Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS142146.roa
File: AS142146.roa (raw, json)
Hash identifier: FvU4gt6yJpiQPMWv6VCNoiWj3lxGcy2W2/VyE+IvcMg=
Subject key identifier: EC:90:E2:4E:C8:05:F8:BF:FC:9E:39:47:F5:AE:D5:76:73:F2:FE:A6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7957CBA5C5F7BABD65D7D52B8978B96165F62D20
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS142146.roa
Signing time: Tue 15 Sep 2026 12:01:47 +0000
ROA not before: Tue 15 Sep 2026 11:56:47 +0000
ROA not after: Tue 14 Sep 2027 12:01:47 +0000
asID: 142146
IP address blocks: 51.241.116.0/24 maxlen: 24
188.221.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:57:cb:a5:c5:f7:ba:bd:65:d7:d5:2b:89:78:b9:61:65:f6:2d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 15 11:56:47 2026 GMT
Not After : Sep 14 12:01:47 2027 GMT
Subject: CN=EC90E24EC805F8BFFC9E3947F5AED57673F2FEA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:b8:6d:41:bb:e9:2f:0f:fd:63:f8:f1:bd:
8b:5d:21:63:92:f7:95:1d:1e:ca:a7:13:5c:c0:94:
49:6d:e4:ea:ec:45:e0:94:53:d0:56:95:2e:c2:9f:
c0:22:d0:82:08:22:79:87:76:9c:03:84:30:18:7e:
b5:da:0c:95:16:17:0d:8b:70:4d:b0:a4:00:1b:fc:
ad:4e:48:15:ca:fd:2b:82:95:76:c9:22:37:8f:3c:
44:9c:1e:60:46:14:3a:2b:cb:0b:e2:8f:f9:e6:11:
d7:1b:82:40:77:6d:ca:d9:6c:2e:c8:c9:b0:08:20:
98:47:f6:af:27:8e:33:1f:36:79:71:75:93:17:9f:
0f:46:81:20:ff:22:64:75:09:e7:9d:bb:4c:39:67:
7d:73:a8:89:e0:95:eb:b9:a6:2f:cf:c0:9e:2c:00:
67:67:01:2b:8c:89:e3:e4:60:b7:8b:46:09:b5:d0:
c6:84:12:8c:5d:a2:c9:8a:eb:81:72:c2:0b:0e:9e:
92:73:1e:a4:ae:77:6c:34:8f:a3:e3:b6:fa:e2:86:
18:96:26:24:a3:7e:ff:ae:0a:1e:64:4d:36:d5:39:
23:17:14:b1:f5:bd:db:5e:bc:53:15:d5:ab:bb:e5:
69:f8:dc:a3:49:f0:31:e5:3f:3c:8e:11:3b:9a:20:
ad:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:90:E2:4E:C8:05:F8:BF:FC:9E:39:47:F5:AE:D5:76:73:F2:FE:A6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS142146.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.116.0/24
188.221.32.0/24
Signature Algorithm: sha256WithRSAEncryption
52:79:bf:8a:71:51:fa:28:a8:d7:31:c2:20:a0:a4:7d:20:42:
63:64:65:f3:64:ac:08:9f:2c:67:1f:71:88:e8:7a:ed:ee:1e:
52:f2:7b:6e:26:c3:a4:f6:98:27:14:2f:40:1b:66:3e:49:a3:
3b:18:d9:63:8d:b6:f9:18:4f:ea:3a:09:4b:68:ef:a2:0f:d9:
36:3c:75:ed:ee:52:75:5d:7b:f6:da:d0:f4:e1:98:04:42:74:
c2:4d:67:be:ca:29:ad:eb:a2:3f:b7:64:37:6b:a7:56:34:a3:
c2:88:0b:94:63:15:99:2b:0c:8b:dc:e0:c0:1f:37:43:64:2d:
1a:5a:8e:f3:2e:0e:76:91:7d:f4:59:3d:27:33:b5:f5:74:f9:
87:56:64:4f:3b:3a:c1:4c:99:22:ab:f2:0c:63:d5:82:e7:9d:
84:c3:d2:e3:19:1e:fe:4a:bb:04:14:c6:f3:b9:f6:7c:dd:38:
06:2a:af:f5:ba:66:b4:73:a5:ba:05:7b:fa:9d:37:7e:18:23:
51:42:31:28:0a:08:6e:d1:f4:d7:5c:a7:94:2f:21:7c:3d:4f:
d3:1d:ce:14:a4:fa:69:63:40:f6:b3:57:c4:35:ca:23:33:f0:
6d:16:65:fb:b7:41:1e:be:c7:9c:7a:62:42:9f:c1:2b:61:c8:
6c:55:94:9d
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUeVfLpcX3ur1l19UriXi5YWX2LSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MTUxMTU2NDdaFw0yNzA5MTQxMjAxNDdaMDMxMTAvBgNV
BAMTKEVDOTBFMjRFQzgwNUY4QkZGQzlFMzk0N0Y1QUVENTc2NzNGMkZFQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsOLhtQbvpLw/9Y/jxvYtdIWOS
95UdHsqnE1zAlElt5OrsReCUU9BWlS7Cn8Ai0IIIInmHdpwDhDAYfrXaDJUWFw2L
cE2wpAAb/K1OSBXK/SuClXbJIjePPEScHmBGFDorywvij/nmEdcbgkB3bcrZbC7I
ybAIIJhH9q8njjMfNnlxdZMXnw9GgSD/ImR1Ceedu0w5Z31zqIngleu5pi/PwJ4s
AGdnASuMiePkYLeLRgm10MaEEoxdosmK64FywgsOnpJzHqSud2w0j6PjtvrihhiW
JiSjfv+uCh5kTTbVOSMXFLH1vdtevFMV1au75Wn43KNJ8DHlPzyOETuaIK35AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQU7JDiTsgF+L/8njlH9a7VdnPy/qYwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTQyMTQ2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAM/F0
AwQAvN0gMA0GCSqGSIb3DQEBCwUAA4IBAQBSeb+KcVH6KKjXMcIgoKR9IEJjZGXz
ZKwInyxnH3GI6Hrt7h5S8ntuJsOk9pgnFC9AG2Y+SaM7GNljjbb5GE/qOglLaO+i
D9k2PHXt7lJ1XXv22tD04ZgEQnTCTWe+yimt66I/t2Q3a6dWNKPCiAuUYxWZKwyL
3ODAHzdDZC0aWo7zLg52kX30WT0nM7X1dPmHVmRPOzrBTJkiq/IMY9WC552Ew9Lj
GR7+SrsEFMbzufZ83TgGKq/1uma0c6W6BXv6nTd+GCNRQjEoCghu0fTXXKeULyF8
PU/THc4UpPppY0D2s1fENcojM/BtFmX7t0EevsecemJCn8ErYchsVZSd
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:11:19 2026 by rpki-client