Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: 1OW/fyG+55UZQlGZ3k7MSINB/pYmR5bL51euG+R2Dk0=
Subject key identifier: 2F:C0:60:9D:B7:F9:DF:8D:91:31:AC:66:13:36:1C:1D:B9:4A:A5:76
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 574E6BF3AEE276FEBC53D674BBF66B5E85A361CF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147281.roa
Signing time: Tue 22 Sep 2026 07:01:34 +0000
ROA not before: Tue 22 Sep 2026 06:56:34 +0000
ROA not after: Tue 21 Sep 2027 07:01:34 +0000
asID: 147281
IP address blocks: 82.25.5.0/24 maxlen: 24
82.39.129.0/24 maxlen: 24
82.47.31.0/24 maxlen: 24
84.75.18.0/24 maxlen: 24
84.75.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:4e:6b:f3:ae:e2:76:fe:bc:53:d6:74:bb:f6:6b:5e:85:a3:61:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 22 06:56:34 2026 GMT
Not After : Sep 21 07:01:34 2027 GMT
Subject: CN=2FC0609DB7F9DF8D9131AC6613361C1DB94AA576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:f3:ad:3c:3e:48:40:79:1f:78:3a:fa:5c:
c6:5c:f8:c9:1c:ad:6b:44:9b:1b:f6:3f:ac:d3:a5:
49:13:ec:5d:2d:2d:ac:2e:e8:c3:71:a2:dd:39:ee:
c0:37:53:81:04:af:34:7f:51:bd:63:75:f7:c7:20:
8f:80:b6:78:be:94:fa:67:cb:af:4c:15:de:49:87:
ec:04:ec:1b:79:d0:6c:7c:9d:54:a6:cb:bc:f4:09:
8c:a5:4b:58:89:56:46:64:0a:8b:e5:9d:c3:82:9d:
c8:46:16:66:54:57:fd:2c:df:db:c1:ac:26:1d:8c:
b6:3b:d3:ba:65:f3:20:f0:8b:ca:10:01:b7:1b:c6:
ba:a7:87:f9:fd:d1:0b:d6:3c:28:70:f8:e0:96:ee:
c6:5d:60:d6:e4:9f:52:fa:57:63:03:de:f6:20:e6:
40:ed:a4:b1:82:d0:6a:97:ab:d0:30:03:39:0d:1c:
4e:e5:ff:08:8b:45:e4:a4:7d:e4:c5:7e:7e:94:f1:
d4:32:4a:26:82:a8:fe:66:a2:36:72:35:9b:40:a7:
bd:eb:5f:78:24:0c:68:fd:ff:d6:49:ed:6d:2c:37:
9e:3e:9e:a5:89:a3:45:a9:64:3a:87:12:02:09:f7:
dd:da:23:fc:54:a6:c9:0a:a2:9d:ea:aa:a9:cd:7f:
e8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C0:60:9D:B7:F9:DF:8D:91:31:AC:66:13:36:1C:1D:B9:4A:A5:76
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.5.0/24
82.39.129.0/24
82.47.31.0/24
84.75.18.0/24
84.75.53.0/24
Signature Algorithm: sha256WithRSAEncryption
45:59:00:28:87:c4:25:fc:06:5a:a1:4c:90:a7:fa:7b:df:3f:
78:8e:9e:99:22:cb:72:7e:bb:dc:40:50:94:13:24:61:2b:12:
4c:f3:a1:5e:d1:64:b9:b0:f4:09:e4:36:0a:2a:b9:10:74:c4:
11:90:05:b6:dc:78:58:6b:40:8e:6c:cb:51:44:54:61:e9:e5:
59:7b:92:19:6c:ba:98:ac:71:85:9f:c8:45:b5:5c:ee:1f:72:
10:8f:4a:d9:40:67:b7:10:6f:e0:b7:e7:f8:c5:92:21:f7:51:
96:8a:58:d3:59:55:81:d3:bb:55:6c:33:9f:cc:64:4d:94:c3:
e6:f0:f3:4c:cc:28:85:13:59:dc:88:e1:06:80:35:ce:3e:2b:
1b:4f:1e:06:f9:9d:01:e0:01:f2:eb:05:a9:7b:3b:24:ef:d0:
17:1d:71:bf:4d:d8:f4:76:84:61:4a:31:99:ab:b2:0b:59:40:
01:cf:ae:8e:04:94:42:8f:f5:53:4a:66:23:6b:ee:3a:b8:bf:
49:e9:2d:d1:9c:c1:bf:69:70:7f:8d:71:6e:70:a5:c3:d5:bb:
14:da:5a:fe:9b:b4:18:db:0b:33:66:fc:90:e5:1e:d4:a1:72:
4b:7b:1d:a6:59:fd:8c:c7:1a:44:ee:01:37:7a:04:93:31:78:
7f:1c:25:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:52:31 2026 by rpki-client