Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS147003.roa
File: AS147003.roa (raw, json)
Hash identifier: cvHR1+8OAHJri8OhD1O7yXnRKCzqOs5UvFloQE9Thws=
Subject key identifier: 76:F2:B4:C9:E0:DF:46:E9:7C:15:CD:05:15:21:A1:0F:81:63:AD:FA
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 28247961BB7897737B895E61B6C717546936FD88
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS147003.roa
Signing time: Wed 10 Jun 2026 13:39:52 +0000
ROA not before: Wed 10 Jun 2026 13:34:52 +0000
ROA not after: Wed 09 Jun 2027 13:39:52 +0000
asID: 147003
IP address blocks: 188.220.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:24:79:61:bb:78:97:73:7b:89:5e:61:b6:c7:17:54:69:36:fd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 10 13:34:52 2026 GMT
Not After : Jun 9 13:39:52 2027 GMT
Subject: CN=76F2B4C9E0DF46E97C15CD051521A10F8163ADFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:ab:05:1f:b0:58:a7:67:24:8d:ba:bf:22:
f6:a6:fc:99:18:74:a5:18:1e:30:e5:91:68:33:11:
2f:8c:6a:73:2f:d2:3e:d4:cb:6d:7a:78:4c:74:82:
38:5d:e9:f7:28:13:93:ac:10:8c:c3:93:c0:d0:64:
42:cb:33:09:be:83:1b:49:1c:23:51:e3:d5:28:a6:
b0:ce:9c:1b:fb:e3:50:58:c5:80:24:2a:6c:9f:2b:
bf:b5:27:9f:b3:04:d1:4d:a4:a2:b1:df:1e:1a:cf:
fc:eb:9a:75:df:d8:e4:22:6f:1a:d4:49:24:50:51:
7b:19:0e:15:f1:f5:41:7a:43:2d:10:82:83:f7:65:
4e:36:7e:1a:ed:52:ee:63:49:ad:b6:89:40:ee:a3:
09:ce:64:29:e1:32:2c:db:30:c2:dd:1d:63:2e:61:
f6:04:cb:07:ec:ab:97:15:f0:5d:fc:da:52:31:a7:
65:79:46:6e:b3:60:01:c8:41:84:81:4f:20:85:c9:
70:e5:d0:d3:db:15:b2:1e:f3:9d:36:ce:1e:69:6c:
a0:93:c7:0b:81:8a:e4:7b:53:b6:63:6f:e4:70:ea:
fb:32:22:77:c9:eb:ec:5e:5c:fb:b3:86:bb:85:f2:
dc:02:af:aa:82:cc:71:c4:26:3c:69:6e:b3:b2:6c:
3d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F2:B4:C9:E0:DF:46:E9:7C:15:CD:05:15:21:A1:0F:81:63:AD:FA
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS147003.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.158.0/23
Signature Algorithm: sha256WithRSAEncryption
97:72:b8:3e:7c:72:6b:c5:32:c3:88:6d:ec:46:24:22:36:07:
f3:74:9c:90:f7:49:a1:44:a8:c7:9b:9d:23:a6:a9:c1:cc:6b:
25:3d:e0:9e:0c:43:ba:27:ef:9d:66:57:80:da:d7:f7:c8:64:
c4:b1:a9:13:ed:bf:91:12:45:2c:bb:82:af:af:c7:b6:b1:5d:
cf:fa:94:ae:42:5a:8c:aa:99:b6:58:3e:de:d9:e7:a3:bb:eb:
3f:a6:02:8e:31:10:84:64:54:29:23:18:c3:8f:ed:e9:81:3f:
d9:65:bd:c9:21:b3:61:53:78:b4:83:f0:57:be:9b:28:d6:ff:
94:ea:43:3f:0e:87:1a:ce:d3:23:02:51:6e:44:c5:90:bf:48:
fc:ff:75:ad:5f:bb:64:8a:4d:15:6e:90:12:8c:07:22:6b:7e:
67:2f:ce:f8:bd:c3:ce:6b:19:b1:0f:b7:64:ff:fe:a4:f0:a8:
ff:6f:6a:82:35:cb:00:8f:f7:e3:cc:ca:34:e4:97:2f:f7:bc:
bb:8b:1d:4a:28:b7:a2:2a:c2:34:26:36:99:34:04:37:62:f5:
20:4b:a0:c8:53:8b:b5:a2:27:67:0b:12:7b:87:87:66:71:42:
8d:8f:30:90:bb:b7:70:d6:a2:aa:01:af:f0:c4:d7:ef:29:fe:
4e:49:9d:67
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUKCR5Ybt4l3N7iV5htscXVGk2/YgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA2MTAxMzM0NTJaFw0yNzA2MDkxMzM5NTJaMDMxMTAvBgNV
BAMTKDc2RjJCNEM5RTBERjQ2RTk3QzE1Q0QwNTE1MjFBMTBGODE2M0FERkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjXqsFH7BYp2ckjbq/Ivam/JkY
dKUYHjDlkWgzES+ManMv0j7Uy216eEx0gjhd6fcoE5OsEIzDk8DQZELLMwm+gxtJ
HCNR49UoprDOnBv741BYxYAkKmyfK7+1J5+zBNFNpKKx3x4az/zrmnXf2OQibxrU
SSRQUXsZDhXx9UF6Qy0QgoP3ZU42fhrtUu5jSa22iUDuownOZCnhMizbMMLdHWMu
YfYEywfsq5cV8F382lIxp2V5Rm6zYAHIQYSBTyCFyXDl0NPbFbIe8502zh5pbKCT
xwuBiuR7U7Zjb+Rw6vsyInfJ6+xeXPuzhruF8twCr6qCzHHEJjxpbrOybD07AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUdvK0yeDfRul8Fc0FFSGhD4FjrfowHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTQ3MDAzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvNye
MA0GCSqGSIb3DQEBCwUAA4IBAQCXcrg+fHJrxTLDiG3sRiQiNgfzdJyQ90mhRKjH
m50jpqnBzGslPeCeDEO6J++dZleA2tf3yGTEsakT7b+REkUsu4Kvr8e2sV3P+pSu
QlqMqpm2WD7e2eeju+s/pgKOMRCEZFQpIxjDj+3pgT/ZZb3JIbNhU3i0g/BXvpso
1v+U6kM/DocaztMjAlFuRMWQv0j8/3WtX7tkik0VbpASjAcia35nL874vcPOaxmx
D7dk//6k8Kj/b2qCNcsAj/fjzMo05Jcv97y7ix1KKLeiKsI0JjaZNAQ3YvUgS6DI
U4u1oidnCxJ7h4dmcUKNjzCQu7dw1qKqAa/wxNfvKf5OSZ1n
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:37:21 2026 by rpki-client