Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS146943.roa
File: AS146943.roa (raw, json)
Hash identifier: 4K/GLL6jrU4ZmySg2Gon22oxNKeXwo3l8GyvfUJ7G3c=
Subject key identifier: 93:BD:41:85:8D:47:39:FA:0D:2F:6E:D5:9D:07:2B:8D:DF:28:4D:36
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5FFF995A38F3835A73BCD448C73AD46011850393
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS146943.roa
Signing time: Mon 09 Nov 2026 14:49:41 +0000
ROA not before: Mon 09 Nov 2026 14:44:41 +0000
ROA not after: Mon 08 Nov 2027 14:49:41 +0000
asID: 146943
IP address blocks: 191.101.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:ff:99:5a:38:f3:83:5a:73:bc:d4:48:c7:3a:d4:60:11:85:03:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 9 14:44:41 2026 GMT
Not After : Nov 8 14:49:41 2027 GMT
Subject: CN=93BD41858D4739FA0D2F6ED59D072B8DDF284D36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:7a:bd:4c:02:a7:4f:df:39:26:af:c8:61:
ba:f2:0a:43:3e:b5:5c:07:27:28:b5:42:99:4b:d5:
1b:72:32:c6:28:7f:10:10:a5:77:f9:0a:34:b3:fd:
a6:01:5a:1d:fc:cb:1b:1b:5c:e7:85:77:aa:78:69:
42:00:b9:50:36:64:b7:03:96:17:1c:d8:26:2d:61:
1e:13:11:60:e6:b0:93:e0:a3:f1:96:2d:df:2c:c6:
b5:d9:bc:fe:f2:e7:47:cf:ce:a0:93:f4:dc:7a:dd:
2c:62:e6:b4:e8:95:67:97:3a:e8:90:9d:b2:43:1c:
04:13:a6:fb:b0:ed:36:a6:b5:c4:85:88:a1:26:ef:
74:67:7b:2e:3d:0b:2c:b7:6d:8f:d5:bd:12:a1:17:
f4:2f:f2:4a:06:77:36:2d:be:6c:90:0b:69:3a:76:
a0:fe:d7:9f:0c:30:f8:80:2f:7c:3d:b0:3c:4e:4c:
09:97:cc:a7:d5:53:b1:bc:5e:af:04:b6:82:2c:eb:
59:18:ab:2f:2f:b2:77:d0:ab:b0:8a:25:09:5a:11:
5c:f4:35:6c:f1:4e:32:70:dc:87:23:8a:7a:ee:55:
c9:82:8e:61:43:72:1e:98:16:b2:03:ee:20:e8:81:
a8:6a:5e:5b:ff:ab:6d:c0:28:9c:bd:4f:ba:d6:a0:
88:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BD:41:85:8D:47:39:FA:0D:2F:6E:D5:9D:07:2B:8D:DF:28:4D:36
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS146943.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.187.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:78:3f:e2:0c:07:77:65:0f:75:f2:ee:c3:98:83:c4:2f:3b:
69:cc:a2:46:28:99:6c:88:bd:31:e5:b9:43:24:55:a2:1f:24:
91:09:a0:c6:8c:10:7f:d2:b2:78:67:97:c7:ed:95:a3:71:dc:
a7:b2:5e:06:58:b0:7e:31:79:7c:3b:c7:38:e8:9b:a3:cb:c0:
b8:44:b8:50:02:df:42:c4:21:e3:67:55:9d:2a:d3:87:4f:af:
f2:11:ba:42:5f:9f:a9:ad:5a:5e:37:09:98:18:cf:6d:35:a9:
c3:8a:2f:ec:be:4a:21:62:56:2b:dc:c5:bd:d4:79:73:83:18:
8d:ec:9f:a8:4a:db:5e:9b:22:ee:12:9d:0b:ed:e8:97:76:54:
d1:1d:1b:c8:48:13:de:c6:4f:19:39:0a:62:60:0d:1d:6c:0b:
f9:9b:6d:48:07:87:cc:99:40:74:37:6c:2b:3f:26:f7:49:7b:
7d:15:78:f9:8d:a1:64:44:00:f6:bb:34:31:d3:0a:2c:1b:57:
6f:15:bb:dc:6d:6b:19:67:ba:79:5b:6a:11:5a:d6:62:3a:fa:
16:3f:96:3f:fd:49:7c:74:ad:8c:72:21:01:e7:e1:74:ed:e7:
9f:69:59:15:d3:cb:73:f0:74:7e:f5:45:02:e1:03:34:e3:62:
0a:76:41:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:48:12 2026 by rpki-client