Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS142240.roa
File: AS142240.roa (raw, json)
Hash identifier: Na51j629vcYb94JoLovRAoLEAgSyQCzA817tnYG2S/s=
Subject key identifier: 21:86:E1:31:84:E3:4D:00:71:21:47:E6:B8:D8:DE:0C:7E:62:8E:7B
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 4426877A8B8FC9FCD308BE271E0437CAD149D177
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS142240.roa
Signing time: Sun 13 Sep 2026 12:07:04 +0000
ROA not before: Sun 13 Sep 2026 12:02:04 +0000
ROA not after: Sun 12 Sep 2027 12:07:04 +0000
asID: 142240
IP address blocks: 78.41.49.0/24 maxlen: 24
82.139.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:26:87:7a:8b:8f:c9:fc:d3:08:be:27:1e:04:37:ca:d1:49:d1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 13 12:02:04 2026 GMT
Not After : Sep 12 12:07:04 2027 GMT
Subject: CN=2186E13184E34D00712147E6B8D8DE0C7E628E7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:0e:49:29:98:91:4b:4c:fc:50:ec:a4:83:
b5:24:c2:f4:47:05:5f:76:00:19:63:25:fb:51:1c:
0d:2f:fd:3a:5c:30:8b:f6:1a:0c:c1:75:fe:24:3e:
92:a3:70:57:d4:f1:95:8d:d4:48:a7:e5:e1:c0:74:
4a:ad:47:23:d4:62:41:6f:07:c5:2e:82:ea:48:85:
b3:8c:50:f5:aa:a9:d1:e4:a1:cb:6a:fb:e0:04:12:
a7:7c:75:e6:b1:ac:f5:8a:0c:28:7f:82:87:85:bc:
b7:e9:dc:03:54:d9:c5:10:52:6e:9a:94:a2:98:32:
fe:73:89:56:ef:2e:c4:59:48:c9:22:9b:fc:a8:c8:
e5:a0:b2:c5:da:4a:e3:9f:4d:84:d9:10:26:2b:24:
4b:e4:5d:86:0a:75:ad:a5:1d:df:61:7a:c6:66:36:
d5:ec:1a:6d:89:1b:4e:92:4e:24:e0:ef:d0:34:91:
7c:fd:57:ac:a4:c5:67:51:41:e3:92:b0:31:f1:13:
24:d7:06:bd:af:8f:85:d1:37:24:09:a7:8f:a3:7b:
9d:aa:4b:23:63:12:4b:d0:e1:29:37:cf:aa:51:8d:
df:d8:aa:6d:cb:33:03:db:fb:a5:ce:d9:b4:e1:82:
37:bb:1b:5a:03:93:18:25:89:a7:cf:46:7d:ba:65:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:86:E1:31:84:E3:4D:00:71:21:47:E6:B8:D8:DE:0C:7E:62:8E:7B
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS142240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.49.0/24
82.139.244.0/24
Signature Algorithm: sha256WithRSAEncryption
96:77:58:fb:12:36:ba:fc:fb:fd:e4:19:e4:55:cc:bc:a7:63:
ee:fb:77:71:5d:77:7b:29:2e:0a:e6:2c:b6:e9:2a:5a:6b:d8:
82:d1:68:59:79:29:f3:3a:94:b2:37:26:76:54:56:1c:8a:a4:
7e:fa:c9:66:a1:a6:b3:6d:a7:83:44:12:7c:bf:e2:c3:a5:ec:
18:98:e5:bf:0d:e6:a7:3c:79:3d:39:0b:82:35:64:8e:5d:45:
fd:14:03:24:c6:31:00:e9:44:70:8e:0b:ea:9d:16:71:e7:3c:
1d:31:b8:de:2e:6c:e2:f3:6e:7c:0f:46:cd:ee:dd:89:13:de:
48:57:22:85:47:65:60:d3:33:95:6f:ff:c4:ba:0b:c7:11:18:
c9:d1:bd:1c:48:2b:73:cc:b9:45:fa:8a:75:90:e7:5d:68:b5:
06:14:b2:6f:1e:e8:98:ae:3e:8c:ce:78:89:b8:3e:d3:f6:85:
2d:ce:cc:f2:a2:46:cb:02:80:49:e4:7e:b3:ee:eb:97:2a:c8:
86:5e:1a:80:cb:16:94:b0:a4:05:f3:87:5f:e6:62:93:99:00:
04:4d:63:c2:ab:55:5f:f0:5b:bb:ca:4f:5f:52:ed:84:b0:70:
5e:99:1a:b0:a2:16:1f:2d:ac:3a:83:5b:2d:d6:94:b0:1d:6e:
8b:8e:68:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:28:10 2026 by rpki-client