Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS142433.roa
File: AS142433.roa (raw, json)
Hash identifier: WTuRA/BRupAE7BxrhnN9g3LzDCNxY5r80dzBMXGAMsk=
Subject key identifier: 0C:E2:7B:7B:2F:63:B8:B2:6A:59:6F:EB:99:1B:B8:DC:D8:BB:3E:02
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3D0B61D6379391603D44AB847EB156CCEA021CAB
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS142433.roa
Signing time: Fri 08 May 2026 03:58:07 +0000
ROA not before: Fri 08 May 2026 03:53:07 +0000
ROA not after: Fri 07 May 2027 03:58:07 +0000
asID: 142433
IP address blocks: 78.105.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:0b:61:d6:37:93:91:60:3d:44:ab:84:7e:b1:56:cc:ea:02:1c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 8 03:53:07 2026 GMT
Not After : May 7 03:58:07 2027 GMT
Subject: CN=0CE27B7B2F63B8B26A596FEB991BB8DCD8BB3E02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:4e:b7:3b:ff:f0:82:f0:37:5d:28:d9:d1:
b3:ec:a7:13:cf:2a:3e:02:68:82:cc:8b:c9:f6:85:
34:71:eb:39:e1:2b:df:86:e0:b4:7d:9c:70:8c:7a:
d2:95:95:45:44:44:07:87:cd:0b:e0:7e:3c:96:04:
74:d2:d5:8b:28:42:a9:80:f4:26:e1:ff:59:f8:df:
41:63:7e:36:5d:c2:67:4f:7e:d9:22:98:a9:63:72:
ea:3f:30:95:8c:ca:fb:ec:c9:55:93:dc:48:b2:e5:
61:87:aa:79:e2:b5:e0:63:4c:86:f7:db:4e:19:60:
d4:4b:18:26:af:a8:c3:f5:39:92:34:e9:c4:0f:f4:
b9:05:a8:f5:82:13:d6:67:2b:17:ee:38:d4:a6:7f:
50:4d:1b:55:ca:c5:31:34:f6:b4:79:81:6f:c1:b9:
17:30:e3:bf:06:50:f7:b9:a9:d5:22:da:5f:08:bf:
a7:33:5e:56:77:e6:4f:f5:78:70:4c:44:05:65:c6:
ef:36:d8:75:44:2f:04:a8:85:64:07:17:0b:71:e5:
fd:79:19:63:27:27:4c:a6:af:f6:56:a2:4a:85:07:
29:72:a2:0a:27:c8:9e:75:56:92:2f:6e:9c:17:39:
6a:83:0f:ab:cb:c5:c9:37:20:00:e3:d7:18:b8:f6:
68:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E2:7B:7B:2F:63:B8:B2:6A:59:6F:EB:99:1B:B8:DC:D8:BB:3E:02
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS142433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.182.0/23
Signature Algorithm: sha256WithRSAEncryption
37:18:2d:01:2c:e4:6b:1e:18:2b:b7:06:c0:bf:42:6d:41:ba:
dc:c6:61:04:d2:45:c1:4f:5b:ed:a7:46:76:a5:39:0c:59:58:
4d:44:db:85:d2:df:f1:4f:cc:a3:4e:6a:9c:1f:1e:35:0c:bb:
f1:9f:95:10:76:42:d1:4e:26:10:1c:a2:83:12:ec:c1:3d:f4:
e3:a2:d6:ee:6e:25:9e:90:c8:6c:49:a1:b2:47:e5:c2:cb:8b:
70:c7:f7:0b:c4:2b:b9:e5:0d:da:51:31:05:72:a0:0a:18:56:
20:cc:77:f8:3d:41:d5:e6:af:ad:f2:0a:47:62:af:15:3c:61:
52:0f:d8:6a:d4:1e:66:a9:f2:a4:96:6b:73:82:b0:9a:2f:58:
57:4b:8f:f1:f4:fc:28:6c:e5:62:47:7e:07:58:bf:57:2c:e2:
9b:bc:5e:21:79:2f:56:df:79:58:e0:86:13:93:ae:47:cd:02:
dc:a6:a4:1f:34:24:5c:7c:2f:d3:59:63:29:42:ad:ec:1a:d2:
07:81:09:70:e7:d6:88:19:29:e7:ee:89:37:38:df:54:96:05:
33:ef:2b:84:25:a7:2d:dc:a4:b2:3c:c1:f3:2a:40:d5:94:62:
f0:ab:66:39:ac:7a:60:02:fa:41:9c:6e:b2:27:20:95:bd:3a:
50:06:18:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:09 2026 by rpki-client