Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: 1DSDVoxmdrgGsb2zqwLEZNX3qB1B199nkd25XZ3Qyl4=
Subject key identifier: CF:A2:60:05:7F:11:E7:4E:03:79:EA:3F:14:DF:87:98:1C:D1:31:07
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 04D4E344B462BBBDE679B20E39C409C35C6854DB
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS147281.roa
Signing time: Tue 08 Sep 2026 08:29:16 +0000
ROA not before: Tue 08 Sep 2026 08:24:16 +0000
ROA not after: Tue 07 Sep 2027 08:29:16 +0000
asID: 147281
IP address blocks: 51.146.16.0/24 maxlen: 24
51.241.110.0/24 maxlen: 24
188.221.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:d4:e3:44:b4:62:bb:bd:e6:79:b2:0e:39:c4:09:c3:5c:68:54:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 8 08:24:16 2026 GMT
Not After : Sep 7 08:29:16 2027 GMT
Subject: CN=CFA260057F11E74E0379EA3F14DF87981CD13107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bf:23:47:25:fe:64:09:ec:5a:3e:b3:7f:5a:
2d:cf:48:db:ba:43:21:16:ac:77:a8:a1:d4:a5:cb:
bb:31:a0:a5:ef:de:75:10:bf:ad:44:58:b3:e2:2b:
d2:f9:14:0e:c9:24:39:2d:b9:df:15:6e:b9:65:75:
69:00:f8:7f:11:63:4f:5d:7a:8f:40:87:9b:7e:a1:
09:05:93:d6:49:ad:1b:03:96:50:03:db:61:ff:5f:
37:e7:78:24:d3:e9:35:9c:7e:54:eb:f9:16:79:1b:
af:fc:25:92:fe:a7:05:5e:70:34:0d:5a:e8:9a:6b:
b8:23:2f:fc:db:d8:0e:62:4e:ee:ca:75:97:7c:5d:
63:54:cc:c4:98:aa:a0:06:1b:ab:d5:ec:a9:dd:5c:
c2:26:fd:f9:18:a1:f5:3e:53:85:35:10:03:97:f8:
c2:02:e2:db:f4:af:a2:09:d8:97:c5:d0:35:bf:53:
b8:ed:47:1d:28:14:0c:3f:15:6f:22:50:c4:43:b8:
b9:8f:99:40:d0:a7:df:ca:fd:53:de:24:50:42:2d:
b0:cf:b2:0d:ef:48:01:fa:75:9a:0e:1e:a7:ec:48:
a7:9b:ee:e0:92:f1:70:b3:c2:88:91:13:67:41:95:
fb:09:9f:c2:3a:36:fc:19:61:f7:d6:5d:08:7b:33:
c2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A2:60:05:7F:11:E7:4E:03:79:EA:3F:14:DF:87:98:1C:D1:31:07
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.16.0/24
51.241.110.0/24
188.221.13.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:55:45:33:79:76:13:14:8c:b1:da:01:23:e1:6e:01:57:39:
4f:3e:39:e5:8e:c3:5a:fa:0a:d7:e9:a2:67:bb:e0:b5:40:d4:
e3:f8:00:2c:26:3b:9d:81:e1:1d:e5:ad:d8:c6:41:ed:80:25:
e9:f8:0c:54:a5:94:da:74:28:4e:e0:2c:35:26:f7:15:48:6e:
7d:4e:f7:4a:94:04:f1:e4:ad:46:2b:5b:6a:98:a1:06:b8:d5:
ad:23:7f:78:48:f7:d2:ed:0f:00:e9:cb:e2:d7:4b:b6:28:7f:
a2:49:64:9a:27:73:15:ee:a8:61:58:08:4f:df:0f:7b:24:8e:
d1:cf:fc:7b:a2:84:1f:dd:73:1b:52:e4:f4:bb:93:8e:a5:6f:
a2:1c:8c:d7:64:ea:91:0f:74:02:9b:80:24:ce:7b:73:01:91:
17:4d:2a:cf:3c:d9:1e:90:c8:59:a5:25:d8:0a:ba:be:90:b4:
01:cb:ec:62:e8:c8:88:53:6e:a2:e1:8d:fc:82:2c:53:83:98:
98:e1:f2:8f:3d:7c:84:43:92:bb:5b:bb:50:0d:2d:3f:4d:88:
89:e3:67:22:e7:36:b6:88:38:22:8f:a1:f5:7b:ae:f6:b4:86:
3e:7e:c3:dc:a7:b4:4b:49:dc:7c:1a:71:01:74:8d:6e:1f:c1:
96:ee:22:55
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUBNTjRLRiu73mebIOOcQJw1xoVNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MDgwODI0MTZaFw0yNzA5MDcwODI5MTZaMDMxMTAvBgNV
BAMTKENGQTI2MDA1N0YxMUU3NEUwMzc5RUEzRjE0REY4Nzk4MUNEMTMxMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNvyNHJf5kCexaPrN/Wi3PSNu6
QyEWrHeoodSly7sxoKXv3nUQv61EWLPiK9L5FA7JJDktud8VbrlldWkA+H8RY09d
eo9Ah5t+oQkFk9ZJrRsDllAD22H/XzfneCTT6TWcflTr+RZ5G6/8JZL+pwVecDQN
Wuiaa7gjL/zb2A5iTu7KdZd8XWNUzMSYqqAGG6vV7KndXMIm/fkYofU+U4U1EAOX
+MIC4tv0r6IJ2JfF0DW/U7jtRx0oFAw/FW8iUMRDuLmPmUDQp9/K/VPeJFBCLbDP
sg3vSAH6dZoOHqfsSKeb7uCS8XCzwoiRE2dBlfsJn8I6NvwZYffWXQh7M8LLAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUz6JgBX8R504Deeo/FN+HmBzRMQcwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTQ3MjgxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAM5IQ
AwQAM/FuAwQAvN0NMA0GCSqGSIb3DQEBCwUAA4IBAQBuVUUzeXYTFIyx2gEj4W4B
VzlPPjnljsNa+grX6aJnu+C1QNTj+AAsJjudgeEd5a3YxkHtgCXp+AxUpZTadChO
4Cw1JvcVSG59TvdKlATx5K1GK1tqmKEGuNWtI394SPfS7Q8A6cvi10u2KH+iSWSa
J3MV7qhhWAhP3w97JI7Rz/x7ooQf3XMbUuT0u5OOpW+iHIzXZOqRD3QCm4Akzntz
AZEXTSrPPNkekMhZpSXYCrq+kLQBy+xi6MiIU26i4Y38gixTg5iY4fKPPXyEQ5K7
W7tQDS0/TYiJ42ci5za2iDgij6H1e672tIY+fsPcp7RLSdx8GnEBdI1uH8GW7iJV
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:35 2026 by rpki-client