Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS142199.roa
File: AS142199.roa (raw, json)
Hash identifier: tNkEbxGzxApUy2XklN8muRAZHfWZuk+FYMNJkgAS/3c=
Subject key identifier: 09:AE:FE:95:4A:23:43:50:18:C8:9C:7A:25:B4:BA:6D:BC:DD:85:88
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 305F1154F5D9CBF620EDC1C65EDDAF34164683DA
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS142199.roa
Signing time: Fri 12 Jun 2026 15:43:46 +0000
ROA not before: Fri 12 Jun 2026 15:38:46 +0000
ROA not after: Fri 11 Jun 2027 15:43:46 +0000
asID: 142199
IP address blocks: 46.203.13.0/24 maxlen: 24
95.134.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:5f:11:54:f5:d9:cb:f6:20:ed:c1:c6:5e:dd:af:34:16:46:83:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 12 15:38:46 2026 GMT
Not After : Jun 11 15:43:46 2027 GMT
Subject: CN=09AEFE954A23435018C89C7A25B4BA6DBCDD8588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:60:1e:20:43:2e:59:dc:b4:eb:63:05:43:a6:
a9:1e:20:70:39:54:f2:8b:42:0a:eb:1b:45:c9:f5:
69:6b:64:3e:29:18:8b:03:5f:c7:10:d2:43:bf:82:
b5:40:4e:cb:bc:55:03:90:18:40:2b:e7:4d:0c:53:
4a:66:33:f1:8d:09:33:51:33:f0:4e:82:1d:83:b4:
de:c7:d2:6a:a7:6a:07:c7:b9:eb:76:d8:95:82:e9:
27:85:e8:e9:33:be:64:2b:97:e4:04:d8:7e:93:b8:
c5:8f:bb:a3:62:36:6e:4a:2b:23:3c:bc:04:b9:33:
49:2b:53:dd:91:98:2f:04:0c:e1:47:eb:b1:b2:ad:
ef:2b:33:e8:c2:63:3f:19:3e:f9:db:67:51:1d:ed:
02:d8:e3:1d:cc:37:36:94:13:e8:e3:0f:39:3b:a5:
e8:f7:96:46:6e:f7:a2:11:62:ad:20:07:e3:3a:fc:
2d:74:71:28:2f:53:91:27:e5:48:ff:a5:3d:40:5b:
f5:cf:6c:22:79:af:5e:8f:db:a3:cf:59:bc:40:71:
e2:79:cd:30:33:ab:3a:f3:d6:b0:77:73:fe:3a:41:
04:77:f7:55:57:a8:2c:8d:5b:79:dd:8d:91:d9:c2:
06:17:10:09:b4:29:2d:16:7c:fe:fb:b8:c0:20:4c:
08:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AE:FE:95:4A:23:43:50:18:C8:9C:7A:25:B4:BA:6D:BC:DD:85:88
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS142199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.13.0/24
95.134.48.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ff:89:69:6b:9d:af:78:f2:a2:61:aa:ae:3a:f9:f2:f0:d5:
6a:df:e7:45:d8:81:ad:bf:4f:e8:20:43:c7:2c:86:58:cb:a7:
bc:b4:c4:7d:34:45:b7:b2:87:68:12:9f:64:d6:75:ba:09:e4:
68:09:3b:43:57:44:1c:16:d1:0b:15:8b:42:3b:10:99:32:c9:
78:03:33:03:f6:24:67:0f:b3:d5:c9:03:54:db:30:fc:5d:fe:
21:9e:5e:fc:b9:a7:73:18:6f:07:b5:5e:b0:43:6f:c0:4f:bd:
17:57:b8:06:64:6b:3c:ca:d5:b7:d1:10:e1:76:59:d4:5c:16:
82:6e:7e:aa:35:3e:23:2d:13:03:76:8f:e1:97:c7:c2:6b:0e:
88:14:12:d4:aa:99:c0:e0:f8:a2:86:74:67:c4:42:db:18:ac:
bf:79:3e:86:58:7a:48:9f:7f:c8:1e:6f:8a:11:ca:ad:53:21:
ab:19:00:79:84:2b:91:10:d1:ab:1f:e9:d0:63:b9:cc:09:10:
3a:4e:4a:2a:89:13:c8:f0:ac:e8:85:b4:f3:c1:c2:c7:10:57:
77:00:65:3f:e8:2f:44:da:4e:ff:35:40:8a:61:27:22:94:2d:
89:d5:bd:61:c2:aa:b7:6f:ae:64:d3:ce:fc:e9:c2:16:fc:f8:
be:5a:62:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:00 2026 by rpki-client