Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS140641.roa
File: AS140641.roa (raw, json)
Hash identifier: gTATRzSMYUqvhFF3P9T6zBY1SH8RI77HiaS2H0/YtDg=
Subject key identifier: D1:F6:A6:F9:6E:0E:58:78:85:0C:80:B5:BC:88:F7:69:2A:3D:BB:10
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 22700A219A199B1076B65D2A517158EF9ED1D410
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS140641.roa
Signing time: Fri 06 Nov 2026 15:49:41 +0000
ROA not before: Fri 06 Nov 2026 15:44:41 +0000
ROA not after: Fri 05 Nov 2027 15:49:41 +0000
asID: 140641
IP address blocks: 82.27.1.0/24 maxlen: 24
82.39.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:70:0a:21:9a:19:9b:10:76:b6:5d:2a:51:71:58:ef:9e:d1:d4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 6 15:44:41 2026 GMT
Not After : Nov 5 15:49:41 2027 GMT
Subject: CN=D1F6A6F96E0E5878850C80B5BC88F7692A3DBB10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:12:f7:53:fd:d5:f1:e0:38:07:1d:16:dc:
1e:f8:02:32:7b:c8:39:63:33:b4:55:ff:f8:55:fb:
ff:7f:c5:ef:b4:0c:85:2b:80:fa:76:75:1a:28:b4:
03:3b:d6:a2:63:07:fe:5f:de:51:34:80:b0:fb:54:
c0:a8:5c:5e:73:26:b3:74:14:bd:b1:30:46:f0:2f:
35:f9:65:35:62:5f:12:02:30:5f:99:d4:50:2a:98:
74:0a:44:d4:d4:54:cc:af:e8:ad:a0:ec:60:1b:80:
69:f5:38:c0:67:63:e9:90:f4:90:4a:5e:c9:71:ae:
f4:1f:44:bd:54:08:55:fe:7d:0d:02:73:74:eb:b2:
48:b6:82:7f:38:81:77:9c:31:3b:16:81:2a:1d:90:
91:33:eb:aa:6a:e3:85:34:e0:6b:90:49:7e:b4:ff:
0d:67:69:40:e8:44:e7:87:ec:c8:05:15:4b:85:5d:
a5:0f:b0:f7:ef:e9:87:81:b3:eb:f8:5b:e8:9e:9f:
dc:7c:23:f1:85:0f:3b:6a:b2:16:10:7f:84:10:07:
3a:01:e0:27:45:00:3b:b2:e9:09:ce:b7:c6:97:78:
5e:ad:74:1d:76:39:df:0b:8f:a2:2c:10:4c:fb:37:
70:be:bb:fa:9c:69:d0:43:97:9c:0f:d3:22:65:5f:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F6:A6:F9:6E:0E:58:78:85:0C:80:B5:BC:88:F7:69:2A:3D:BB:10
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS140641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.1.0/24
82.39.161.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f7:5f:b5:92:12:ad:81:0a:86:f1:93:d4:68:48:6e:03:80:
b4:8c:7c:04:06:94:01:04:4f:7a:3e:2f:a2:85:e1:5b:58:3d:
b5:da:0d:b5:83:ea:9a:19:6a:35:ce:5b:61:07:93:ab:4d:40:
8f:0f:a0:9c:9c:94:1f:bd:95:83:3b:ba:7b:59:08:10:9b:70:
52:6f:a8:87:c4:e5:23:02:a8:2f:53:85:93:94:02:cc:0e:fd:
d4:75:9e:9b:af:e8:53:4f:5f:5a:ab:7c:b6:9e:0b:06:c3:2e:
03:58:e3:5e:c9:87:54:43:fe:38:53:20:43:62:22:e5:59:ec:
48:bf:0a:d2:a7:1e:88:dc:73:07:14:ed:18:37:84:02:15:16:
4d:01:11:b4:80:44:92:a4:60:29:34:41:1e:12:f8:fc:b0:03:
c5:7b:20:3c:0a:8e:cf:9a:d9:00:ee:9f:6b:d9:93:be:17:d2:
1d:54:23:74:23:4d:d4:4e:dd:74:a9:38:11:00:0c:88:68:5a:
01:01:16:73:5f:db:6c:a1:5e:f5:9c:3a:21:32:e1:ea:9d:ec:
4b:a8:82:f5:8d:53:a0:62:d5:b5:71:a1:8d:3c:44:85:79:4f:
94:66:a1:b0:f5:b9:97:58:12:ae:03:30:2b:7d:28:21:86:76:
32:f3:9a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:06:37 2026 by rpki-client