Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS141323.roa
File: AS141323.roa (raw, json)
Hash identifier: OOUBoi5wpGNm3ITOmkA3H+aP1yDJkA5T+5aN/8Z4GvM=
Subject key identifier: 74:80:67:C3:12:30:B3:4C:A2:82:99:45:85:05:15:09:3A:E9:12:44
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0C48B82D3774EE1AFBEF43D040873C00A78CCB6D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS141323.roa
Signing time: Wed 23 Sep 2026 02:17:47 +0000
ROA not before: Wed 23 Sep 2026 02:12:47 +0000
ROA not after: Wed 22 Sep 2027 02:17:47 +0000
asID: 141323
IP address blocks: 51.146.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:48:b8:2d:37:74:ee:1a:fb:ef:43:d0:40:87:3c:00:a7:8c:cb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 23 02:12:47 2026 GMT
Not After : Sep 22 02:17:47 2027 GMT
Subject: CN=748067C31230B34CA2829945850515093AE91244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:35:d9:1a:35:0c:e0:a3:29:30:07:a4:85:26:
fb:c3:49:63:ae:6a:25:31:cf:0d:85:57:61:89:0f:
3e:f4:d1:f6:48:8a:35:64:df:e9:90:bc:db:9d:72:
18:f3:d6:23:04:70:a6:60:f8:6d:8a:55:3c:94:7f:
04:79:b9:94:7a:2e:56:f2:41:e7:17:89:4a:76:ee:
17:ff:f0:4e:62:36:b0:93:26:68:c3:28:26:d5:59:
55:0f:fd:5b:d7:0c:79:52:69:4c:ab:a0:74:b0:5b:
04:90:23:11:54:b6:4d:58:5b:fc:41:ad:0e:c0:55:
0b:04:f4:02:4c:c0:d0:be:2f:02:94:a8:78:0c:07:
ca:6a:b7:e8:d1:d0:21:ae:77:fc:c3:31:bf:e6:64:
90:5b:bc:c8:d7:cc:21:55:ab:5f:48:5b:4e:ba:d5:
1a:df:59:e4:fd:81:1c:d7:ff:7a:b6:71:0f:6a:17:
5e:51:8e:a5:db:24:fe:eb:7e:1e:34:82:65:94:d1:
78:c3:1f:ba:95:84:3e:56:e2:69:52:b4:f4:48:8c:
a8:75:02:d2:f2:b0:c9:27:0e:50:8b:b4:8f:6f:b3:
e3:a0:dc:ac:dc:f0:f4:0c:e7:3f:ce:c3:1b:07:ef:
ff:b9:01:f3:78:1b:ae:c7:5e:89:c0:9e:f3:20:4b:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:80:67:C3:12:30:B3:4C:A2:82:99:45:85:05:15:09:3A:E9:12:44
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS141323.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.132.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:a2:d5:9c:ed:e5:d7:a1:19:f2:23:fc:9d:3a:53:0c:8f:78:
6a:e1:f5:f9:ca:bf:30:8f:20:70:07:89:82:2e:ab:90:28:de:
c2:ec:3f:51:00:f8:35:d3:a3:1c:3e:a3:f6:2a:41:1a:0e:d0:
d3:73:55:52:d5:27:ca:58:a9:bd:21:c2:9d:0c:4f:38:2c:19:
cd:16:5f:6e:d6:8e:d1:15:46:de:db:6c:4a:8e:97:18:fb:8a:
bc:b2:fb:24:0c:e9:e4:83:18:23:bd:11:4d:57:7e:b8:0e:51:
ee:50:89:0a:aa:44:ee:e9:2d:4b:9c:26:05:a9:dc:f9:f9:2f:
4f:47:f4:b0:68:04:43:fe:aa:4b:00:94:23:32:20:bd:41:df:
a2:98:b4:27:c6:b4:44:97:1b:4d:00:c3:81:7b:a3:b3:c1:5f:
df:98:7a:00:7b:9a:49:36:31:b8:29:2d:d4:65:be:fc:4d:17:
d6:06:85:ef:27:0f:0c:1b:0d:8c:8e:fc:19:c7:76:cb:fe:3d:
3a:34:95:03:92:9f:53:f4:a8:02:16:53:c1:68:85:57:8a:ee:
68:3e:85:d2:94:3d:ca:a5:05:e2:33:67:35:f2:75:e7:92:92:
7e:b9:aa:c8:8b:fe:bd:dc:18:f0:ff:d0:03:f9:ae:d0:17:d4:
61:7e:76:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:59:24 2026 by rpki-client