Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS134494.roa
File: AS134494.roa (raw, json)
Hash identifier: fA1VLhi77Sv9SP1YiA1w9bCq7EJJ/yyakojld1niDhs=
Subject key identifier: FC:78:C4:83:E5:35:C2:9F:39:BE:72:88:81:89:DA:19:CA:42:16:AE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7999C7694778741D4F5A9C1A3CFB30AEE8649F54
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS134494.roa
Signing time: Sat 14 Nov 2026 07:14:20 +0000
ROA not before: Sat 14 Nov 2026 07:09:20 +0000
ROA not after: Sat 13 Nov 2027 07:14:20 +0000
asID: 134494
IP address blocks: 96.62.96.0/24 maxlen: 24
143.14.128.0/24 maxlen: 24
143.14.140.0/24 maxlen: 24
147.79.8.0/24 maxlen: 24
148.135.187.0/24 maxlen: 24
150.241.201.0/24 maxlen: 24
162.141.105.0/24 maxlen: 24
162.141.145.0/24 maxlen: 24
162.141.146.0/24 maxlen: 24
162.141.148.0/24 maxlen: 24
162.141.151.0/24 maxlen: 24
162.141.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 07:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:99:c7:69:47:78:74:1d:4f:5a:9c:1a:3c:fb:30:ae:e8:64:9f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 14 07:09:20 2026 GMT
Not After : Nov 13 07:14:20 2027 GMT
Subject: CN=FC78C483E535C29F39BE72888189DA19CA4216AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:88:d5:f8:ee:bf:3f:cf:67:55:0b:61:d0:
6c:98:59:f3:9d:0f:58:8f:32:4d:11:86:e9:ec:69:
9f:95:6d:6f:ca:06:a4:2f:2e:6b:15:00:04:5e:ab:
11:40:98:12:57:3d:f2:d3:08:b8:18:2f:f9:6a:2d:
8e:3e:fa:04:f1:ba:37:36:5a:80:fa:0a:21:73:7c:
5c:5a:0b:b9:b3:34:dd:c1:b0:e3:fc:36:9a:d8:6b:
30:67:ef:06:5f:90:a4:13:be:c0:30:d7:a4:98:b8:
a9:94:58:bc:a2:3e:24:80:ee:ea:62:89:90:49:47:
a3:dd:4a:79:c4:03:88:23:cb:91:36:04:72:95:30:
fa:0b:42:dd:63:b3:47:d9:68:b3:4e:8c:e8:46:82:
71:ef:49:b5:d6:fb:7e:76:d7:31:fd:04:bb:03:a8:
48:88:37:4a:21:84:56:ae:bb:47:1b:40:77:e6:d3:
a4:34:48:f8:c1:34:2f:43:83:99:be:06:ad:9b:15:
68:ad:fb:e8:11:e7:ef:cb:8c:11:80:15:20:10:8c:
c5:c0:56:9c:1a:17:ea:d9:3c:11:7d:04:ab:9f:c6:
88:8d:7f:c2:c8:f2:83:ca:94:ec:12:b9:e5:ae:a0:
19:f1:45:a8:c6:f8:b1:57:5b:0e:07:81:f7:b8:77:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:78:C4:83:E5:35:C2:9F:39:BE:72:88:81:89:DA:19:CA:42:16:AE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS134494.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.96.0/24
143.14.128.0/24
143.14.140.0/24
147.79.8.0/24
148.135.187.0/24
150.241.201.0/24
162.141.105.0/24
162.141.145.0-162.141.146.255
162.141.148.0/24
162.141.151.0/24
162.141.169.0/24
Signature Algorithm: sha256WithRSAEncryption
92:90:72:4a:4d:78:06:67:bc:75:b9:9a:31:69:ae:22:b3:92:
e2:2b:a1:e3:e2:83:ef:30:2f:e7:d1:6e:ee:3d:5c:4c:fc:59:
fe:74:19:ad:b9:6c:5b:05:fc:b0:d6:78:3a:1d:f4:3c:1c:fb:
1d:ec:88:2d:d9:a6:35:2e:8c:3c:5b:20:4c:d7:49:95:af:a3:
42:fd:93:eb:de:99:12:29:59:98:a9:15:dc:4d:8b:9e:f8:36:
a7:57:7f:5f:d9:8c:88:ca:50:8f:19:f2:ba:cb:20:d5:7a:b1:
5b:c1:d0:fd:09:35:77:54:b4:af:65:31:3d:e7:88:b9:15:0a:
06:91:b6:7c:fa:89:53:51:09:0a:de:bd:f6:70:88:53:34:16:
d1:96:06:6f:bd:52:ab:63:8d:59:7c:75:1d:4c:11:22:44:c1:
92:3b:05:92:c3:a2:32:c2:fe:b3:f4:0d:1e:42:9f:74:ec:78:
24:85:fe:39:f4:4f:88:14:b1:d2:be:fa:86:cd:65:0b:f8:c3:
49:82:64:0c:77:b6:e6:8d:40:00:e0:f3:aa:c9:82:df:1e:71:
a3:8a:68:6b:9a:dd:a5:30:c4:88:d6:48:d8:72:92:d5:51:07:
b5:81:85:f9:fd:d9:cb:21:39:b7:2b:ad:ad:8d:ea:ed:29:9d:
19:11:70:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:34:32 2026 by rpki-client