Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS146813.roa
File: AS146813.roa (raw, json)
Hash identifier: mmPApT71NukaRE2qSELweKUOeCVERecPt+suBTETk2g=
Subject key identifier: B9:B6:6F:C4:E7:39:B3:CD:E4:98:5F:9D:D1:04:5C:A7:5E:61:A1:A7
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 54F3DAFBE9C2BE8EA6D41C2719AA680C03016AD1
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS146813.roa
Signing time: Thu 24 Sep 2026 19:13:00 +0000
ROA not before: Thu 24 Sep 2026 19:08:00 +0000
ROA not after: Thu 23 Sep 2027 19:13:00 +0000
asID: 146813
IP address blocks: 143.20.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:f3:da:fb:e9:c2:be:8e:a6:d4:1c:27:19:aa:68:0c:03:01:6a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 24 19:08:00 2026 GMT
Not After : Sep 23 19:13:00 2027 GMT
Subject: CN=B9B66FC4E739B3CDE4985F9DD1045CA75E61A1A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cc:d2:0c:7e:5b:d0:b7:21:d5:7b:53:03:3f:
20:e3:82:55:fb:de:89:b3:c8:e8:2f:e8:cc:5c:3b:
0a:45:e4:76:08:eb:c3:79:ea:83:5e:37:f5:a9:a3:
29:0b:f3:17:9e:26:17:a0:22:05:d2:cb:ab:f6:d9:
6b:8b:55:9c:06:e2:dd:84:e2:21:46:ad:14:8b:97:
11:38:1d:bf:51:2c:12:16:94:8c:d9:c0:ea:c3:2f:
52:da:bf:d3:33:10:c0:23:e4:6c:98:93:5f:b0:f6:
12:a5:2b:ad:3e:f0:55:42:05:2a:9a:c4:02:9e:51:
05:cf:34:92:08:f9:e1:25:08:92:d7:a0:49:84:bf:
ae:0b:30:a9:61:4d:76:e5:44:2b:5e:a8:2e:1f:c2:
9f:48:d3:36:17:82:af:e7:d3:7e:2f:b9:82:1d:b0:
20:2e:e1:2a:e7:a1:7c:2f:8a:0a:cc:dc:e1:2c:ed:
6a:cd:d5:5b:67:e1:bd:cd:2d:30:e9:fc:6d:3c:f5:
c3:7a:b5:95:66:46:7b:b0:18:86:f3:0b:94:10:3a:
b5:3d:3f:69:8e:c7:d5:ef:30:69:1a:34:9e:24:69:
63:42:7f:75:4a:44:47:dd:b8:52:37:d8:ce:31:65:
ff:77:7d:6f:79:f2:38:44:91:5b:77:49:31:5a:7d:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B6:6F:C4:E7:39:B3:CD:E4:98:5F:9D:D1:04:5C:A7:5E:61:A1:A7
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS146813.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.79.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d4:a9:95:e3:29:17:e2:b6:c2:0e:f2:58:9a:14:0b:c1:20:
5c:d5:9e:94:da:16:05:e5:84:93:b8:4d:e5:b7:77:b4:3a:09:
6f:6f:5b:ea:3d:97:ec:44:f5:53:d4:f2:3f:7b:df:ed:48:d3:
3d:cf:12:04:7b:63:b7:cf:a4:27:46:c5:04:a3:71:a3:54:2a:
0b:f8:4f:9c:9e:85:dd:ae:45:c5:93:be:50:27:08:d3:b6:6b:
58:91:58:0c:64:b4:1c:7c:cb:56:7c:33:30:da:c1:db:77:9e:
42:20:d9:cb:80:5d:91:d6:49:91:fb:d3:09:22:cf:c3:53:d1:
30:db:08:20:80:71:b8:bb:b4:eb:40:28:de:53:da:79:cc:37:
1c:eb:29:86:dc:85:58:b2:b8:d5:12:4b:d9:db:dd:41:4c:46:
d3:25:1d:4e:a4:75:88:17:9a:97:82:f7:f3:ac:50:1a:5b:8f:
f0:56:3f:5d:0f:85:bc:1c:d9:3d:b9:bd:c4:a3:e6:3f:29:89:
b6:07:cd:45:2f:40:12:ca:de:cf:2b:48:11:57:bd:b6:54:c1:
59:18:5d:9a:e6:a5:47:81:f8:19:29:b8:42:77:bc:cc:2f:9f:
46:ac:ad:aa:f9:f3:45:ca:13:7f:fa:0e:93:37:44:19:aa:3e:
0f:97:67:de
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUVPPa++nCvo6m1BwnGapoDAMBatEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA5MjQxOTA4MDBaFw0yNzA5MjMxOTEzMDBaMDMxMTAvBgNV
BAMTKEI5QjY2RkM0RTczOUIzQ0RFNDk4NUY5REQxMDQ1Q0E3NUU2MUExQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRzNIMflvQtyHVe1MDPyDjglX7
3omzyOgv6MxcOwpF5HYI68N56oNeN/WpoykL8xeeJhegIgXSy6v22WuLVZwG4t2E
4iFGrRSLlxE4Hb9RLBIWlIzZwOrDL1Lav9MzEMAj5GyYk1+w9hKlK60+8FVCBSqa
xAKeUQXPNJII+eElCJLXoEmEv64LMKlhTXblRCteqC4fwp9I0zYXgq/n034vuYId
sCAu4SrnoXwvigrM3OEs7WrN1Vtn4b3NLTDp/G089cN6tZVmRnuwGIbzC5QQOrU9
P2mOx9XvMGkaNJ4kaWNCf3VKREfduFI32M4xZf93fW958jhEkVt3STFafU3lAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUubZvxOc5s83kmF+d0QRcp15hoacwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMTQ2ODEzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxRP
MA0GCSqGSIb3DQEBCwUAA4IBAQCe1KmV4ykX4rbCDvJYmhQLwSBc1Z6U2hYF5YST
uE3lt3e0Oglvb1vqPZfsRPVT1PI/e9/tSNM9zxIEe2O3z6QnRsUEo3GjVCoL+E+c
noXdrkXFk75QJwjTtmtYkVgMZLQcfMtWfDMw2sHbd55CINnLgF2R1kmR+9MJIs/D
U9Ew2wgggHG4u7TrQCjeU9p5zDcc6ymG3IVYsrjVEkvZ291BTEbTJR1OpHWIF5qX
gvfzrFAaW4/wVj9dD4W8HNk9ub3Eo+Y/KYm2B81FL0ASyt7PK0gRV722VMFZGF2a
5qVHgfgZKbhCd7zML59GrK2q+fNFyhN/+g6TN0QZqj4Pl2fe
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:25 2026 by rpki-client