Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: +QWqp0IE+D7srVjMvEM/SYbpXLvOM7KGX2na91XIrbI=
Subject key identifier: 46:A0:FD:5C:D3:2D:2B:5E:0E:98:25:C8:BC:5E:96:53:F2:5B:45:6A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0EC21120FCF362B002ADACD323C7A6787C03345F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147281.roa
Signing time: Thu 17 Sep 2026 15:17:51 +0000
ROA not before: Thu 17 Sep 2026 15:12:51 +0000
ROA not after: Thu 16 Sep 2027 15:17:51 +0000
asID: 147281
IP address blocks: 66.132.156.0/24 maxlen: 24
146.103.51.0/24 maxlen: 24
168.222.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:c2:11:20:fc:f3:62:b0:02:ad:ac:d3:23:c7:a6:78:7c:03:34:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 17 15:12:51 2026 GMT
Not After : Sep 16 15:17:51 2027 GMT
Subject: CN=46A0FD5CD32D2B5E0E9825C8BC5E9653F25B456A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:04:fe:5c:29:8b:96:76:28:62:1c:0b:c8:
7e:f1:9b:cd:30:3b:14:bd:e0:4d:3f:3a:38:88:89:
aa:eb:67:2a:f6:55:56:9d:60:04:c8:bd:13:9d:2b:
25:04:82:30:00:ab:f9:13:e7:64:78:42:a8:e0:d8:
cd:e6:c8:a0:12:5a:30:78:31:a3:de:70:09:7e:f4:
94:b8:07:0d:11:bd:17:b8:03:29:03:06:20:6d:ca:
a9:3d:ba:b5:56:cb:9c:d9:69:5a:b0:5d:8b:b7:ab:
1c:81:6f:d1:1f:6f:11:03:d0:64:ab:8b:e8:7e:dd:
d0:e5:69:73:80:62:6b:e6:3e:dd:5c:90:d6:82:9c:
71:e2:a6:7d:88:94:fa:50:ce:0b:65:0f:2d:25:3c:
1e:ee:8a:48:27:ce:a2:b8:69:69:43:fa:fb:8d:0a:
d3:1b:d7:21:78:02:44:af:c1:86:eb:49:f8:d6:b8:
1c:5f:f5:9f:fc:31:fb:b5:18:41:d6:8e:29:b3:45:
ef:f6:b5:82:f5:21:8d:d2:30:44:d8:50:79:59:2a:
86:0b:04:ff:0e:0e:5c:33:8c:bf:c3:72:85:84:fe:
e4:01:2d:21:e8:6a:94:fe:a1:1d:79:5d:fd:e4:e7:
32:aa:ad:6b:f8:94:cb:3e:d2:e8:e9:b9:1c:12:01:
26:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A0:FD:5C:D3:2D:2B:5E:0E:98:25:C8:BC:5E:96:53:F2:5B:45:6A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.132.156.0/24
146.103.51.0/24
168.222.38.0/24
Signature Algorithm: sha256WithRSAEncryption
80:50:3c:84:dc:0b:e0:cb:27:7c:92:75:1a:87:b8:c6:e7:b3:
b7:5a:fc:e4:72:70:56:78:3c:cd:a2:8c:ee:09:9c:ff:2d:b2:
c0:95:11:40:08:f1:96:86:0d:86:75:6d:6d:68:11:c0:54:67:
8c:6f:b2:4f:e6:aa:f6:ca:bf:99:59:30:17:10:3b:4f:18:3e:
d3:d5:65:bc:54:63:2e:f8:6c:26:66:b6:16:2a:11:e9:6a:cd:
1d:9b:84:21:9c:97:d2:d8:8c:cd:31:49:6b:cc:5b:dc:78:c5:
39:55:4f:7e:c7:af:b7:8a:a2:1c:c8:3e:a9:b6:ae:8e:6a:cb:
a2:84:81:aa:96:74:bb:b3:fc:a7:42:3e:b6:df:bb:21:3e:10:
25:8a:93:d4:73:de:24:fe:00:ba:84:1d:9f:fd:d1:e9:7b:e2:
73:0f:48:60:3c:19:12:3e:97:68:92:65:7f:0c:ca:7b:56:16:
b3:23:9b:3d:be:3c:c1:a4:80:bc:90:dc:2c:c4:02:28:1c:ed:
eb:64:7b:76:90:ef:37:ae:15:ef:07:ed:d6:11:56:03:1c:5f:
6e:53:6d:54:11:ab:a7:0b:3c:a4:27:52:80:82:ba:ae:8c:7b:
d2:c2:37:9a:f8:a0:07:cf:39:8c:82:5e:14:36:af:43:78:c0:
14:c7:71:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:46:19 2026 by rpki-client