Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS146883.roa
File: AS146883.roa (raw, json)
Hash identifier: p9z12VN2XwfjX3s6+u5TxT1gTYspq8N4EQylvDKxjCo=
Subject key identifier: A2:77:3D:D8:32:B6:1F:CA:BA:1E:2D:0E:0D:FE:EF:CF:A3:30:97:EE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4A4C0C5D0FB1F4921CC0555B1CA8929544D59CB2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS146883.roa
Signing time: Tue 08 Sep 2026 08:33:31 +0000
ROA not before: Tue 08 Sep 2026 08:28:31 +0000
ROA not after: Tue 07 Sep 2027 08:33:31 +0000
asID: 146883
IP address blocks: 178.83.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:4c:0c:5d:0f:b1:f4:92:1c:c0:55:5b:1c:a8:92:95:44:d5:9c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 8 08:28:31 2026 GMT
Not After : Sep 7 08:33:31 2027 GMT
Subject: CN=A2773DD832B61FCABA1E2D0E0DFEEFCFA33097EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:c5:63:c8:3c:97:a1:8b:e0:82:2f:8d:74:
ff:31:5a:37:d1:8f:37:94:7c:eb:4c:0b:68:2c:4c:
7a:29:5a:16:94:fb:ea:82:e6:9b:cb:13:85:93:63:
ee:74:5a:73:14:54:8e:a6:77:94:b3:88:55:f1:76:
f8:17:e4:73:9a:c6:ca:cb:e7:72:7e:ef:62:f1:be:
74:08:c9:a9:7b:ef:62:a8:47:09:09:d3:e1:ff:2e:
df:b7:16:39:26:f6:ea:1c:e1:47:c5:0b:77:8a:4e:
bc:47:0f:9b:e5:f3:07:41:07:38:7c:0c:09:12:7a:
51:fb:fa:9b:25:dd:c6:cb:91:96:34:2a:5f:29:dc:
45:a6:42:f5:46:7a:06:4c:91:ad:49:40:f5:5f:38:
38:cf:44:86:35:f0:2c:17:c7:f4:8b:56:d0:43:8e:
1d:d8:0f:7f:37:ac:6d:0f:2c:8c:92:e6:3b:06:c9:
04:ed:e7:c3:2b:34:ae:72:e3:f3:3d:bd:5a:b1:37:
c0:9f:64:37:dc:07:59:48:e6:b7:db:be:2e:98:01:
38:7e:d1:7e:0a:14:6b:e6:34:e3:e1:14:d1:d4:48:
2d:c1:f1:ad:86:19:17:61:f7:04:60:82:9e:c0:37:
38:f7:fb:5d:74:c2:79:bb:c8:04:5a:fd:29:3d:7a:
f9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:77:3D:D8:32:B6:1F:CA:BA:1E:2D:0E:0D:FE:EF:CF:A3:30:97:EE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS146883.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.172.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:84:e5:8f:80:3a:d4:e4:e8:38:a3:30:9c:89:45:a2:f8:ad:
16:7e:76:99:1d:16:82:c3:65:a0:6d:b2:1d:b4:fd:f9:ee:c5:
0e:de:08:97:fe:a6:f2:8f:d6:10:e5:b3:2c:04:e9:3e:4e:ce:
41:88:28:b7:c4:8d:a5:5e:2b:f9:bc:85:c4:40:b8:58:30:0e:
cc:7a:32:8b:c2:44:07:08:3f:d1:ec:88:27:9b:f5:b3:fa:c9:
0d:21:bf:e0:72:46:2b:cb:4e:81:0f:ab:8a:ba:6a:6d:df:3e:
0a:d6:98:fd:0a:7e:72:1e:c3:fa:ff:5d:b5:6c:3f:48:f0:bc:
cd:dc:ea:25:37:b0:1f:7c:55:21:b2:27:fa:e9:98:7b:d2:3e:
ed:6d:e7:ce:11:10:4d:fc:76:32:28:a0:d6:b7:1d:d1:93:b5:
b6:b2:c7:63:c9:de:87:a8:4c:68:04:22:fd:99:30:34:a0:71:
41:5b:7c:c9:d5:c8:6c:17:84:ef:f3:ba:7b:7e:a5:37:cf:c5:
eb:ff:7f:26:3a:d9:66:e9:a2:1a:ba:00:70:5b:b5:6f:32:cb:
d3:55:22:17:32:e1:ce:aa:b7:3c:3a:66:e0:f9:91:0d:c7:cb:
f4:9a:78:16:83:65:04:ef:3d:1d:f4:af:91:df:59:ac:74:ce:
1d:30:e6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:25:46 2026 by rpki-client