Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS142146.roa
File:                     AS142146.roa (raw, json)
Hash identifier:          +lt7y9VV8tQ45NUycv5oetsotOh6Zbm0MhrouHHcNHA=
Subject key identifier:   24:A5:CA:3A:A0:25:C7:16:A4:35:B2:24:E8:8E:B8:A5:D2:70:F3:E9
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       23C4E675EDCA6C26BA4393AAD0A48152F4A4EA46
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS142146.roa
Signing time:             Thu 08 Oct 2026 12:52:27 +0000
ROA not before:           Thu 08 Oct 2026 12:47:27 +0000
ROA not after:            Thu 07 Oct 2027 12:52:27 +0000
asID:                     142146
IP address blocks:        109.64.5.0/24 maxlen: 24
                          109.65.35.0/24 maxlen: 24
                          109.66.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 15:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c4:e6:75:ed:ca:6c:26:ba:43:93:aa:d0:a4:81:52:f4:a4:ea:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  8 12:47:27 2026 GMT
            Not After : Oct  7 12:52:27 2027 GMT
        Subject: CN=24A5CA3AA025C716A435B224E88EB8A5D270F3E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8e:59:e9:5f:72:07:13:ce:ba:a4:3a:6e:c8:
                    00:4e:23:02:01:e8:55:00:ef:86:21:d9:a7:96:9d:
                    b9:5e:bc:23:bb:e2:59:e6:2b:a3:a4:dc:17:87:14:
                    68:19:d2:51:fa:da:82:7a:31:21:ac:d3:3c:59:7b:
                    29:9f:86:1d:9f:5b:94:12:06:ce:49:e2:e0:4a:06:
                    25:31:4e:cd:ce:12:45:bf:e6:3b:60:ca:7d:51:9f:
                    ad:a5:8b:bd:24:ab:a2:f5:ca:c4:cd:e2:81:cc:ea:
                    f2:90:6d:7f:f0:eb:fd:b7:60:54:58:5d:fa:5e:d6:
                    c1:08:67:26:c0:b8:fd:62:eb:1e:c9:e8:0d:b3:ce:
                    2c:5a:58:3e:05:c3:a9:a7:9e:84:24:93:c3:fa:b3:
                    43:41:fc:7b:86:97:90:4c:2f:b6:61:06:31:eb:dc:
                    0d:88:bc:dd:51:e7:29:67:e1:12:2d:5d:2c:d5:bc:
                    a2:19:22:e6:4b:5d:7a:5c:b5:b9:0e:94:42:3d:e4:
                    05:96:56:45:b2:7c:2c:5b:a0:27:7f:7b:17:cd:b5:
                    4e:dd:ad:ef:2a:e5:ca:57:4a:47:c2:7d:e8:a9:26:
                    bb:72:ff:db:1c:e9:56:67:1e:72:96:b1:b6:2b:3b:
                    5e:21:c1:1e:5b:d4:86:8e:f3:9a:4e:dd:b1:59:d3:
                    c0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A5:CA:3A:A0:25:C7:16:A4:35:B2:24:E8:8E:B8:A5:D2:70:F3:E9
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS142146.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.64.5.0/24
                  109.65.35.0/24
                  109.66.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:6e:03:d1:09:1c:22:75:f5:97:ad:d0:73:62:62:08:0e:0e:
         cf:b2:27:91:8d:4d:53:b9:c2:26:08:67:94:36:42:c6:07:c1:
         86:bf:95:20:0e:1d:4a:e1:86:1b:87:98:86:86:bb:46:01:49:
         29:2e:30:89:0e:ac:a0:c1:89:15:3b:81:b8:1a:e5:5a:a4:c3:
         8c:1d:83:12:13:ce:dd:55:a3:62:3f:18:f0:71:2d:a1:41:69:
         3d:bd:8d:67:e0:c3:d7:12:98:b0:94:0b:bc:69:00:17:84:b6:
         10:4d:9b:7a:41:0f:9a:3b:83:48:f8:a1:2a:c5:c1:c6:fc:dd:
         fb:5e:1a:9e:c9:d3:ed:8a:a4:e0:5e:ac:c8:de:e1:a0:f0:53:
         4b:19:90:cb:a1:f0:a1:48:1d:eb:a5:c0:30:2d:a0:9e:1f:59:
         d8:fa:92:ca:e0:ba:a5:b7:87:32:26:52:dc:14:1f:a1:69:bb:
         ee:43:85:5d:69:51:fa:26:ea:6d:91:17:ea:5f:ac:c4:2c:80:
         53:7e:56:44:e6:ab:e4:52:b0:52:4e:92:c9:41:46:eb:3f:9f:
         dd:07:62:24:0e:dc:0d:64:f0:c4:97:f0:0c:a2:8c:ab:d5:15:
         41:97:60:cf:ad:5d:0a:00:75:42:bf:66:4a:72:0a:87:87:88:
         b5:70:83:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:45:07 2026 by rpki-client