Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS147176.roa
File: AS147176.roa (raw, json)
Hash identifier: vV7m5Zhz8GPmS85XrxcRS8wCb7B2VMP29zVfgq99LAQ=
Subject key identifier: EB:F1:83:C9:4B:B0:94:A0:03:56:B2:99:85:82:5D:C6:8D:35:37:72
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 49975149EB56E39D1770823F3434632AD2A53B75
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS147176.roa
Signing time: Wed 08 Oct 2025 06:48:42 +0000
ROA not before: Wed 08 Oct 2025 06:43:42 +0000
ROA not after: Wed 07 Oct 2026 06:48:42 +0000
asID: 147176
IP address blocks: 191.96.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:97:51:49:eb:56:e3:9d:17:70:82:3f:34:34:63:2a:d2:a5:3b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 8 06:43:42 2025 GMT
Not After : Oct 7 06:48:42 2026 GMT
Subject: CN=EBF183C94BB094A00356B29985825DC68D353772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:b3:4f:f1:e0:ac:3f:4f:fb:80:2d:3d:d4:
38:69:52:13:00:65:ea:c5:3a:9d:91:d8:de:6d:ec:
79:60:f9:38:3b:a5:1e:6c:11:1e:70:08:48:79:78:
cf:a8:ff:8e:70:13:da:0a:f6:5d:65:4d:ed:59:e2:
7c:e6:86:e3:ae:d3:c4:cb:c7:2d:e6:fc:cf:b1:34:
f4:0f:da:10:9e:c9:46:f3:bc:df:37:bb:c3:01:10:
6f:ac:52:de:70:45:dd:d3:93:c2:3c:67:63:98:ba:
b6:be:0e:80:9d:15:a4:db:11:14:b6:27:15:56:17:
09:28:4f:fc:57:8d:7a:6b:5a:b7:f3:03:56:5e:4b:
d7:0b:4c:76:4e:3d:94:38:43:d8:1d:9f:60:78:4a:
38:e9:56:4a:e2:23:c3:f8:f4:5c:4c:a8:4f:1b:b7:
0a:f6:3e:77:ef:bd:3d:05:33:f0:cb:19:0a:d1:7a:
1a:f2:93:28:7d:5a:61:d6:6f:c2:70:59:8a:7d:71:
6f:4c:cb:50:cc:b9:2a:6b:fa:91:55:91:25:78:5f:
71:da:36:c9:d7:c5:e4:a0:b5:df:88:75:c8:7f:e0:
3b:6f:e8:13:99:08:f5:d0:5a:57:02:b0:b2:10:c6:
41:2a:5b:e6:3a:d3:ff:98:e6:75:6a:33:5b:c8:cb:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F1:83:C9:4B:B0:94:A0:03:56:B2:99:85:82:5D:C6:8D:35:37:72
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS147176.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.153.0/24
Signature Algorithm: sha256WithRSAEncryption
04:9f:e1:3a:59:85:6f:bd:e0:4e:60:54:3d:76:6c:49:de:fa:
b1:6d:40:c3:3a:b4:c8:92:42:58:de:fd:a5:88:0c:15:0f:52:
bc:fc:30:12:a2:39:91:3c:40:d5:19:dc:69:5c:27:b1:5d:91:
27:97:bd:d3:57:e8:fe:80:2f:ae:7a:a1:fb:63:7e:37:33:57:
7c:88:c3:df:b6:60:8e:28:2f:4b:ef:f0:24:22:a2:d0:b8:0b:
2b:88:6e:97:f1:43:51:e9:37:70:70:c6:df:c5:03:f4:3e:a8:
a5:a9:2c:89:d8:b4:89:5e:0c:4c:6d:e1:09:62:b7:9f:aa:c2:
ae:ca:01:f2:a0:ca:a7:fe:7e:38:52:5d:3e:92:fb:9d:fd:81:
d1:5a:92:d9:fa:d0:8b:3b:ac:0b:b5:9f:fb:9c:aa:9b:35:32:
1e:90:1d:64:a6:1d:0d:47:30:fe:dd:30:8b:a3:42:de:89:fb:
f7:32:8f:71:6e:9b:0c:1b:1c:4d:ec:28:76:01:b5:5b:ae:58:
ba:be:3a:e2:69:ba:e0:50:72:61:2d:48:5e:4a:5e:54:c5:fa:
c4:1c:c9:c1:d9:3f:3f:4a:9e:44:8e:64:00:c9:59:93:15:7b:
1a:2f:68:70:70:df:70:9a:e2:0e:f1:33:32:1c:ec:04:2a:4d:
0d:b9:79:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:59 2025 by rpki-client