Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS142433.roa
File: AS142433.roa (raw, json)
Hash identifier: pO9nOJZWVCgXAEwBc+jbRH1Z53L8yec8kpK5kSUtzGU=
Subject key identifier: E9:F9:CF:1A:D5:9C:4B:B9:0D:00:BB:F4:26:4C:B0:B9:06:B4:EA:A5
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2C8F61DDE89F0DF8589144E60BB8DC841B5170C7
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS142433.roa
Signing time: Thu 29 Oct 2026 05:21:22 +0000
ROA not before: Thu 29 Oct 2026 05:16:22 +0000
ROA not after: Thu 28 Oct 2027 05:21:22 +0000
asID: 142433
IP address blocks: 78.105.182.0/23 maxlen: 24
94.118.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:8f:61:dd:e8:9f:0d:f8:58:91:44:e6:0b:b8:dc:84:1b:51:70:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 29 05:16:22 2026 GMT
Not After : Oct 28 05:21:22 2027 GMT
Subject: CN=E9F9CF1AD59C4BB90D00BBF4264CB0B906B4EAA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0a:8b:d6:09:c3:95:d6:f3:9c:6b:cd:d9:e4:
05:cd:41:d9:d8:00:ab:cd:fd:24:5d:15:30:9e:89:
35:8d:6a:ed:c9:da:d6:98:0d:4d:23:50:83:d9:08:
5e:7f:31:94:34:f9:4f:21:2e:22:18:94:c1:61:9a:
a1:f3:fa:36:0b:1f:89:5e:1f:49:3b:2c:34:d5:a8:
a8:3d:87:08:aa:39:9b:31:a8:24:08:17:55:a8:40:
22:d8:cb:28:87:70:eb:4e:61:f8:f5:ac:ba:04:ce:
5a:dc:59:4d:41:18:0c:7a:58:a7:a7:ca:a6:0d:0e:
8d:e6:8e:e9:9e:ed:44:5f:bf:ab:a6:81:6e:3b:a5:
d4:a7:e2:a6:a0:00:14:18:2c:a1:36:66:89:65:91:
49:d3:7e:60:16:5f:a6:14:02:ee:0b:24:7e:18:8e:
fc:f4:5e:8c:86:65:63:8f:dd:e5:00:d6:4c:56:b2:
21:af:d3:5f:05:21:b4:b2:8d:2c:a8:53:5c:f4:f5:
3a:4c:ab:3f:a3:ea:18:2d:ac:01:dc:32:87:e7:6d:
8d:f6:ec:84:b4:08:11:ee:32:4e:df:de:49:74:23:
19:20:95:93:7f:63:ec:4a:b4:ff:dc:df:af:f7:59:
a5:31:0c:3a:0d:2d:cf:10:72:8a:05:54:59:33:9e:
9e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F9:CF:1A:D5:9C:4B:B9:0D:00:BB:F4:26:4C:B0:B9:06:B4:EA:A5
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS142433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.182.0/23
94.118.188.0/23
Signature Algorithm: sha256WithRSAEncryption
30:fa:24:7e:9d:52:c5:da:fc:94:f6:15:9b:e0:13:25:3d:1a:
a1:46:d9:cc:45:95:cd:c0:1d:c6:2d:26:bf:c5:9d:a1:fb:f1:
23:04:ba:43:51:4c:73:2a:f5:f6:8e:0d:5e:08:18:4d:b8:57:
4e:72:bb:de:96:12:61:22:c5:e7:88:62:6d:c6:b9:21:1a:65:
ae:24:38:cd:49:55:ca:c5:61:47:5b:7d:ea:db:fd:e3:e6:4c:
8b:85:ed:7e:4d:ef:bf:f8:dc:0f:cf:67:1d:6c:e1:fb:77:81:
66:74:04:6d:2e:2c:82:ea:64:d7:df:aa:3d:b9:36:8c:fa:86:
64:57:db:1e:02:98:de:d4:d3:6b:22:06:c8:f3:ab:1c:84:92:
d9:d3:37:32:63:30:38:a4:81:49:38:49:89:12:51:45:f8:86:
38:36:df:b7:61:00:c0:b4:c4:9d:fc:f9:1c:cf:73:69:31:e3:
07:4d:c3:2b:7a:04:2e:a6:02:c2:ac:62:8a:37:7e:4f:c4:0a:
9d:40:c7:15:4f:5a:1b:85:fc:7d:41:d6:fd:0d:b1:58:49:c1:
4f:64:c7:2b:ec:7d:78:73:41:cb:1b:05:15:3a:fb:11:58:ee:
d0:91:52:b0:3b:a7:bf:0d:2b:30:e7:c1:53:53:0a:a5:fb:51:
46:92:b8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:20:08 2026 by rpki-client