
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS142146.roa
File: AS142146.roa (raw, json)
Hash identifier: +lt7y9VV8tQ45NUycv5oetsotOh6Zbm0MhrouHHcNHA=
Subject key identifier: 24:A5:CA:3A:A0:25:C7:16:A4:35:B2:24:E8:8E:B8:A5:D2:70:F3:E9
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 23C4E675EDCA6C26BA4393AAD0A48152F4A4EA46
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS142146.roa
Signing time: Thu 08 Oct 2026 12:52:27 +0000
ROA not before: Thu 08 Oct 2026 12:47:27 +0000
ROA not after: Thu 07 Oct 2027 12:52:27 +0000
asID: 142146
IP address blocks: 109.64.5.0/24 maxlen: 24
109.65.35.0/24 maxlen: 24
109.66.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 15:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:c4:e6:75:ed:ca:6c:26:ba:43:93:aa:d0:a4:81:52:f4:a4:ea:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 8 12:47:27 2026 GMT
Not After : Oct 7 12:52:27 2027 GMT
Subject: CN=24A5CA3AA025C716A435B224E88EB8A5D270F3E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:59:e9:5f:72:07:13:ce:ba:a4:3a:6e:c8:
00:4e:23:02:01:e8:55:00:ef:86:21:d9:a7:96:9d:
b9:5e:bc:23:bb:e2:59:e6:2b:a3:a4:dc:17:87:14:
68:19:d2:51:fa:da:82:7a:31:21:ac:d3:3c:59:7b:
29:9f:86:1d:9f:5b:94:12:06:ce:49:e2:e0:4a:06:
25:31:4e:cd:ce:12:45:bf:e6:3b:60:ca:7d:51:9f:
ad:a5:8b:bd:24:ab:a2:f5:ca:c4:cd:e2:81:cc:ea:
f2:90:6d:7f:f0:eb:fd:b7:60:54:58:5d:fa:5e:d6:
c1:08:67:26:c0:b8:fd:62:eb:1e:c9:e8:0d:b3:ce:
2c:5a:58:3e:05:c3:a9:a7:9e:84:24:93:c3:fa:b3:
43:41:fc:7b:86:97:90:4c:2f:b6:61:06:31:eb:dc:
0d:88:bc:dd:51:e7:29:67:e1:12:2d:5d:2c:d5:bc:
a2:19:22:e6:4b:5d:7a:5c:b5:b9:0e:94:42:3d:e4:
05:96:56:45:b2:7c:2c:5b:a0:27:7f:7b:17:cd:b5:
4e:dd:ad:ef:2a:e5:ca:57:4a:47:c2:7d:e8:a9:26:
bb:72:ff:db:1c:e9:56:67:1e:72:96:b1:b6:2b:3b:
5e:21:c1:1e:5b:d4:86:8e:f3:9a:4e:dd:b1:59:d3:
c0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A5:CA:3A:A0:25:C7:16:A4:35:B2:24:E8:8E:B8:A5:D2:70:F3:E9
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS142146.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.64.5.0/24
109.65.35.0/24
109.66.25.0/24
Signature Algorithm: sha256WithRSAEncryption
12:6e:03:d1:09:1c:22:75:f5:97:ad:d0:73:62:62:08:0e:0e:
cf:b2:27:91:8d:4d:53:b9:c2:26:08:67:94:36:42:c6:07:c1:
86:bf:95:20:0e:1d:4a:e1:86:1b:87:98:86:86:bb:46:01:49:
29:2e:30:89:0e:ac:a0:c1:89:15:3b:81:b8:1a:e5:5a:a4:c3:
8c:1d:83:12:13:ce:dd:55:a3:62:3f:18:f0:71:2d:a1:41:69:
3d:bd:8d:67:e0:c3:d7:12:98:b0:94:0b:bc:69:00:17:84:b6:
10:4d:9b:7a:41:0f:9a:3b:83:48:f8:a1:2a:c5:c1:c6:fc:dd:
fb:5e:1a:9e:c9:d3:ed:8a:a4:e0:5e:ac:c8:de:e1:a0:f0:53:
4b:19:90:cb:a1:f0:a1:48:1d:eb:a5:c0:30:2d:a0:9e:1f:59:
d8:fa:92:ca:e0:ba:a5:b7:87:32:26:52:dc:14:1f:a1:69:bb:
ee:43:85:5d:69:51:fa:26:ea:6d:91:17:ea:5f:ac:c4:2c:80:
53:7e:56:44:e6:ab:e4:52:b0:52:4e:92:c9:41:46:eb:3f:9f:
dd:07:62:24:0e:dc:0d:64:f0:c4:97:f0:0c:a2:8c:ab:d5:15:
41:97:60:cf:ad:5d:0a:00:75:42:bf:66:4a:72:0a:87:87:88:
b5:70:83:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:45:07 2026 by rpki-client