Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS140641.roa
File: AS140641.roa (raw, json)
Hash identifier: V7tre7OFZs3RPd9M4YZqbFLJ0IWxlfXrNIB+ZkS6Q8E=
Subject key identifier: 8F:FF:5A:B4:8C:1B:8F:A6:11:54:26:C3:3E:8E:4F:49:EF:88:A9:32
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0479D2D96799CCE7C906CA4998AE0A8690A00247
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS140641.roa
Signing time: Sat 21 Feb 2026 12:09:18 +0000
ROA not before: Sat 21 Feb 2026 12:04:18 +0000
ROA not after: Sat 20 Feb 2027 12:09:18 +0000
asID: 140641
IP address blocks: 181.214.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:79:d2:d9:67:99:cc:e7:c9:06:ca:49:98:ae:0a:86:90:a0:02:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 21 12:04:18 2026 GMT
Not After : Feb 20 12:09:18 2027 GMT
Subject: CN=8FFF5AB48C1B8FA6115426C33E8E4F49EF88A932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:d0:17:fb:74:49:9c:d5:81:98:3b:80:ed:
7f:a6:f5:2b:ab:11:fc:ba:73:d0:ac:54:81:5a:85:
56:d0:c7:c4:a2:94:d8:6a:86:57:b8:3f:b0:c8:64:
4e:df:e0:5e:09:d5:9a:27:f9:e5:fb:51:35:91:18:
2e:dc:a8:95:14:25:1f:29:91:53:2e:e6:ba:f1:23:
f2:f0:ea:e9:9f:a3:b8:c3:3f:9d:d0:93:e0:91:e9:
e5:da:4e:f6:c2:a7:79:30:85:d2:5a:b0:f3:ba:db:
18:58:5e:c8:b2:07:03:f4:83:8b:d0:85:ef:3d:6f:
aa:48:c0:41:24:4c:57:46:eb:81:0e:5d:20:fc:76:
77:52:74:75:74:26:6b:ae:b2:64:40:a0:51:cd:f3:
5e:13:ce:19:13:54:7e:13:e4:97:e8:08:e4:c0:99:
52:cc:99:42:27:da:8d:61:dd:3e:01:78:93:9e:52:
a1:c9:38:47:04:6f:67:40:ac:d2:88:c2:3d:32:17:
66:0b:9e:37:80:49:b0:a1:29:d4:6b:7a:e8:0a:f6:
b7:a8:d8:58:25:1d:10:18:a1:f7:55:0f:2b:42:2e:
eb:14:e2:46:70:1e:47:3d:d4:3d:c1:bd:5c:5a:ce:
fa:a3:8d:f4:27:fd:63:7b:ab:92:46:68:46:7e:d8:
a7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FF:5A:B4:8C:1B:8F:A6:11:54:26:C3:3E:8E:4F:49:EF:88:A9:32
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS140641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.10.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:55:b1:ab:89:1c:d1:4c:54:bd:bf:eb:d4:aa:a8:ac:84:85:
96:95:24:33:84:2f:bc:08:66:4c:10:71:4e:b3:93:7a:12:d2:
d4:79:a0:54:62:46:e1:56:30:f9:97:af:39:ca:bf:9b:2b:d7:
0e:d5:cd:53:af:bf:9c:78:d9:8e:83:d9:59:d5:b1:39:61:89:
bd:29:d8:4a:8f:f6:6b:2f:a5:5d:85:bb:36:d6:18:ae:50:8c:
07:52:29:cb:6b:b7:c3:09:47:77:4b:01:d8:7c:20:43:4e:05:
5e:e7:ee:06:e4:c1:f4:82:d2:dd:8f:2a:30:50:11:cb:46:cd:
70:8f:62:cd:47:c9:5f:73:4d:bc:b6:55:d7:a9:c7:a8:cd:96:
99:06:6f:62:66:a6:a3:4d:a2:43:90:22:d6:77:81:b5:97:53:
48:54:9a:d9:54:e9:1b:1d:56:9e:63:3d:82:e4:bb:37:cf:7d:
55:ca:15:5b:ea:84:85:41:57:8d:0e:4a:3b:7f:8e:60:4d:08:
5f:d5:a4:13:f8:cc:de:40:0a:f7:04:c4:33:5d:0b:78:90:34:
7b:17:e0:87:3d:83:07:50:0a:0c:84:d8:2a:ea:69:dc:ed:7b:
f4:6f:ea:d7:a0:fe:9e:77:88:90:8e:39:7a:d1:3c:6f:cc:a3:
77:87:e6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:02:51 2026 by rpki-client