59:53:e2:
29:b4:c1:09:1d:2c:35:12:2a:68:69:83:61:cf:a3:2f:f5:a1:
11:b9:e6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:03:44 2026 by rpki-client