Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS140641.roa
File: AS140641.roa (raw, json)
Hash identifier: /c9LrF+4XjgCO6BF/a2zyQ+V1xxBnN3zKoywG7KbhC4=
Subject key identifier: 9C:79:B3:D9:ED:49:C4:88:D9:E4:32:D8:8F:97:70:F1:0C:CD:F1:61
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5E768A1ED988162F741CA1B9B67686502EF22E3E
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS140641.roa
Signing time: Fri 25 Jul 2025 08:07:41 +0000
ROA not before: Fri 25 Jul 2025 08:02:41 +0000
ROA not after: Fri 24 Jul 2026 08:07:41 +0000
asID: 140641
IP address blocks: 2a0f:85c1:3d7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:76:8a:1e:d9:88:16:2f:74:1c:a1:b9:b6:76:86:50:2e:f2:2e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:41 2025 GMT
Not After : Jul 24 08:07:41 2026 GMT
Subject: CN=9C79B3D9ED49C488D9E432D88F9770F10CCDF161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:dc:ff:57:88:9b:b8:d4:f8:2a:2a:e9:02:85:
ed:45:3d:2d:e6:89:d1:46:0f:c6:05:dc:a7:87:98:
8e:45:e9:6d:6e:e8:75:1d:c2:2a:32:3b:a8:60:35:
b7:f9:82:7e:83:e3:64:54:65:af:05:58:89:b1:2d:
52:42:c6:3f:31:f3:e8:07:d5:a6:c6:70:cd:1b:20:
c0:c5:2c:1a:d9:26:f6:83:0a:0c:f5:7a:5d:2b:24:
e9:5b:1b:af:cc:3f:5f:b4:0d:65:1f:1a:f7:97:65:
76:cf:81:3e:e1:6b:96:15:bc:45:00:2a:a7:0c:67:
9f:2a:30:dc:a0:b9:f7:2a:d5:7d:58:52:d5:22:ba:
4d:53:1c:94:c0:00:ba:c6:e9:8d:01:4e:f0:76:60:
cd:96:85:ca:44:19:c7:84:3a:07:bb:70:41:98:44:
d5:ba:3b:5e:4c:76:0f:08:74:73:e8:29:3e:ac:37:
7b:7a:8c:98:35:d6:da:59:1b:0b:90:bd:6d:e9:75:
31:d2:30:39:f9:3e:af:80:d4:9f:f9:77:c0:14:d1:
00:d4:67:f6:ba:a4:b6:9c:78:62:f9:74:c7:66:fc:
49:8d:3a:fa:1d:2d:1c:49:c3:1f:8e:0f:54:0a:90:
8e:d0:00:cc:21:81:6c:e0:32:5d:aa:9b:d8:da:f2:
26:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:79:B3:D9:ED:49:C4:88:D9:E4:32:D8:8F:97:70:F1:0C:CD:F1:61
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS140641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3d7::/48
Signature Algorithm: sha256WithRSAEncryption
9c:c6:57:dc:ae:fa:30:9e:9f:cb:13:07:48:ae:87:87:c7:22:
14:ab:60:71:cd:20:b2:86:ce:d5:11:a9:6c:6b:32:fb:cc:3f:
bf:db:08:a9:c8:5d:90:1d:4e:76:f5:fb:dc:4f:18:14:21:9b:
42:f1:d8:58:4c:87:38:bd:da:87:ea:f4:7a:9e:8c:da:9d:37:
2b:05:d5:fd:ca:40:59:ec:6a:14:3b:a0:2e:8f:ae:c7:0b:a6:
39:19:13:61:f4:13:4a:70:39:94:25:8b:0d:f4:59:64:8a:f5:
f0:b1:96:50:42:77:bb:c5:8f:68:f5:09:7b:f3:2e:c5:41:c5:
76:1c:7a:81:3d:1a:7b:4f:02:d2:c3:8e:62:e6:f1:49:d2:0a:
d9:a3:70:55:a1:86:58:51:3d:6b:b3:fe:2b:13:df:9f:b9:28:
38:e9:2f:54:10:e2:89:45:7c:56:5a:aa:77:85:59:cc:06:ab:
21:98:49:52:be:44:03:b0:82:92:c2:bb:e0:3a:35:d5:4b:3f:
18:f0:90:20:40:bf:9f:09:5a:d0:d1:e2:4c:bd:ed:76:35:96:
e4:cc:95:22:4d:9a:a0:8a:c2:c4:ed:2f:52:16:d5:95:51:01:
7c:36:0f:32:a2:4e:5f:23:11:8a:51:de:6b:bb:39:67:bf:13:
9a:ff:b3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:00:52 2025 by rpki-client