Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS140813.roa
File: AS140813.roa (raw, json)
Hash identifier: HbY3Ue6Xl7ynQXEMLub3Fb+twJIZFyA2KsmdOtZDP2M=
Subject key identifier: 04:0D:68:76:2E:3D:AF:E9:5B:87:D8:D7:F3:88:87:F6:98:D7:96:71
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1A16903A1A62ACFA8FB2B86F80F33B53A83B875B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS140813.roa
Signing time: Tue 17 Feb 2026 07:44:09 +0000
ROA not before: Tue 17 Feb 2026 07:39:09 +0000
ROA not after: Tue 16 Feb 2027 07:44:09 +0000
asID: 140813
IP address blocks: 191.96.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:16:90:3a:1a:62:ac:fa:8f:b2:b8:6f:80:f3:3b:53:a8:3b:87:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 17 07:39:09 2026 GMT
Not After : Feb 16 07:44:09 2027 GMT
Subject: CN=040D68762E3DAFE95B87D8D7F38887F698D79671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:66:fd:57:64:fa:f2:fe:17:2d:d9:d5:7f:
b5:66:62:77:5b:08:98:e3:c0:72:dd:0f:4c:da:35:
83:40:a6:04:e8:87:72:94:d7:d1:24:5b:11:c6:61:
c9:8e:4e:c4:63:70:35:a0:72:ad:f7:ff:cd:ce:70:
dd:2e:9e:eb:8f:7d:56:13:7f:d3:92:21:ea:c8:c3:
cf:28:de:a6:94:2f:eb:7c:5f:dd:d9:d0:10:5b:43:
63:4f:39:e0:7e:01:69:0c:47:ce:15:58:a3:74:f8:
a5:4e:a1:60:d9:60:c1:90:ed:52:a5:10:b5:74:4f:
47:35:f5:dc:42:90:1f:ce:b2:47:29:05:5a:dd:be:
7b:68:f6:a2:a7:47:a5:fb:18:de:cc:77:18:e8:f3:
00:22:a9:5c:28:c7:93:05:72:31:d1:4c:1b:f2:ef:
cb:48:07:bf:fd:b5:ec:cd:50:04:08:16:33:c8:c6:
b6:bd:9c:14:17:1e:17:61:55:64:30:87:03:41:86:
39:dd:57:98:ff:35:d8:3a:ac:5f:37:64:ec:ce:29:
b7:b7:c3:3a:0b:9e:4d:82:f2:e8:ab:2f:ba:d3:02:
39:39:0e:7b:bb:6a:62:7c:4d:0d:13:b9:ad:11:c9:
5f:83:85:88:79:fe:f1:75:c9:74:a1:8b:77:90:83:
ad:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0D:68:76:2E:3D:AF:E9:5B:87:D8:D7:F3:88:87:F6:98:D7:96:71
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS140813.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:25:6c:70:a0:b8:a4:f5:dc:45:f5:72:fe:27:8e:10:48:83:
7a:b6:f8:44:cd:ea:11:ad:30:16:b4:58:68:26:43:20:7d:aa:
22:d0:0f:b2:bd:61:cf:88:c9:6d:18:7f:61:7a:f7:96:50:9b:
4c:ad:da:f9:63:8f:09:1d:7e:df:80:d7:91:89:f2:0c:62:a4:
99:c7:2a:3a:71:63:15:15:e4:af:e1:c8:ca:18:e7:08:96:a7:
3e:1b:22:83:fb:89:34:6f:aa:fd:de:3a:36:b5:39:bb:36:b9:
bd:e5:2e:18:fb:e2:94:50:e2:a8:c2:6e:d6:13:6f:f7:40:1e:
60:19:f0:bd:cb:4e:57:6c:79:e6:0a:d8:c6:32:91:14:bd:ff:
9f:66:ad:b8:e0:96:d5:0a:cf:30:ef:89:02:28:e4:2c:a8:68:
88:0d:66:d4:32:0d:d4:b8:bc:a0:8a:af:c9:4f:07:40:2b:71:
f1:d7:23:8a:18:00:2f:dc:fa:ee:75:4b:35:06:41:5c:48:db:
8b:b1:5b:8b:1d:31:6f:73:fe:03:6c:87:a7:32:81:ee:1c:6c:
5e:dd:2a:0d:bd:a5:38:2a:89:cb:e0:b1:8b:3f:2e:a7:07:6e:
f2:a0:cb:6b:9a:18:da:2c:9c:6d:e3:44:40:2a:a5:c3:98:ea:
7d:d3:8b:bb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUGhaQOhpirPqPsrhvgPM7U6g7h1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjAyMTcwNzM5MDlaFw0yNzAyMTYwNzQ0MDlaMDMxMTAvBgNV
BAMTKDA0MEQ2ODc2MkUzREFGRTk1Qjg3RDhEN0YzODg4N0Y2OThENzk2NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmpWb9V2T68v4XLdnVf7VmYndb
CJjjwHLdD0zaNYNApgToh3KU19EkWxHGYcmOTsRjcDWgcq33/83OcN0unuuPfVYT
f9OSIerIw88o3qaUL+t8X93Z0BBbQ2NPOeB+AWkMR84VWKN0+KVOoWDZYMGQ7VKl
ELV0T0c19dxCkB/OskcpBVrdvnto9qKnR6X7GN7Mdxjo8wAiqVwox5MFcjHRTBvy
78tIB7/9tezNUAQIFjPIxra9nBQXHhdhVWQwhwNBhjndV5j/Ndg6rF83ZOzOKbe3
wzoLnk2C8uirL7rTAjk5Dnu7amJ8TQ0Tua0RyV+DhYh5/vF1yXShi3eQg62hAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUBA1odi49r+lbh9jX84iH9pjXlnEwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTQwODEzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv2B4
MA0GCSqGSIb3DQEBCwUAA4IBAQAqJWxwoLik9dxF9XL+J44QSIN6tvhEzeoRrTAW
tFhoJkMgfaoi0A+yvWHPiMltGH9heveWUJtMrdr5Y48JHX7fgNeRifIMYqSZxyo6
cWMVFeSv4cjKGOcIlqc+GyKD+4k0b6r93jo2tTm7Nrm95S4Y++KUUOKowm7WE2/3
QB5gGfC9y05XbHnmCtjGMpEUvf+fZq244JbVCs8w74kCKOQsqGiIDWbUMg3UuLyg
iq/JTwdAK3Hx1yOKGAAv3PrudUs1BkFcSNuLsVuLHTFvc/4DbIenMoHuHGxe3SoN
vaU4KonL4LGLPy6nB27yoMtrmhjaLJxt40RAKqXDmOp904u7
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:02:56 2026 by rpki-client