Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS148996.roa
File: AS148996.roa (raw, json)
Hash identifier: IdyTQ/ILdsDlbHdy5t1jVB+eEpFzQxAEW0o6x8PNb9M=
Subject key identifier: E4:B8:32:4D:19:85:EF:EC:33:55:A3:83:55:18:3C:62:42:84:B4:B6
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5F10E5431C0CC344A9E081EFB7BDD5A0DB6EF33C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS148996.roa
Signing time: Fri 24 Jul 2026 11:49:14 +0000
ROA not before: Fri 24 Jul 2026 11:44:14 +0000
ROA not after: Fri 23 Jul 2027 11:49:14 +0000
asID: 148996
IP address blocks: 181.214.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:10:e5:43:1c:0c:c3:44:a9:e0:81:ef:b7:bd:d5:a0:db:6e:f3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 24 11:44:14 2026 GMT
Not After : Jul 23 11:49:14 2027 GMT
Subject: CN=E4B8324D1985EFEC3355A38355183C624284B4B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:9a:c6:05:bd:e0:f3:87:17:0d:d2:30:b0:
b8:3d:5e:e9:2a:72:33:46:43:e9:13:dd:f5:17:10:
9c:c1:51:3f:99:78:d2:cc:4c:61:47:54:91:58:00:
60:82:bf:39:71:60:fa:8d:f7:09:c3:3c:3c:94:32:
fb:52:c0:a5:6b:17:96:0f:26:7c:1f:02:ef:76:cd:
74:91:4f:fe:64:34:ef:32:73:97:01:19:2e:88:9c:
80:8c:42:7c:e9:73:32:2e:01:0a:45:f6:06:78:01:
fc:94:fa:93:c9:28:a9:54:90:30:85:b7:4c:43:ac:
8c:c9:94:87:93:a8:10:a5:4f:d3:9a:4b:88:86:90:
0a:35:f0:47:51:7a:cb:0a:ac:24:1b:87:b3:7d:20:
1a:78:23:a6:83:ad:4d:43:fa:34:f6:59:a6:d6:08:
86:91:4e:8b:6b:fe:a5:14:df:36:63:ef:b3:12:ab:
f5:cb:e8:fd:fb:4f:e7:cd:96:ce:3f:42:a7:d2:d9:
38:32:7f:0d:4a:11:da:cf:00:55:6e:ec:d9:80:44:
fe:56:6e:33:b1:76:83:a2:15:e1:c9:07:1c:6b:9d:
6a:10:99:69:9c:f6:c1:16:2e:88:f5:e7:1d:64:c2:
0f:fa:b2:ee:8d:35:82:80:98:76:e7:00:ff:07:27:
bf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B8:32:4D:19:85:EF:EC:33:55:A3:83:55:18:3C:62:42:84:B4:B6
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS148996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.33.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:41:52:7b:9c:cb:af:db:41:33:8f:bb:73:83:10:dc:df:11:
81:e4:b4:d6:26:85:da:0d:41:93:c3:e4:f1:2f:b8:56:23:bd:
f1:74:16:38:ff:50:10:a3:5e:05:5b:e0:c5:39:85:8d:2e:d8:
d4:2b:6b:42:80:39:54:39:a9:01:1f:5b:47:c9:21:3f:54:23:
c5:8e:c5:db:53:78:41:b7:37:92:89:77:09:12:ee:9b:98:58:
57:dc:e0:a2:aa:d7:ae:00:17:0e:79:b0:e8:49:04:e3:a7:30:
5d:d5:75:87:ad:1a:a1:99:b8:d2:58:ec:46:bb:bf:9b:b3:a5:
b5:eb:bb:fa:8c:4e:3c:53:76:34:dc:62:0b:80:6f:48:ea:83:
fd:5e:2d:78:f4:0c:97:7c:87:86:d3:83:d3:7a:43:19:6d:60:
6f:78:7d:8a:eb:d8:4b:f0:8f:c7:73:46:fa:46:7f:ec:60:82:
b8:4e:3c:09:f8:4d:a5:89:9a:1e:e8:8c:30:5e:80:24:73:39:
39:f0:98:53:47:74:52:57:a6:1d:b7:7f:6a:b4:3c:c1:ca:55:
0a:94:a3:bc:9b:e2:3c:96:1c:18:73:e9:b2:cc:4d:91:31:3c:
f7:e5:9b:58:62:fc:3d:52:43:9c:78:7e:ba:b1:de:d7:da:3a:
9a:03:10:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:09 2026 by rpki-client