Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142146.roa
File: AS142146.roa (raw, json)
Hash identifier: BRC6i3icKLiV9M5d+lyhMT4MY8izLTWisES3COwNLeE=
Subject key identifier: 96:98:C3:3D:19:E0:07:25:4F:40:89:AD:00:0E:DE:16:F7:A5:2E:64
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 74292C756A748D5DA2B2BB4E9C7BD8B54BCBD9E6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142146.roa
Signing time: Tue 15 Sep 2026 11:59:25 +0000
ROA not before: Tue 15 Sep 2026 11:54:25 +0000
ROA not after: Tue 14 Sep 2027 11:59:25 +0000
asID: 142146
IP address blocks: 82.38.32.0/24 maxlen: 24
178.83.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:29:2c:75:6a:74:8d:5d:a2:b2:bb:4e:9c:7b:d8:b5:4b:cb:d9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 15 11:54:25 2026 GMT
Not After : Sep 14 11:59:25 2027 GMT
Subject: CN=9698C33D19E007254F4089AD000EDE16F7A52E64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:9b:78:11:ce:11:af:c1:c0:4e:ef:30:03:
3c:f6:9e:ad:7b:9c:06:71:fd:d7:60:5c:20:55:21:
f0:3b:63:0e:f2:24:d1:f3:5e:bd:7c:eb:aa:d8:d0:
ff:51:de:6f:ea:c9:7c:83:4f:d5:07:53:1e:7f:db:
47:b3:25:ed:2b:d8:3d:b3:fd:15:cb:71:ca:41:22:
d7:ad:53:df:27:d1:91:cb:de:63:77:53:26:0d:45:
78:c0:7d:ec:9e:42:1a:d6:50:5e:5f:b3:f3:66:77:
ae:70:22:3b:ba:e5:a0:63:dc:54:2a:ea:de:21:1f:
3a:41:f5:8e:dc:5a:96:24:16:09:4a:5e:68:25:6c:
d9:1f:d5:e6:96:d3:12:94:34:fd:6f:7b:c5:3d:f4:
c2:6b:33:a3:15:06:9b:39:67:94:5d:e8:a5:ee:6e:
ef:fc:8b:55:28:fa:7d:c2:0b:7c:78:15:45:4b:10:
1e:f3:56:3c:27:8a:3c:28:60:85:a8:33:99:07:de:
01:b0:93:4e:f5:97:e4:18:ef:76:16:e8:5f:2d:28:
06:fe:5e:f3:dd:b5:f6:2d:3a:e4:ad:95:b7:a9:7d:
ac:62:0b:f7:36:ad:32:07:f4:79:ad:b8:26:cf:ca:
d1:61:c4:57:07:3c:a5:45:c5:1d:ce:28:00:5b:9d:
ad:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:98:C3:3D:19:E0:07:25:4F:40:89:AD:00:0E:DE:16:F7:A5:2E:64
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142146.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.32.0/24
178.83.39.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d8:6b:a4:6f:51:5c:3e:aa:72:f5:5b:f3:8a:bf:7b:3a:00:
92:b5:2d:6c:14:17:c9:d5:bc:ba:19:12:f2:63:94:3d:e9:34:
2f:7e:7b:0f:1d:f0:fe:24:91:62:08:9e:92:83:40:3c:35:9e:
f9:d5:89:09:85:7a:76:61:b2:5d:ee:0d:f5:8f:e7:81:85:a5:
24:f9:f5:12:e0:b8:bd:cd:13:b8:e1:c6:16:c4:5a:e5:75:a2:
b1:93:ec:ee:cb:9f:cf:9b:14:b1:4e:45:a9:20:50:59:f4:9e:
e8:f5:a3:8e:f4:a3:e2:59:ef:ae:20:fd:8a:21:85:11:36:76:
bb:e6:f1:6a:00:7a:b1:4a:7c:f4:75:48:a3:f0:68:29:e2:90:
13:05:53:a6:71:f4:d6:b4:86:5e:ce:8b:0c:53:5a:3c:09:d4:
c9:ec:5a:f3:71:02:1a:31:e8:ce:b9:67:bf:97:00:00:b8:e3:
67:33:c2:b9:a4:53:bf:5e:09:97:ef:e9:dd:01:16:3c:09:39:
ab:bc:6f:48:c1:73:28:d4:c8:cf:09:c3:f6:65:ca:80:35:dd:
7f:ab:58:58:8c:05:13:b8:74:55:56:80:21:fa:89:d4:02:d7:
1a:e1:a5:81:ab:af:86:04:2a:c2:ca:06:01:02:3d:bb:c2:15:
8e:c0:a5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:18:31 2026 by rpki-client