Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: jsaogCxo7d+aY7OThyTl/hC/bGozwdGyWbe+ziD2ggA=
Subject key identifier: 80:77:7E:86:08:5F:81:06:EC:33:2F:11:A3:C7:6E:9A:54:84:BB:4B
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1114C07776E3F8B4562C2B5A90FE4F14FB76045E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS147281.roa
Signing time: Fri 04 Sep 2026 04:09:19 +0000
ROA not before: Fri 04 Sep 2026 04:04:19 +0000
ROA not after: Fri 03 Sep 2027 04:09:19 +0000
asID: 147281
IP address blocks: 179.61.140.0/24 maxlen: 24
179.61.238.0/24 maxlen: 24
191.96.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:14:c0:77:76:e3:f8:b4:56:2c:2b:5a:90:fe:4f:14:fb:76:04:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 4 04:04:19 2026 GMT
Not After : Sep 3 04:09:19 2027 GMT
Subject: CN=80777E86085F8106EC332F11A3C76E9A5484BB4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:ca:f7:07:5e:65:11:c7:dd:c0:47:55:e4:
ca:12:10:15:fe:33:8a:82:f3:bc:39:81:49:9d:f7:
5c:e3:9b:d5:38:14:01:34:72:c2:07:c1:2a:75:32:
0c:2c:4b:95:ab:dc:47:6d:c9:a9:60:1e:a4:40:9e:
ef:1a:48:74:71:33:27:9d:2a:19:11:4a:c5:d2:50:
24:4e:16:76:7a:e5:1a:cd:50:2c:dd:cc:33:b4:c1:
cc:a3:87:94:99:57:5b:0b:60:5d:fe:9f:4a:ba:3c:
b4:57:54:82:2c:2c:97:ff:7d:12:b9:78:f5:87:15:
b4:d2:67:af:a4:3b:7b:16:25:43:04:55:2d:4d:cb:
9e:58:8f:76:b2:2c:fc:a4:c7:ce:94:c0:14:8c:e8:
d3:cf:f5:92:d5:9d:34:8d:7b:ad:fb:59:ad:1a:2b:
c6:08:95:66:5b:59:aa:22:ca:5b:24:52:4e:2d:68:
f6:2f:eb:7a:64:73:1f:e2:07:fc:9b:54:c6:3a:26:
7c:53:87:e8:5f:be:62:73:66:d3:32:83:48:60:ee:
b2:87:f6:dd:04:bd:d1:af:da:51:0c:44:db:db:67:
f8:74:c8:e6:d3:66:9f:0d:de:45:eb:5b:35:0e:36:
00:46:98:8d:e0:21:be:69:40:f6:be:4f:c6:0b:2d:
7b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:77:7E:86:08:5F:81:06:EC:33:2F:11:A3:C7:6E:9A:54:84:BB:4B
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.140.0/24
179.61.238.0/24
191.96.134.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:cf:af:56:e4:cd:d5:74:6c:d5:ee:83:c4:3d:63:ec:f0:ea:
13:91:8a:ba:ec:5c:84:f6:97:59:07:e3:3b:52:b9:d8:5a:0b:
8d:7f:72:a9:75:95:d5:c9:f5:93:d6:b9:c3:cc:7b:05:07:e6:
30:04:8d:63:a4:07:de:e5:e3:73:e0:90:b9:33:79:9e:e5:27:
a3:f6:39:4d:d6:0f:b4:00:08:ba:f4:fc:97:73:e8:d1:ab:61:
08:95:6d:44:e4:2f:13:3d:94:45:a9:21:19:7a:8f:58:b7:b0:
8e:0b:87:84:fc:52:a7:1e:ab:23:2c:a7:0a:52:e6:33:8f:b0:
78:fb:98:60:21:ab:4d:6a:0e:cd:bc:b3:d9:35:1e:1b:ec:01:
c0:ca:08:04:91:79:cf:bd:42:b9:79:5f:3c:6a:49:f2:b4:11:
d8:cb:5f:b8:15:96:51:75:48:54:55:db:65:76:30:0c:cb:2b:
45:57:c3:f1:90:32:9d:5b:cc:64:ba:46:82:32:69:b7:16:23:
30:a9:85:81:6d:bd:ea:f4:0f:b3:e1:89:4c:ef:7b:d4:62:02:
a8:68:12:64:7d:5e:76:f2:d1:db:d3:f1:72:5d:40:7a:dd:3f:
e3:08:13:f2:33:4a:27:ba:4e:43:31:73:a6:4b:08:f3:d7:79:
f9:88:66:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:25:42 2026 by rpki-client