
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS146813.roa
File: AS146813.roa (raw, json)
Hash identifier: 34I52DYEMc00sz7h++PsbycrZ15/qRqw1QARefNkt5M=
Subject key identifier: 33:6A:ED:AC:25:C7:C0:94:95:E2:74:43:A0:19:97:04:E9:6A:AA:CA
Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial: 5879947D6AEB8A688E9CAC4197D783F3C9D5E42C
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS146813.roa
Signing time: Thu 24 Sep 2026 17:19:44 +0000
ROA not before: Thu 24 Sep 2026 17:14:44 +0000
ROA not after: Thu 23 Sep 2027 17:19:44 +0000
asID: 146813
IP address blocks: 200.141.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:44:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:79:94:7d:6a:eb:8a:68:8e:9c:ac:41:97:d7:83:f3:c9:d5:e4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Validity
Not Before: Sep 24 17:14:44 2026 GMT
Not After : Sep 23 17:19:44 2027 GMT
Subject: CN=336AEDAC25C7C09495E27443A0199704E96AAACA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6c:83:16:73:55:e9:ab:0a:96:c1:95:62:ea:
49:a2:d6:7d:6b:3d:c2:17:6a:c9:9f:a6:47:3e:6f:
ce:e4:c4:ca:a1:16:8b:54:76:a7:4d:39:fd:1a:d6:
a7:e3:0c:5c:ad:8c:5b:4d:70:47:a4:f4:3b:25:b0:
7f:08:12:45:2d:a9:b9:38:09:48:1d:c2:f8:b6:67:
c2:55:da:c7:15:37:e1:ce:ea:e7:2a:73:be:24:fd:
e4:52:df:a1:4c:74:b5:7c:79:99:42:18:06:d8:04:
63:c7:50:6f:ef:13:99:ce:c5:ea:63:29:4b:01:ca:
7f:d6:dd:c3:09:37:4a:f4:68:60:cd:e4:a0:3a:94:
30:3e:fc:bd:e5:99:41:75:d2:be:37:87:03:72:63:
11:e3:e4:11:b4:a4:83:2a:c9:b0:24:e7:c9:c2:37:
45:06:06:6a:63:f0:45:1b:14:16:b5:c7:c6:4e:b7:
27:a6:92:d6:27:c4:2d:5f:4a:29:ed:9e:39:5f:a6:
5c:eb:9f:36:63:6d:a3:ac:7b:b0:d1:0a:d9:ed:a8:
96:06:0d:fd:67:6c:f8:36:64:9e:02:fe:0b:58:fb:
17:2a:09:ce:24:c9:eb:b6:97:a2:e1:d6:96:a2:0b:
ba:db:af:03:a9:aa:af:be:41:84:13:f7:3f:66:54:
90:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6A:ED:AC:25:C7:C0:94:95:E2:74:43:A0:19:97:04:E9:6A:AA:CA
X509v3 Authority Key Identifier:
keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS146813.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.141.55.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c9:64:1c:bd:9e:87:7c:e8:b9:9c:3e:7b:6b:e9:67:c3:47:
25:77:d5:b5:5c:d7:87:ae:cc:10:30:df:16:0f:51:e1:c9:53:
63:ba:89:6b:80:bc:12:fe:d0:c0:a1:29:50:1a:fa:fc:aa:ab:
7a:ec:8a:e6:f0:eb:b9:1d:61:d7:4e:7c:40:ec:34:f1:d8:57:
90:37:45:a5:c0:a6:03:c6:25:d1:d5:1b:92:0f:d3:9a:6d:c9:
c4:f8:76:60:e9:ce:aa:59:84:8b:e5:3c:36:bb:da:64:25:37:
97:dc:2b:db:b3:18:57:06:b8:01:f0:78:55:d2:89:2b:bb:93:
ff:03:f6:85:12:0b:5b:f0:80:d2:cd:cc:3b:f9:df:61:05:fc:
52:f6:6c:0a:69:04:90:90:f5:40:10:29:99:f3:05:78:0c:58:
29:04:1a:37:91:06:f6:6e:76:50:5f:6b:ce:20:69:12:26:a7:
0d:85:a3:8d:32:a3:01:05:dc:73:c5:f8:42:ba:8e:57:15:8f:
d7:6c:57:5e:f5:a6:2e:f3:c9:57:2f:a8:81:6f:ee:83:76:e9:
99:65:ea:f5:a3:1f:ad:f5:00:a6:27:39:b4:cf:61:07:3d:54:
b7:4e:09:b0:97:d8:f7:a3:a4:57:cb:16:c8:ea:3f:9e:19:11:
b4:96:c0:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:25 2026 by rpki-client