Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS141892.roa
File: AS141892.roa (raw, json)
Hash identifier: JvlpUa3Tav9jSMoGWyQqDlY/602Qz45x5jau8Py7m2k=
Subject key identifier: 5C:14:47:C4:1A:1C:27:42:B0:95:FC:BD:37:E3:10:63:25:07:41:5F
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 27DB698C4DE3B5BB2FA485520985D39754A9AF49
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS141892.roa
Signing time: Fri 26 Jun 2026 08:08:38 +0000
ROA not before: Fri 26 Jun 2026 08:03:38 +0000
ROA not after: Fri 25 Jun 2027 08:08:38 +0000
asID: 141892
IP address blocks: 2a0f:85c1:3c6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:db:69:8c:4d:e3:b5:bb:2f:a4:85:52:09:85:d3:97:54:a9:af:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:38 2026 GMT
Not After : Jun 25 08:08:38 2027 GMT
Subject: CN=5C1447C41A1C2742B095FCBD37E310632507415F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:f9:46:3b:04:57:64:69:e9:ae:4d:6e:c9:
bc:57:48:87:dc:37:bd:7b:09:5e:18:1d:6b:1b:80:
29:a2:9b:63:62:6f:02:e0:c8:e7:8a:22:4e:aa:f9:
4e:68:a8:11:01:09:42:f7:f8:a7:25:91:12:9b:23:
38:dd:d5:a0:46:70:05:34:33:6a:a2:30:aa:ac:98:
1d:5c:a4:60:90:09:cf:db:09:b5:3f:85:ea:54:37:
64:8e:7b:c3:80:d4:ba:32:0d:cf:dd:ef:cc:e8:86:
f3:0f:18:e7:8d:d1:ea:ef:44:89:ed:df:58:d5:1a:
07:40:d1:90:15:81:9f:70:40:9f:81:1a:d1:70:ea:
51:19:38:9d:50:b0:53:50:5e:36:aa:62:f9:d4:12:
f8:29:bf:5c:c8:ea:e6:10:88:6a:08:01:36:1d:43:
69:9d:86:dd:1f:4f:a9:e7:2c:58:31:e8:06:a8:da:
dd:27:0b:e7:2e:7c:41:98:c6:06:f5:d6:0f:b7:62:
48:e8:2c:85:bd:3b:14:87:4f:de:c9:17:d8:50:b6:
da:92:3a:90:fc:00:08:77:6d:b0:65:9e:da:3d:13:
05:a5:60:7f:67:ff:65:43:82:fc:43:f0:66:de:48:
6f:68:16:b4:40:70:4f:06:f4:4d:06:5a:1e:e3:91:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:14:47:C4:1A:1C:27:42:B0:95:FC:BD:37:E3:10:63:25:07:41:5F
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS141892.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3c6::/48
Signature Algorithm: sha256WithRSAEncryption
35:0e:0e:d9:f1:4d:8b:42:9c:d9:ce:10:0e:4f:a2:eb:58:bc:
48:aa:38:7d:82:c2:e7:53:9e:d5:04:5a:aa:2f:77:a2:3f:93:
40:df:84:3d:fd:50:94:3b:2d:ff:91:c1:3d:65:a9:2c:e5:95:
53:96:4b:d7:75:fd:77:eb:c6:30:c5:b0:b9:b6:6d:d1:9c:54:
1b:1a:6d:50:9b:e4:30:42:7f:ad:56:12:b7:bc:df:44:08:49:
72:6d:08:c9:e4:f6:b8:23:77:e9:c9:cd:0c:c8:0b:e6:8e:95:
f9:d9:30:ba:f4:81:4c:fd:28:f9:b0:14:1a:8e:1d:99:57:8c:
72:6b:b1:a5:05:10:12:49:a5:0c:68:42:3b:9d:01:94:9f:04:
b7:9c:50:3d:97:fb:8a:d3:e4:2a:ea:08:71:f1:c6:b1:fd:10:
9e:59:69:0d:0a:45:95:34:19:a7:ec:bf:3c:a8:45:f6:f2:f1:
ef:f7:cd:9d:1d:17:aa:61:15:17:12:30:6f:28:4a:56:e3:7a:
4d:d4:cb:73:23:48:b8:ac:21:de:14:cf:95:e3:4b:ab:48:8b:
a3:2a:66:51:5c:5f:71:e3:c8:7e:16:43:31:92:66:ed:48:cf:
ab:93:4f:dd:9b:0b:85:b0:2a:5e:3f:8d:2a:bc:ef:7e:f0:59:
26:3f:2c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:36:15 2026 by rpki-client