Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS20141.roa
File: AS20141.roa (raw, json)
Hash identifier: XOufmeT+PjjOyA5MQQQNbx0juiago41BTPZl6yL84Ag=
Subject key identifier: 7A:09:A5:06:37:24:D6:12:02:0B:DA:E5:FB:1C:E6:39:1E:3B:15:14
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 2A67AF2EB60BDF2CA378ABE079219485A94BB668
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS20141.roa
Signing time: Tue 17 Mar 2026 18:46:48 +0000
ROA not before: Tue 17 Mar 2026 18:41:48 +0000
ROA not after: Tue 16 Mar 2027 18:46:48 +0000
asID: 20141
IP address blocks: 45.149.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:67:af:2e:b6:0b:df:2c:a3:78:ab:e0:79:21:94:85:a9:4b:b6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 17 18:41:48 2026 GMT
Not After : Mar 16 18:46:48 2027 GMT
Subject: CN=7A09A5063724D612020BDAE5FB1CE6391E3B1514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:ba:eb:c6:58:4e:47:b6:70:9c:e0:db:76:
2e:a7:4c:8a:21:3a:0c:14:34:e4:e0:7a:a7:2b:62:
39:0a:57:b3:20:4b:48:88:68:31:d8:65:3c:44:2e:
a1:2a:cc:45:dd:54:6a:af:99:13:6e:31:e5:44:5d:
2c:0e:d5:58:06:d5:9d:47:da:21:b4:fd:08:36:44:
57:b2:5d:41:e7:4a:2e:9a:c3:29:90:e0:1c:ab:2b:
c5:64:87:06:e2:7c:06:a7:c9:98:44:05:d0:3c:d7:
ad:04:2b:6d:ea:3c:87:a1:6e:68:73:41:40:a2:bc:
b5:7e:4d:2d:18:92:4e:9c:7a:99:6f:d0:db:da:38:
a6:ec:7a:b5:d3:43:8b:93:11:71:a5:c5:dc:f2:9a:
c0:4f:56:31:0e:c7:d8:1b:77:53:67:90:23:82:6d:
7f:7c:12:4b:90:dd:eb:53:65:b4:c6:93:80:e5:21:
4f:e8:4d:bd:ca:84:87:a2:1e:7f:78:e6:9d:b4:fb:
83:5a:26:06:77:6b:c8:e7:80:95:05:d0:9d:4f:bb:
b1:f7:58:63:9e:a0:90:b8:c9:29:e9:30:e7:28:8b:
92:73:72:37:ca:43:5a:96:c2:cc:38:1b:20:be:03:
f8:06:54:99:b5:04:32:f3:65:e9:3b:08:c5:de:16:
eb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:09:A5:06:37:24:D6:12:02:0B:DA:E5:FB:1C:E6:39:1E:3B:15:14
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS20141.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.103.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:bd:d5:e5:50:5c:2e:06:0f:0b:45:5d:0f:f9:41:a3:ed:43:
d2:f6:02:16:1f:5d:7e:2c:2c:95:c6:98:50:1a:29:5a:57:33:
76:46:50:bd:b0:b4:7d:ea:56:a6:d7:ac:8e:31:df:2f:bb:ef:
57:22:75:c1:c0:6b:71:a0:d5:e7:66:ce:bb:3c:ec:26:74:f2:
18:2b:87:c4:6c:a1:77:d8:66:b2:68:72:da:89:a1:14:9b:b5:
09:1d:f1:75:07:54:a7:d9:a3:a3:a5:da:71:20:de:f3:02:11:
39:61:2b:71:73:f1:b6:43:c1:fe:c9:44:a2:f0:55:a5:d6:3e:
b5:78:bf:84:ee:7a:aa:a8:2c:c2:0a:c7:5b:eb:09:67:1a:39:
ba:f0:ab:4f:e0:f8:89:76:2b:7d:82:90:71:ea:38:93:fb:98:
e9:3a:bf:1c:df:73:3d:1f:3a:26:00:8e:b6:6d:ec:0e:0c:3e:
d0:33:85:01:b0:1b:df:aa:e2:1a:ca:83:17:d3:c9:80:8f:1f:
80:40:74:dc:b9:0d:74:53:47:22:5d:d5:40:d7:2b:10:56:a3:
cc:04:dd:bc:2d:b2:38:23:a3:63:50:19:de:6f:b4:ec:ca:d5:
88:06:54:c4:3b:6a:27:03:95:91:09:27:76:bf:1e:78:92:fd:
a4:bf:d6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:13:48 2026 by rpki-client