Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142240.roa
File: AS142240.roa (raw, json)
Hash identifier: KlW+zaoMspwteyka7nsiXd7deBwtbrAfvWCdZTP3VtQ=
Subject key identifier: 68:78:AE:F1:35:15:E2:75:D9:69:46:46:69:30:71:91:01:57:C8:E3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 09B9A671991054AE279C250B9A7A6306AEF57925
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142240.roa
Signing time: Wed 16 Sep 2026 03:02:11 +0000
ROA not before: Wed 16 Sep 2026 02:57:11 +0000
ROA not after: Wed 15 Sep 2027 03:02:11 +0000
asID: 142240
IP address blocks: 82.22.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b9:a6:71:99:10:54:ae:27:9c:25:0b:9a:7a:63:06:ae:f5:79:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 16 02:57:11 2026 GMT
Not After : Sep 15 03:02:11 2027 GMT
Subject: CN=6878AEF13515E275D9694646693071910157C8E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5c:50:35:dd:62:33:e6:4b:dc:02:d9:89:9b:
4d:3e:f0:bd:e4:4e:14:79:f4:0f:5e:47:1b:4a:1f:
2c:38:e8:ce:91:ff:bf:a3:e1:c9:54:00:36:00:d1:
85:ff:9e:f7:06:d1:57:63:42:1c:d6:aa:25:5a:bd:
e5:af:b9:c7:62:ac:76:e9:c7:1b:60:a4:f4:35:98:
46:4a:8e:e9:5d:67:fc:74:8c:c6:b2:08:09:65:bb:
7a:23:6b:1e:fb:7e:0b:4e:32:69:3e:a5:b1:48:41:
d4:d1:52:8b:52:5c:43:ef:15:a7:76:38:ac:5c:1d:
14:ce:87:51:e1:20:ab:b9:5a:9e:84:50:aa:e9:dc:
b6:b5:fb:eb:80:2c:dc:03:17:5c:a2:bd:46:fc:30:
34:6f:68:a3:e1:96:85:3a:cc:56:d2:a0:7f:c8:b7:
1a:2c:b4:3f:f1:d5:73:ff:9d:18:87:cf:ac:1f:ca:
64:2c:f1:f6:d8:4c:8b:b7:51:f5:56:f9:f2:3b:62:
6c:79:53:4a:6b:9f:18:57:9b:90:db:d1:b6:4a:fb:
64:b0:e1:28:3a:46:11:ca:e3:6f:a4:4d:e1:8a:ec:
43:cb:46:9f:02:4e:03:c7:65:4e:26:d5:71:6e:e9:
44:2f:76:33:19:f8:dc:64:f9:2c:91:a6:a5:ad:72:
35:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:78:AE:F1:35:15:E2:75:D9:69:46:46:69:30:71:91:01:57:C8:E3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:6f:8c:1c:0e:45:08:8f:c0:8f:02:9d:8e:e5:79:b9:7f:48:
63:c8:f3:5a:5b:d5:a8:2b:98:70:35:2d:58:5a:9c:57:da:68:
c4:81:a1:77:7f:cf:d4:08:a6:c9:5f:82:b0:2a:6d:0b:b2:05:
6d:01:8e:b1:3e:e8:01:cd:7b:fc:e0:2d:b7:b5:3c:73:78:ef:
2e:49:1a:57:8b:45:15:76:a8:a9:23:7a:23:dd:4c:36:0f:b6:
16:49:21:38:89:74:7a:22:ba:c0:c0:a1:a2:33:d3:d7:ee:89:
35:63:9b:c4:3c:79:dc:39:9e:ba:02:d0:69:51:3d:65:da:f4:
38:69:4a:f6:42:42:40:f0:31:cd:2d:7c:b8:70:80:6c:bb:b4:
7c:fa:db:2d:de:2f:36:77:0b:a3:0c:60:2c:d9:24:0f:d1:3b:
38:ff:af:6a:02:33:f9:f4:b7:65:a0:c9:3d:33:4a:70:69:a9:
23:32:04:fc:98:dc:d5:69:5c:a4:a4:5f:ce:75:6f:b4:46:f7:
c1:8f:6b:ab:3c:f5:81:af:a8:da:0e:2f:78:2c:16:db:19:8f:
11:9c:38:81:e0:30:96:16:a8:12:f7:87:95:fe:1b:33:42:6a:
e7:38:93:53:c4:07:a1:29:38:52:24:1b:b4:36:0a:07:58:2b:
20:b6:99:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:36:35 2026 by rpki-client