Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS142046.roa
File: AS142046.roa (raw, json)
Hash identifier: u3lF6LVleKaALhHuAWscUzmU6PHKcebrMYBeKvEpK1E=
Subject key identifier: AF:3C:D1:BD:1D:B5:41:4B:B0:6A:D3:64:9F:EF:65:B0:14:F4:72:77
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4B95C8C75A7B3C03850441869E41B03A3E8F2126
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS142046.roa
Signing time: Tue 21 Jul 2026 05:08:55 +0000
ROA not before: Tue 21 Jul 2026 05:03:55 +0000
ROA not after: Tue 20 Jul 2027 05:08:55 +0000
asID: 142046
IP address blocks: 2a0f:85c1:298::/48 maxlen: 48
2a0f:85c1:393::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:95:c8:c7:5a:7b:3c:03:85:04:41:86:9e:41:b0:3a:3e:8f:21:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 21 05:03:55 2026 GMT
Not After : Jul 20 05:08:55 2027 GMT
Subject: CN=AF3CD1BD1DB5414BB06AD3649FEF65B014F47277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:36:08:0f:74:90:85:91:c7:2b:00:85:35:21:
38:42:e6:b1:9c:ba:3a:d0:53:04:c4:cd:89:e6:ea:
b1:48:31:27:2e:51:cd:80:d5:71:41:4e:07:fc:57:
9e:30:82:ff:f6:3e:cb:89:d8:41:e3:0e:fc:2e:2c:
a8:8a:ef:46:ae:73:21:d3:a7:f5:26:b5:38:e5:6e:
29:58:e2:9d:54:3c:57:05:73:51:bc:8d:f5:04:9a:
d2:c2:6f:d7:d1:a4:c1:11:3e:4e:8c:39:26:95:ab:
81:5d:91:bc:d1:66:3e:29:f0:06:e1:24:0f:74:12:
fe:0e:df:fa:5a:41:cb:00:63:28:24:43:93:6b:11:
a2:1a:f3:50:54:40:8c:3b:db:58:1b:60:0f:d6:60:
e4:5a:41:20:46:89:92:da:bf:be:5c:2a:b1:5c:ba:
70:23:f1:65:fd:29:b4:15:45:49:35:bc:24:80:e3:
31:2d:02:78:24:27:f7:92:36:c9:64:bb:ef:f8:c6:
12:3e:ac:fa:10:18:7e:00:4a:8d:e5:54:df:30:6b:
0c:8a:aa:c8:e2:c0:df:93:90:76:68:3a:7a:44:57:
de:52:c6:a9:5c:04:01:63:e5:52:3d:7b:27:cd:da:
13:eb:13:f5:27:fe:b1:96:9b:da:05:83:68:f8:b5:
42:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3C:D1:BD:1D:B5:41:4B:B0:6A:D3:64:9F:EF:65:B0:14:F4:72:77
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS142046.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:298::/48
2a0f:85c1:393::/48
Signature Algorithm: sha256WithRSAEncryption
72:39:93:fb:0d:9d:87:a3:79:ff:19:8b:a9:56:69:ab:be:85:
45:ef:2a:56:a1:28:43:58:68:80:1b:87:7a:f1:e8:f9:04:ca:
90:e2:20:97:b1:94:0f:be:85:b2:85:20:31:5b:b7:a3:48:2a:
69:06:0f:0e:ce:24:82:0c:18:66:ab:60:34:68:b6:b8:78:44:
17:e5:85:98:8d:84:18:e0:13:0b:b0:02:d7:5a:4f:7a:67:56:
50:7c:03:36:90:a6:00:40:ea:4d:47:a0:ef:d5:07:e2:ab:29:
4a:b8:d3:7d:34:e3:1e:78:e6:f5:2f:aa:6a:3c:ad:72:bd:4c:
56:3b:9f:5d:1d:c3:f8:05:c3:ce:89:bd:39:87:f7:53:a8:a3:
c1:7b:f8:7b:46:76:44:f7:2e:e1:e5:8a:ff:0a:9a:44:54:dc:
67:73:3e:ca:20:d8:fa:0f:93:d9:02:5e:06:99:d9:28:1f:dc:
fa:ae:13:c6:f8:23:4b:15:e3:8f:56:70:39:57:96:e6:01:52:
06:3e:55:43:2e:0c:db:9c:58:d9:29:e5:6b:21:f7:fb:d8:99:
e2:08:9d:82:47:57:5f:5e:1e:7f:9a:30:0b:95:df:96:6f:a0:
43:ac:e5:74:bf:82:0c:71:f4:79:09:1f:1a:02:f8:fb:d5:71:
83:20:6c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:51 2026 by rpki-client