Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS140641.roa
File: AS140641.roa (raw, json)
Hash identifier: KpgONEBOLMqOhKZvRmSYjaGb7x8kI+opQ07yfcy4xAg=
Subject key identifier: 7C:BC:A8:3B:99:65:B0:59:25:92:98:19:BE:2A:54:0A:1E:8B:CE:D4
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 76CBEA2B084EF9F2FE67D76DA6886474498BA261
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS140641.roa
Signing time: Mon 28 Jul 2025 07:24:08 +0000
ROA not before: Mon 28 Jul 2025 07:19:08 +0000
ROA not after: Mon 27 Jul 2026 07:24:08 +0000
asID: 140641
IP address blocks: 181.214.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:cb:ea:2b:08:4e:f9:f2:fe:67:d7:6d:a6:88:64:74:49:8b:a2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 28 07:19:08 2025 GMT
Not After : Jul 27 07:24:08 2026 GMT
Subject: CN=7CBCA83B9965B05925929819BE2A540A1E8BCED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:0d:be:94:fd:28:7d:0d:0a:20:49:38:04:
86:8a:bb:22:9f:60:4f:92:8e:6b:50:06:46:7a:b6:
0b:54:4c:32:91:00:bd:31:18:57:27:12:0d:85:5a:
34:6c:e0:3a:2e:50:62:e2:79:c6:35:c0:6f:ab:d6:
34:77:78:ba:89:ef:01:d3:28:2c:6e:8f:d0:ce:f0:
40:fd:75:66:1e:7a:fd:77:e7:91:6e:f3:d8:48:a2:
c4:5f:96:f7:96:36:b9:cd:5d:1c:a0:50:24:c2:a9:
b3:ce:4a:4c:a7:df:18:56:81:f9:34:d5:93:14:93:
5b:f3:33:49:6b:b7:4c:7f:94:62:0a:cb:e1:0a:ff:
4c:e8:90:d1:ea:52:f3:b7:19:6f:0a:23:1a:4e:fc:
80:58:be:87:73:80:4c:08:38:f2:a2:ec:12:77:1a:
82:b0:27:3a:08:83:bf:2b:9c:57:af:41:e1:4a:ee:
ba:7b:90:8d:44:bb:b1:85:93:5d:77:27:46:a8:fc:
e3:ac:40:fb:df:cb:a7:51:2a:93:00:71:6d:d1:a6:
7c:cf:ff:fd:7f:cb:a9:5c:ab:12:fc:54:39:cd:42:
63:01:94:a1:47:24:74:e9:a1:80:14:90:f1:f1:66:
20:1e:b3:dd:6e:f6:ae:a1:b0:62:7a:6d:f3:66:c2:
5f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BC:A8:3B:99:65:B0:59:25:92:98:19:BE:2A:54:0A:1E:8B:CE:D4
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS140641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.10.0/24
Signature Algorithm: sha256WithRSAEncryption
66:9f:e0:90:c4:da:a4:1e:5f:fc:e0:d7:fb:6f:e5:77:4f:45:
ca:c7:60:59:92:01:fd:02:59:ca:fc:1d:e1:fd:5f:e5:65:73:
4f:b7:f7:79:13:b8:fd:d8:b9:29:00:d4:e8:d6:53:14:be:5a:
7e:f0:7e:06:83:d3:7d:ef:a7:23:b9:6b:e0:ef:91:8c:2e:82:
2b:ae:ae:32:ce:65:5b:35:c5:99:a0:5f:cf:2e:db:c4:c2:11:
dc:c5:17:9b:93:03:d5:5d:cb:de:8f:84:e2:8b:f2:9a:b0:30:
b2:c4:0b:41:d9:cd:34:ec:02:e4:b8:2c:0f:2c:1d:5c:b4:30:
15:6f:68:b8:38:6b:b6:c1:c0:78:73:73:b6:e1:33:6e:22:98:
37:7c:ae:2f:6a:28:59:9b:40:93:71:c0:24:8d:f3:fa:73:b1:
3a:90:1d:41:bd:bf:bb:41:8d:4f:2d:5d:d0:ff:ea:13:32:c5:
be:04:f6:88:31:15:ca:55:4d:21:fd:b2:64:cb:57:1f:91:e6:
3e:bd:83:16:db:5d:7b:d9:08:b5:00:a9:00:2f:ad:cd:b6:ab:
c1:d5:55:1b:df:40:10:86:d8:62:bb:a7:ff:14:93:9a:7b:95:
92:c9:10:31:55:56:c1:de:ff:11:4a:e5:ff:12:09:0b:4f:d9:
06:3d:9f:03
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUdsvqKwhO+fL+Z9dtpohkdEmLomEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTA3MjgwNzE5MDhaFw0yNjA3MjcwNzI0MDhaMDMxMTAvBgNV
BAMTKDdDQkNBODNCOTk2NUIwNTkyNTkyOTgxOUJFMkE1NDBBMUU4QkNFRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0fQ2+lP0ofQ0KIEk4BIaKuyKf
YE+SjmtQBkZ6tgtUTDKRAL0xGFcnEg2FWjRs4DouUGLiecY1wG+r1jR3eLqJ7wHT
KCxuj9DO8ED9dWYeev1355Fu89hIosRflveWNrnNXRygUCTCqbPOSkyn3xhWgfk0
1ZMUk1vzM0lrt0x/lGIKy+EK/0zokNHqUvO3GW8KIxpO/IBYvodzgEwIOPKi7BJ3
GoKwJzoIg78rnFevQeFK7rp7kI1Eu7GFk113J0ao/OOsQPvfy6dRKpMAcW3RpnzP
//1/y6lcqxL8VDnNQmMBlKFHJHTpoYAUkPHxZiAes91u9q6hsGJ6bfNmwl+TAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUfLyoO5llsFklkpgZvipUCh6LztQwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTQwNjQxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtdYK
MA0GCSqGSIb3DQEBCwUAA4IBAQBmn+CQxNqkHl/84Nf7b+V3T0XKx2BZkgH9AlnK
/B3h/V/lZXNPt/d5E7j92LkpANTo1lMUvlp+8H4Gg9N976cjuWvg75GMLoIrrq4y
zmVbNcWZoF/PLtvEwhHcxRebkwPVXcvej4Tii/KasDCyxAtB2c007ALkuCwPLB1c
tDAVb2i4OGu2wcB4c3O24TNuIpg3fK4vaihZm0CTccAkjfP6c7E6kB1Bvb+7QY1P
LV3Q/+oTMsW+BPaIMRXKVU0h/bJky1cfkeY+vYMW21172Qi1AKkAL63NtqvB1VUb
30AQhthiu6f/FJOae5WSyRAxVVbB3v8RSuX/EgkLT9kGPZ8D
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:41:45 2025 by rpki-client