Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147293.roa
File: AS147293.roa (raw, json)
Hash identifier: 1OATchS5bZe/BFa8ciY8iAwevMlZfdbXsdi2uwIxW3M=
Subject key identifier: CD:D4:5E:82:3B:CC:39:F1:8C:7A:AC:11:CA:35:AB:27:F3:9B:A0:ED
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1461CC4AE53C97493ACDDDCCA8C71D26B211F956
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147293.roa
Signing time: Wed 01 Apr 2026 00:54:24 +0000
ROA not before: Wed 01 Apr 2026 00:49:24 +0000
ROA not after: Wed 31 Mar 2027 00:54:24 +0000
asID: 147293
IP address blocks: 82.22.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:61:cc:4a:e5:3c:97:49:3a:cd:dd:cc:a8:c7:1d:26:b2:11:f9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 1 00:49:24 2026 GMT
Not After : Mar 31 00:54:24 2027 GMT
Subject: CN=CDD45E823BCC39F18C7AAC11CA35AB27F39BA0ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:2f:2e:e6:e1:b6:43:72:3d:89:da:f7:c4:
a5:78:da:40:c3:31:5c:6f:bd:9f:34:cd:64:c7:61:
7a:ec:b5:b9:10:7f:21:13:51:fe:de:9b:96:f5:05:
78:af:cd:90:a0:a4:92:01:34:2f:26:72:7d:99:89:
5b:f8:40:0e:4a:27:3a:d1:19:86:b4:cd:20:b5:f7:
e1:96:28:ae:c6:7e:fd:04:e0:77:45:6f:73:75:5e:
e0:35:b8:a8:d6:35:99:40:1a:b0:f4:f2:52:15:be:
df:ac:13:26:dc:27:63:ea:bc:5a:b4:0c:15:64:4a:
37:f0:ad:4a:b5:ca:3e:b2:a3:45:4e:bc:e8:6f:9c:
68:e1:f5:33:43:82:9e:db:01:ad:c3:8d:09:96:ca:
04:e7:22:11:8b:3a:cf:84:fb:81:b0:fa:02:61:c7:
9f:e0:86:9d:01:97:35:6b:cb:be:ab:96:72:36:99:
ef:d8:99:e2:0f:7a:7e:50:86:d7:61:35:03:11:4c:
97:8d:73:d3:03:5c:94:a7:23:b9:02:cb:12:11:9c:
8f:a2:28:a6:4f:f8:5e:f3:13:84:9f:08:6f:28:2b:
32:ab:d0:d6:71:67:8a:3c:fd:e6:30:6d:8f:75:a6:
67:1d:5c:81:11:f3:bc:47:f3:48:e4:0a:ad:a2:96:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D4:5E:82:3B:CC:39:F1:8C:7A:AC:11:CA:35:AB:27:F3:9B:A0:ED
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147293.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.78.0/24
Signature Algorithm: sha256WithRSAEncryption
56:79:15:2a:fe:5d:06:4f:8f:cc:4d:d8:44:c9:da:f0:65:41:
f0:c2:2b:e1:5d:da:d0:ce:7f:e0:3c:93:df:f0:ce:74:ef:d3:
8c:90:55:3e:c0:56:fb:5a:ff:fc:43:e2:9c:49:95:b0:0c:7f:
11:d3:45:88:8d:8c:4d:c6:c7:b7:15:fb:fd:fe:6c:9a:54:73:
fe:a1:4c:3c:8e:2f:21:96:cf:d1:bb:2f:e8:8d:7d:c3:6f:ca:
3d:05:92:29:fe:9c:4d:c8:d1:bf:39:fc:df:22:e9:08:af:ed:
c2:a0:48:be:f0:11:11:39:79:26:30:e6:5c:ed:c9:82:82:3b:
ca:40:5c:0e:a4:9c:9f:88:e3:2f:09:ed:8d:e9:0d:37:ca:65:
bd:78:d1:ac:60:94:da:8f:b9:2b:db:ec:bc:b4:bd:b3:1b:cb:
19:4d:8f:88:91:f6:08:aa:47:7b:43:54:0b:cd:52:f1:34:d5:
1e:59:96:c0:81:6c:6d:ed:db:b4:6f:6b:fe:76:cc:a2:af:ab:
01:9f:df:6b:25:78:63:c3:24:3e:c7:01:20:c0:4b:e8:f2:61:
6d:27:ed:c3:e0:d8:77:46:53:eb:7c:cc:e9:67:69:19:8b:13:
42:86:ea:1d:b4:dd:f6:38:74:da:b5:d8:37:c1:07:4c:81:bb:
1d:70:ed:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:42 2026 by rpki-client