Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: oH55gqtlYEEPNJBKEN9fyCkVDurtK1muz320h+L76Rw=
Subject key identifier: 93:D0:BB:F1:F7:9D:1C:C4:D5:48:A6:80:21:A0:FF:E5:97:B5:0F:35
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 38BF3A89812DE2BF350EB466753CF7172A3E8F19
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147281.roa
Signing time: Fri 13 Nov 2026 11:40:30 +0000
ROA not before: Fri 13 Nov 2026 11:35:30 +0000
ROA not after: Fri 12 Nov 2027 11:40:30 +0000
asID: 147281
IP address blocks: 162.141.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 07:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:bf:3a:89:81:2d:e2:bf:35:0e:b4:66:75:3c:f7:17:2a:3e:8f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 13 11:35:30 2026 GMT
Not After : Nov 12 11:40:30 2027 GMT
Subject: CN=93D0BBF1F79D1CC4D548A68021A0FFE597B50F35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:8d:61:1b:13:68:3f:95:ca:11:a9:0a:02:
b7:6e:a8:41:1c:b5:d6:dd:ec:09:94:ac:c5:5a:f5:
41:3f:24:1b:83:d4:cd:55:52:fb:fc:df:20:da:fd:
15:77:bc:4d:ab:45:56:42:5d:18:56:c1:f3:c8:94:
b3:50:6a:80:92:49:19:d8:a3:b6:2a:fe:9b:cf:d1:
45:5e:67:e8:b4:0f:44:1a:f8:df:60:fa:c8:56:b0:
35:01:84:b9:5c:3c:24:68:12:09:02:a0:ce:ba:7d:
9f:02:1f:8d:52:c8:72:7d:fe:1d:51:71:e3:b3:ff:
f4:57:14:2d:38:92:ec:b3:f6:28:c8:ab:13:46:27:
0b:aa:23:19:c8:11:34:57:fd:e5:f7:75:53:9d:5c:
0f:8a:a1:ea:e2:de:85:54:87:fc:fc:3c:cd:52:de:
39:e3:42:35:96:1b:45:cb:f7:ef:cf:c0:ac:7c:77:
36:67:bd:40:90:6b:f6:fe:46:c5:6a:7d:d6:ad:6a:
c2:69:18:05:2c:b9:2e:e9:76:9f:8e:1e:3f:23:95:
f4:89:97:e9:9f:a8:93:2b:66:f1:66:5e:5a:9e:32:
f9:f9:34:05:cc:1e:18:18:f0:1a:82:43:8d:32:d7:
ac:43:ed:6c:99:ce:05:5f:ad:ae:7c:99:1f:25:61:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D0:BB:F1:F7:9D:1C:C4:D5:48:A6:80:21:A0:FF:E5:97:B5:0F:35
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.82.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:81:ea:3d:2a:b5:d8:da:51:d1:39:63:39:00:cf:88:eb:9b:
fd:b3:a7:9a:26:e9:d5:c4:3a:ae:fa:87:21:f4:6c:26:cd:47:
75:eb:fd:7d:f8:d6:d1:3e:4a:bb:cb:8a:8d:25:a7:07:45:34:
9d:8d:6f:0f:ba:f1:09:fe:c1:42:45:d7:d6:35:4a:2d:03:8e:
9c:a2:a6:b7:fe:de:2e:2c:25:f6:b8:f8:80:15:2d:80:b0:59:
e4:61:7b:55:2c:e8:45:b9:ca:3a:2f:ef:6a:3c:dc:6d:05:54:
b6:48:9b:9c:d0:5b:ac:8c:4b:8b:db:28:8b:81:eb:aa:93:5a:
3e:5a:8b:08:40:9e:5b:d9:cb:f2:9c:32:6b:f7:9d:d0:44:b5:
f6:63:19:a8:f0:70:53:d8:56:f4:4c:72:6c:c3:04:b2:25:cb:
5d:af:fb:94:94:ac:2c:4a:e8:14:21:1f:3f:cc:cb:a5:b8:53:
4a:1b:55:ce:27:16:44:6f:f7:6c:27:21:8a:64:ba:f8:44:b9:
a7:63:2f:4d:7d:7b:ca:bd:c9:67:b8:87:a0:87:ef:42:cd:64:
12:e2:d1:4a:c5:74:89:20:af:66:9d:52:e9:ba:45:f8:fb:64:
b5:50:07:a6:47:f4:50:b6:c1:df:21:e2:74:71:c0:3f:ed:79:
1e:20:6a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:41:38 2026 by rpki-client