Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142146.roa
File: AS142146.roa (raw, json)
Hash identifier: ysEEjBgM6m756gej1XM9S/tfe94rqcG5FnVjNx4PdhA=
Subject key identifier: B3:D0:85:46:31:E0:F6:3E:FC:77:49:1A:AB:23:91:61:7F:16:F4:FB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5A8B6267BE06097A1F909AA88BDAD4BDCD921E66
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142146.roa
Signing time: Tue 07 Apr 2026 06:17:40 +0000
ROA not before: Tue 07 Apr 2026 06:12:40 +0000
ROA not after: Tue 06 Apr 2027 06:17:40 +0000
asID: 142146
IP address blocks: 84.75.146.0/24 maxlen: 24
178.83.39.0/24 maxlen: 24
178.83.166.0/24 maxlen: 24
178.83.172.0/24 maxlen: 24
178.83.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:8b:62:67:be:06:09:7a:1f:90:9a:a8:8b:da:d4:bd:cd:92:1e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 7 06:12:40 2026 GMT
Not After : Apr 6 06:17:40 2027 GMT
Subject: CN=B3D0854631E0F63EFC77491AAB2391617F16F4FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:44:0a:06:5c:e2:52:39:53:d6:6b:d1:29:4e:
bc:84:8f:ad:1e:f1:2a:9a:3d:d2:dc:e4:b8:69:b5:
1f:3d:da:15:50:72:7e:d0:9e:34:eb:f2:09:17:f3:
3d:f0:c5:93:94:0a:66:6b:f6:09:fa:89:9f:77:12:
f9:3a:2b:41:25:81:6c:c3:46:ac:e8:39:4e:05:8e:
f8:7f:57:1a:8c:e3:7d:92:3c:10:9e:ad:d5:a3:7f:
ff:84:9c:bf:9c:a3:28:91:73:c2:f1:b9:f2:b9:e2:
0b:1b:f6:cc:0f:cf:6b:34:10:62:26:d1:18:5c:d2:
60:ba:4e:15:c6:e3:fb:66:7f:f7:58:c4:58:b1:30:
e4:5e:d8:3f:86:f6:29:f3:0b:60:00:87:e2:78:6f:
6e:5c:61:e3:4a:ab:c1:85:5d:3c:79:49:80:89:ea:
ca:e7:9e:f7:ce:f2:d7:65:80:db:e0:e1:e8:d4:7f:
1a:ec:40:90:5f:c3:48:df:46:18:08:7c:2d:b4:29:
4f:4a:d0:a5:d0:86:96:c2:be:62:70:66:d7:ff:32:
cf:34:ca:b7:05:8c:0e:b1:19:bf:be:bd:e4:02:3e:
61:d3:95:74:57:40:36:85:cd:12:98:25:43:a6:65:
68:3c:b1:7e:87:0e:8d:97:2e:4b:2e:4b:bc:b9:19:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D0:85:46:31:E0:F6:3E:FC:77:49:1A:AB:23:91:61:7F:16:F4:FB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142146.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.146.0/24
178.83.39.0/24
178.83.166.0/24
178.83.172.0/24
178.83.174.0/24
Signature Algorithm: sha256WithRSAEncryption
21:8d:3f:1c:4c:38:85:61:ef:94:99:8f:29:70:bd:e1:6a:7e:
4b:14:bf:84:36:e4:c6:10:49:67:e9:51:65:f9:4e:71:04:46:
f7:aa:a6:f1:db:1e:80:73:85:4d:2c:27:2d:09:a3:48:a0:43:
55:b8:9a:5b:67:52:68:9d:ff:f6:f8:3e:08:b7:22:2f:bc:58:
2e:8c:7d:80:27:28:b7:2f:d3:58:b3:78:9a:de:d6:81:bd:81:
8e:f7:ae:23:00:89:08:0b:a5:09:c0:4a:41:a0:0c:cb:a1:1c:
8b:1e:93:2b:f7:2a:f0:34:65:5a:dc:b0:23:45:01:a5:e0:1c:
1f:b9:c3:57:57:e9:81:05:c4:f3:55:99:81:80:b7:9c:e4:68:
24:1c:6c:cf:08:a6:d9:42:53:25:46:68:8f:98:0e:40:3f:c6:
7b:6e:85:60:6f:09:89:a4:28:9a:c0:65:cb:eb:6d:66:3e:cc:
a6:a5:4f:19:f1:e1:2d:f0:8a:82:e5:4a:2f:b7:33:c7:a0:c3:
5c:9c:2a:82:60:ee:56:de:8c:03:27:9c:75:14:cf:37:f3:51:
38:a1:d2:94:0a:ad:66:dd:89:b1:13:dd:c7:19:a1:f4:04:8b:
15:83:ce:eb:d6:e6:62:a6:34:a5:3a:f2:8f:e1:3b:39:ff:d3:
87:39:ce:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:34 2026 by rpki-client