Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS146813.roa
File: AS146813.roa (raw, json)
Hash identifier: LVguMh8xy1gnw2hGDBl8NoPW9DY69U24p+u3pctIEg0=
Subject key identifier: 29:A2:77:7E:53:9A:B7:EB:9B:49:89:25:67:62:1B:FF:26:47:6F:A8
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 474E6578289BA3A43B307CD52817E94FA586286E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS146813.roa
Signing time: Fri 25 Sep 2026 00:02:07 +0000
ROA not before: Thu 24 Sep 2026 23:57:07 +0000
ROA not after: Fri 24 Sep 2027 00:02:07 +0000
asID: 146813
IP address blocks: 5.182.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:4e:65:78:28:9b:a3:a4:3b:30:7c:d5:28:17:e9:4f:a5:86:28:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 24 23:57:07 2026 GMT
Not After : Sep 24 00:02:07 2027 GMT
Subject: CN=29A2777E539AB7EB9B49892567621BFF26476FA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:47:1f:b6:6a:f0:39:38:c6:09:d7:f2:f7:
ac:0c:71:f5:a3:aa:c9:4d:ec:db:3e:df:e6:2a:d3:
3b:34:a1:fc:c9:4f:79:83:b4:41:ab:a3:25:99:62:
52:5c:d6:14:a5:d5:be:34:f7:dd:18:1d:5b:ec:f6:
3c:38:95:db:8d:1d:aa:d7:c7:fe:87:92:3f:ea:6a:
03:79:e4:7f:64:cd:44:ed:64:5c:25:a5:48:f5:71:
c6:bb:91:bf:00:1e:83:16:bf:58:ce:cd:73:ad:e4:
e8:67:f5:0e:78:d4:22:a6:b6:07:1a:99:26:23:5c:
e4:a6:9f:b6:f1:57:25:99:65:d8:2a:84:f9:0c:0b:
74:f9:82:c6:ec:21:06:66:33:ab:b6:b3:79:f1:b2:
48:bc:c0:35:3a:9d:9c:98:da:d6:1c:75:ee:e5:80:
e9:55:48:ca:16:a7:c3:60:58:be:cb:3a:49:ef:ee:
1f:7a:d6:ff:d5:a3:75:69:dd:b3:8c:87:6a:2d:8e:
1e:24:c6:9b:79:2b:04:0d:43:a6:8c:3e:99:26:b2:
25:64:f7:63:df:dd:19:30:af:a7:f0:48:ab:76:78:
23:f3:09:84:ec:bd:2f:c1:63:55:03:4d:27:64:25:
3e:7a:41:81:b5:e0:79:43:97:35:17:94:30:38:29:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A2:77:7E:53:9A:B7:EB:9B:49:89:25:67:62:1B:FF:26:47:6F:A8
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS146813.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.110.0/24
Signature Algorithm: sha256WithRSAEncryption
01:0a:82:7d:5e:d3:bf:d9:77:b5:ff:65:db:d4:47:85:27:11:
0f:60:5f:b8:ba:b5:29:d1:20:4f:1e:31:72:1a:2e:1e:4e:8a:
da:99:fb:28:a5:fd:ef:fd:d1:c5:98:b0:23:5d:7b:68:a4:c9:
97:86:83:d0:5f:fd:b1:2c:99:f7:24:f0:c0:9e:46:da:72:c9:
25:53:15:d6:18:18:58:37:fc:1f:a3:b3:40:10:c4:66:d0:74:
3e:fc:84:e8:c3:68:f3:24:fb:74:ae:27:b3:64:30:a0:70:9b:
e7:7b:92:9c:32:99:6e:03:d1:44:b9:e8:ca:af:3a:cb:51:0b:
88:a9:26:19:01:9c:a6:a4:fd:1f:3a:aa:92:25:02:aa:e6:0f:
8b:52:15:e1:2d:bf:1f:bd:41:e9:8c:92:43:cb:b1:c7:4e:b0:
7a:d1:4a:f0:a9:fe:b6:d9:6d:c5:98:db:40:74:19:cd:b9:e4:
5e:75:20:c5:1e:ca:06:62:d0:2e:e5:4c:a8:df:d7:c7:7d:46:
96:3b:bf:02:93:85:26:83:80:95:bc:09:e9:ef:8d:d0:21:29:
f1:16:be:b9:08:8d:24:02:5d:bb:6e:9b:20:e5:5a:81:1d:06:
1a:30:38:22:89:e8:05:3b:62:47:30:0b:dd:9e:cf:47:10:b6:
a5:47:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:59:01 2026 by rpki-client