Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS142354.roa
File: AS142354.roa (raw, json)
Hash identifier: rNGNn8DI9frgSjksMvz2yzTXNhDPsKRB1ZBgbcCANmo=
Subject key identifier: 2E:4C:30:B9:EF:23:1F:35:61:5E:BA:0C:72:67:FA:B6:20:12:00:99
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 4DAF77277038671EF5867E57B48067ACFC3E0075
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS142354.roa
Signing time: Fri 03 Oct 2025 15:23:25 +0000
ROA not before: Fri 03 Oct 2025 15:18:25 +0000
ROA not after: Fri 02 Oct 2026 15:23:25 +0000
asID: 142354
IP address blocks: 45.157.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:af:77:27:70:38:67:1e:f5:86:7e:57:b4:80:67:ac:fc:3e:00:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 3 15:18:25 2025 GMT
Not After : Oct 2 15:23:25 2026 GMT
Subject: CN=2E4C30B9EF231F35615EBA0C7267FAB620120099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:0b:ec:c3:71:ad:0a:bc:cc:fe:3d:9d:a2:
08:f9:8d:96:2d:39:45:b8:fb:a5:c5:5e:4a:90:c7:
b1:0f:0f:1f:52:81:e8:5b:9e:ae:52:a4:31:73:c5:
fc:95:96:c9:89:ef:06:85:97:48:dc:0a:a4:8b:50:
2c:ec:82:66:b2:f0:c1:5b:f1:1a:c0:b7:47:ea:51:
4c:29:3e:8c:8a:cd:9e:90:05:43:6b:39:a7:8e:c6:
f3:49:bf:4d:40:d7:6a:34:a1:fb:9f:65:c0:14:d3:
5a:cf:79:87:0b:ad:0d:d2:f2:6e:b3:0d:0d:81:5a:
5f:cf:bf:87:f3:83:88:64:12:b5:7c:ab:0d:3a:ce:
05:d2:86:71:c1:85:73:86:52:3b:48:b3:bc:8c:09:
58:a1:00:63:0b:97:49:bb:82:bf:f5:3d:fe:fa:5a:
36:dd:29:b9:a5:05:8a:84:24:83:45:fe:42:35:dd:
20:68:8d:0a:16:eb:6b:3b:39:04:08:e1:fc:7a:c2:
fe:68:b1:12:6e:7c:d1:59:08:7b:1a:8b:e9:ed:a9:
f9:07:4a:9a:83:0a:1d:f0:06:b9:1d:e3:60:91:75:
3e:5c:ff:e9:86:a1:6d:61:81:3c:a2:96:a7:32:09:
e1:d6:48:34:3c:fc:1c:80:ae:26:21:e2:a8:fb:e0:
1d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4C:30:B9:EF:23:1F:35:61:5E:BA:0C:72:67:FA:B6:20:12:00:99
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS142354.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.16.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:9a:52:bd:c9:04:7b:9a:5f:41:d1:97:95:53:9b:2f:96:64:
67:ee:57:3c:4c:02:b6:57:8b:ab:59:e4:92:60:2f:16:48:bb:
1a:1d:b2:cb:07:e6:82:7d:bb:5d:f3:5e:33:e3:35:1f:d1:10:
78:94:39:fd:65:6d:d0:04:f6:26:f0:78:1e:5b:c5:0c:ca:26:
1b:4a:17:34:87:0c:98:39:99:08:c7:68:df:e7:82:86:bd:b5:
58:a2:e0:04:65:f8:12:5f:60:d2:e4:80:fc:c4:49:06:64:e9:
23:a5:97:b4:3b:00:09:83:dd:ca:04:2e:b9:b0:0a:19:3b:f9:
af:13:94:a5:a8:9f:d1:df:81:f3:87:ea:8b:78:b1:41:86:88:
99:1c:b9:76:81:6c:f6:35:64:40:88:a3:00:e8:bc:95:5b:aa:
d4:99:d3:e3:94:94:e0:51:fd:a2:9d:ae:a3:ef:8a:7e:59:09:
10:3e:a4:e7:c1:cf:0c:be:42:a1:53:1c:e5:38:f3:f0:8f:df:
43:68:be:08:ca:16:44:27:f1:c6:33:c0:75:04:74:4d:77:ca:
9a:ab:d1:84:30:a9:72:4f:53:94:b6:fa:12:3d:10:8d:8c:b7:
cc:65:66:b4:89:ee:5c:29:0f:a3:1d:f5:1b:5c:9a:95:3b:65:
23:02:57:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:26:50 2025 by rpki-client