Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: 710qNeBpIfN5CpAjo0TWufumLGLHnVpG+NpObwRmPmg=
Subject key identifier: B5:BF:F6:02:0F:74:91:75:41:1B:10:7E:3C:95:46:1F:0F:DD:A4:68
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 79905F6E20BAC331EFE34AF03D077E23B7A1F763
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147281.roa
Signing time: Tue 10 Nov 2026 02:37:09 +0000
ROA not before: Tue 10 Nov 2026 02:32:09 +0000
ROA not after: Tue 09 Nov 2027 02:37:09 +0000
asID: 147281
IP address blocks: 82.39.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:90:5f:6e:20:ba:c3:31:ef:e3:4a:f0:3d:07:7e:23:b7:a1:f7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 10 02:32:09 2026 GMT
Not After : Nov 9 02:37:09 2027 GMT
Subject: CN=B5BFF6020F749175411B107E3C95461F0FDDA468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:02:09:81:08:ed:e1:e0:f8:4f:e0:af:c4:9f:
69:a1:d2:96:6c:e4:02:19:e5:3f:9a:a6:5a:3f:82:
2d:1d:f6:a2:2d:d1:18:7c:07:0f:ef:a8:e2:a7:f6:
cf:ff:3f:b6:ad:b1:f0:85:93:0e:e3:e4:d7:8b:92:
20:0c:4b:5a:84:8a:2e:f3:5a:1b:91:37:5c:da:ee:
91:b9:af:aa:3b:14:1a:1a:b4:b4:b8:86:5f:bf:67:
c5:6e:f6:23:4a:b2:2e:84:d2:59:5e:36:d7:e9:34:
f2:31:b9:2d:37:81:c6:7a:1e:0b:bb:bd:98:9d:2c:
b9:71:00:01:b4:89:c9:5a:cc:df:1e:00:3c:5d:1b:
75:e9:ae:5a:30:b3:45:71:0b:b4:1f:a7:a4:ec:9b:
ae:f1:46:34:b8:92:e6:50:c9:36:c2:74:3d:1a:dc:
71:b4:86:f9:5d:c9:71:69:db:3b:b3:66:73:e8:9c:
1d:ec:a6:68:be:96:65:c5:8f:eb:ba:7b:75:94:75:
f8:22:af:31:41:12:e2:04:2d:0c:3a:e6:f5:1b:ae:
0c:36:03:cf:7e:be:7d:27:be:eb:9b:3c:9d:d0:68:
7c:af:27:f1:a6:38:a3:83:0b:9b:93:0f:88:ca:be:
db:35:cf:99:4f:58:d0:27:ff:c5:9b:87:f5:f6:fb:
a2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BF:F6:02:0F:74:91:75:41:1B:10:7E:3C:95:46:1F:0F:DD:A4:68
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.136.0/24
Signature Algorithm: sha256WithRSAEncryption
01:30:df:06:96:a7:76:63:aa:9a:68:ae:fd:eb:0a:59:4d:7d:
bb:57:9d:59:dc:45:24:e1:8d:c3:9a:6a:bd:c1:bb:30:c2:18:
ae:d2:4b:4d:79:bc:9a:20:40:9d:3d:42:2b:78:49:54:49:bb:
be:2c:86:26:3a:e9:bf:fa:1e:b2:44:93:cd:de:b5:63:17:47:
6e:57:8d:3a:68:31:61:17:4d:e0:0a:af:1e:e0:2c:d8:d0:21:
30:1b:8c:0c:1e:f6:dc:30:35:61:1b:84:2f:66:fc:0e:e8:f4:
fd:7d:20:a0:b0:a9:19:cb:80:91:5b:7e:68:36:da:05:ec:5a:
28:73:10:5a:ba:35:72:21:fe:bf:4d:14:3e:57:79:cd:e6:1b:
a2:4b:3c:2a:2b:63:a9:c0:7d:0f:c8:a9:31:32:2a:54:e8:a6:
80:74:a8:bb:b7:8b:53:55:ec:fd:44:68:f0:68:47:73:6d:1a:
c4:ca:3e:59:a7:3f:17:f0:7d:7f:24:4b:69:be:b3:9a:61:f6:
a1:aa:7c:a9:b0:f8:69:fb:19:51:f2:27:6e:b6:ca:5d:06:c7:
de:82:b7:55:a6:70:59:7a:6f:e4:4f:39:bc:9c:e7:26:9c:fe:
e8:fa:d6:07:7f:7b:e1:1b:33:13:ed:3d:bd:e8:f0:26:0b:22:
7e:7a:1e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 23:39:33 2026 by rpki-client