Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS146892.roa
File: AS146892.roa (raw, json)
Hash identifier: 9KzXGpsB+Tcv7tU3PMrlt5S93djnv+s9DJgleS7hyZ0=
Subject key identifier: 54:A9:2D:82:74:FB:92:B3:9B:83:2C:A1:35:01:5A:50:F1:DF:D7:FC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 42CED2F09DE509CE5951ECED6335EE243323C081
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS146892.roa
Signing time: Tue 28 Jul 2026 06:27:19 +0000
ROA not before: Tue 28 Jul 2026 06:22:19 +0000
ROA not after: Tue 27 Jul 2027 06:27:19 +0000
asID: 146892
IP address blocks: 140.233.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ce:d2:f0:9d:e5:09:ce:59:51:ec:ed:63:35:ee:24:33:23:c0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 28 06:22:19 2026 GMT
Not After : Jul 27 06:27:19 2027 GMT
Subject: CN=54A92D8274FB92B39B832CA135015A50F1DFD7FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8a:09:2a:2e:a8:22:6e:0e:86:a9:81:d3:8e:
f2:52:92:c8:72:fe:4b:dc:6f:58:23:7b:d3:5f:43:
3e:a0:43:6c:77:db:d5:69:f2:ca:7f:c4:f7:c5:11:
17:d8:93:c4:2d:a5:64:cb:5c:25:e4:11:1b:60:fb:
54:f4:77:6d:f3:83:55:14:cc:70:26:e8:14:11:b4:
04:c1:4c:09:75:7f:a5:94:7f:7d:e0:ea:d9:e1:fb:
75:cd:61:00:3b:43:02:c3:a9:22:94:c5:a1:13:c5:
e5:95:18:d2:4f:a3:1f:dd:78:fa:c7:71:65:d4:98:
ec:2c:75:a6:40:21:27:f9:a0:63:d7:a9:d9:ef:e7:
91:cc:ca:52:13:cc:aa:f5:6a:a2:77:a9:e8:5b:39:
26:bb:2b:96:9f:0a:ac:e1:ed:96:db:24:26:00:43:
cf:62:b4:8e:6f:3c:35:4a:23:85:bf:41:4e:92:4e:
b9:40:69:ed:5c:4e:22:20:3e:0c:fc:43:85:9e:3b:
bd:59:2e:84:98:ff:cb:0e:f1:21:84:8f:85:9f:1d:
fc:24:14:d4:c9:19:08:09:b0:57:bb:6a:61:8c:6d:
aa:5e:09:48:87:13:dc:44:30:c4:ae:e6:d7:ab:f6:
0e:1f:dd:8c:6a:06:07:78:c6:b8:68:41:28:ec:bd:
06:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A9:2D:82:74:FB:92:B3:9B:83:2C:A1:35:01:5A:50:F1:DF:D7:FC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS146892.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.161.0/24
Signature Algorithm: sha256WithRSAEncryption
af:d8:45:ad:cb:6a:8d:2c:40:02:61:16:18:2e:82:15:c2:65:
fd:6a:e8:39:d3:8e:64:b2:18:0a:f8:99:3a:3f:22:20:84:2c:
53:83:4d:f0:d3:a6:14:c9:f4:e1:81:84:ef:f8:ae:0d:26:54:
82:86:7f:aa:ff:50:ce:82:21:5d:c1:63:d8:16:ae:e3:a1:9b:
e8:7a:72:1e:bb:4e:05:9f:07:ed:d9:bc:4f:ae:bd:e2:2f:63:
65:aa:13:b5:10:26:50:d8:b1:99:f2:15:e7:22:f5:4c:94:5c:
14:42:e6:f8:a2:67:43:c4:43:3d:7f:74:67:10:39:33:8c:45:
cb:d1:92:cb:91:e5:c8:dd:8e:d5:7d:e0:4b:c3:bf:ee:ec:dd:
10:a9:f2:d8:f4:8c:bb:ec:6c:d8:8f:82:0f:7c:7d:42:6c:6c:
11:51:b5:e9:cb:ee:d4:56:35:99:38:51:76:38:20:24:4c:e8:
11:45:e3:53:75:ac:a9:c0:0d:14:39:f6:e5:76:27:b9:3b:cf:
44:74:0d:7e:ce:6d:39:0b:59:1b:70:ac:23:da:b9:f7:c5:77:
a1:5d:e0:c5:77:a8:da:a0:2a:84:4b:1e:22:74:56:0a:f4:81:
34:6f:c7:15:22:03:df:af:73:70:23:c9:c8:02:27:04:8c:19:
06:e0:69:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:00:12 2026 by rpki-client