Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: uMOvM02rPoGOpB/KpwugSBWctrkrtZRUpfauyzI51dw=
Subject key identifier: 52:E2:5A:17:EB:DA:A2:C0:8D:87:0E:83:FB:56:86:25:CF:04:6D:ED
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 0B4CACABF85E664434CB84B97D18530F6DBD9084
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS147281.roa
Signing time: Mon 21 Sep 2026 07:39:54 +0000
ROA not before: Mon 21 Sep 2026 07:34:54 +0000
ROA not after: Mon 20 Sep 2027 07:39:54 +0000
asID: 147281
IP address blocks: 46.236.207.0/24 maxlen: 24
82.139.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:4c:ac:ab:f8:5e:66:44:34:cb:84:b9:7d:18:53:0f:6d:bd:90:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 21 07:34:54 2026 GMT
Not After : Sep 20 07:39:54 2027 GMT
Subject: CN=52E25A17EBDAA2C08D870E83FB568625CF046DED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:d1:0e:c3:b7:fc:b1:5e:61:f1:5e:38:21:
03:e9:4c:80:76:3c:16:73:55:87:50:c2:7e:67:f6:
bd:c8:be:22:4c:ad:1c:dd:f9:81:c8:c7:df:7c:47:
0e:9b:27:e0:a2:b2:ca:29:78:87:79:bb:ed:71:18:
8a:aa:6a:20:16:4c:a5:ac:a7:eb:44:a7:b4:34:00:
29:37:9d:a2:87:b3:a1:f5:0f:87:c3:13:23:e6:d4:
a5:f6:b1:12:af:a5:58:11:49:1a:1b:4e:de:5b:81:
c1:75:49:19:29:60:47:eb:52:57:56:78:a0:63:9f:
21:73:40:1f:64:ee:34:e3:e3:1d:e6:07:2d:e3:f5:
69:59:c4:0d:c1:e0:df:5c:49:06:85:dd:7d:bf:cf:
7d:d4:8b:96:08:08:15:51:21:ca:4c:c7:6a:8d:4c:
9c:90:13:ba:9b:77:b9:8a:8a:15:98:b7:97:42:33:
bf:1c:b9:9e:94:01:53:2b:ca:91:f4:7d:cd:c0:42:
e5:b7:02:42:cf:8d:4f:e2:2c:55:da:96:ee:4e:70:
1a:6b:94:67:ec:44:38:e5:88:8b:47:b2:19:25:31:
fa:94:5f:88:bc:95:ab:cf:2c:07:cc:20:14:b0:6c:
53:cc:99:e1:f1:ab:d7:48:84:96:9a:9d:c0:13:e9:
19:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E2:5A:17:EB:DA:A2:C0:8D:87:0E:83:FB:56:86:25:CF:04:6D:ED
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.207.0/24
82.139.251.0/24
Signature Algorithm: sha256WithRSAEncryption
42:2f:90:d6:64:94:09:43:e4:00:41:b4:ae:c9:10:81:83:7a:
0d:2e:5f:9e:fc:36:da:56:bd:95:18:33:d3:06:20:3e:78:96:
67:6c:d2:6b:ad:19:1b:93:8d:73:b7:45:3b:35:21:08:90:44:
f1:5f:e8:fe:4a:7a:e0:5d:e6:5d:c0:88:5e:9c:71:41:ac:99:
ca:af:ea:35:75:97:ea:7a:1a:1a:da:c2:db:d5:9f:13:ee:3d:
a0:2d:e0:74:52:a2:c6:e2:57:f0:c7:03:04:77:4a:bb:dc:c7:
95:3c:e5:b7:0d:3b:e8:c7:2f:28:12:f4:37:8a:da:ed:4e:8a:
13:5f:70:cf:ba:b6:3b:9c:d8:41:b5:32:58:cd:af:f3:45:84:
d6:55:7e:38:a6:90:fa:1f:b6:49:8b:ce:77:07:4a:42:f1:26:
04:09:67:b4:5f:a3:d5:a5:7c:17:ec:7b:c8:3b:7e:49:ad:0d:
3d:6a:b4:c3:82:fa:d3:d2:96:76:b6:9b:2e:a6:77:b8:8e:7c:
f6:f4:32:75:d6:32:04:44:d6:bc:ba:ff:c7:fb:49:e1:d5:f3:
c6:f7:e9:67:bc:1f:d9:92:4c:8b:24:5a:cb:64:9e:10:f7:59:
28:83:48:13:db:4d:56:f2:2a:aa:62:47:69:65:81:6f:f8:65:
25:d1:b8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:08:25 2026 by rpki-client