Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS146943.roa
File: AS146943.roa (raw, json)
Hash identifier: bbXPz2nhfB8GQCdtUvdCYYF54yG0jI6Y1YMdRy8VeSs=
Subject key identifier: D7:FC:15:BF:BD:8B:7B:86:40:4F:FA:CB:34:E7:62:2A:D0:44:5D:40
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0EBF2AEDA505AFD7409353AA982111D788397F87
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS146943.roa
Signing time: Mon 27 Jul 2026 09:22:47 +0000
ROA not before: Mon 27 Jul 2026 09:17:47 +0000
ROA not after: Mon 26 Jul 2027 09:22:47 +0000
asID: 146943
IP address blocks: 95.135.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:bf:2a:ed:a5:05:af:d7:40:93:53:aa:98:21:11:d7:88:39:7f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 27 09:17:47 2026 GMT
Not After : Jul 26 09:22:47 2027 GMT
Subject: CN=D7FC15BFBD8B7B86404FFACB34E7622AD0445D40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:20:ff:32:88:fb:01:fd:0d:a5:0d:a5:09:d2:
63:43:48:cf:67:5c:0f:14:e2:2c:7d:99:36:d1:17:
4d:92:fb:d3:f6:9a:5a:50:2f:ec:24:b0:fc:88:f4:
fb:47:37:bf:21:c8:b0:97:e0:23:ac:4b:da:cb:51:
0c:d5:5d:c0:64:6f:49:1f:e6:7c:06:5c:6f:64:09:
b3:50:af:fc:f5:e0:d2:c4:c1:16:5f:21:8a:70:c6:
2c:82:aa:6c:82:33:74:34:1e:4e:47:c7:d4:d1:bf:
28:e4:0e:34:39:34:b7:4f:6e:b2:da:2c:98:f1:7f:
04:48:c2:78:f0:b5:5a:78:53:07:99:d3:1f:a1:2c:
b3:17:c0:69:e7:61:aa:67:47:39:cb:86:1a:94:15:
78:27:76:28:60:54:8c:44:73:c7:bc:b1:27:87:2a:
05:f9:6a:b8:d8:ab:f6:b4:27:e1:fb:73:59:45:c5:
f7:90:7d:f7:73:44:be:5d:a3:4f:9a:ee:52:64:a7:
0e:09:a0:e1:17:27:ee:e8:8b:fc:27:93:16:b9:c6:
35:93:ce:73:a7:9d:e6:12:0f:e0:87:1b:fc:f0:6a:
52:9a:e7:6e:43:58:b5:a7:6f:32:50:02:ed:b1:6c:
7a:78:79:8f:9d:f1:85:05:0d:01:82:ca:73:3e:55:
9a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FC:15:BF:BD:8B:7B:86:40:4F:FA:CB:34:E7:62:2A:D0:44:5D:40
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS146943.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.254.0/24
Signature Algorithm: sha256WithRSAEncryption
79:5c:71:63:d2:4d:84:bb:a0:55:9c:91:52:5a:ed:d3:88:50:
0d:c8:ed:65:16:07:50:e8:b7:1b:48:66:ce:61:1f:25:2d:44:
ee:5e:61:a5:38:7b:d7:e7:3a:ec:dd:69:1a:7b:38:6d:e3:df:
dd:9a:91:3e:dd:af:1e:f0:53:9a:33:0b:1d:f0:89:2e:5f:9a:
90:c9:e3:0f:12:f0:5c:af:8c:91:c9:09:70:63:b2:d4:18:12:
0f:b2:91:28:fe:56:5f:48:e3:83:c4:d4:10:ec:56:54:f9:86:
9d:12:c4:8b:85:01:a2:8e:93:ae:de:23:41:92:50:51:e4:50:
1b:49:e9:46:5d:3a:84:28:b3:a8:fd:f3:9b:4b:5a:48:41:01:
28:4b:fd:46:25:17:9c:9c:6c:74:80:53:5a:d0:88:f4:ac:cd:
88:79:2f:83:8c:96:5b:18:80:69:5d:60:b6:da:e6:cb:eb:a1:
43:54:9f:8e:79:70:66:d4:3a:9d:11:04:db:c2:c4:15:2b:c3:
4e:dd:b8:af:4d:11:fe:31:15:d2:08:80:43:b5:fc:4b:70:d7:
61:e0:e1:95:30:64:96:4f:c5:ef:34:93:cc:0f:ce:c0:34:1c:
ca:0b:be:8b:ad:fc:63:4b:fe:cd:a4:51:dc:4b:15:21:4c:d8:
a1:c3:5c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:00:09 2026 by rpki-client