Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135392.roa
File: AS135392.roa (raw, json)
Hash identifier: Bf390f1CBXy01gKscvhRHHiOLT0fWvz85Kyji/ciTco=
Subject key identifier: 37:B4:9F:BE:33:D2:F7:AA:8F:20:75:B2:23:D8:DC:BB:8A:AA:03:ED
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5A08D1AB9DF100022D8905119A888DF273329A3C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135392.roa
Signing time: Sun 21 Jun 2026 18:39:00 +0000
ROA not before: Sun 21 Jun 2026 18:34:00 +0000
ROA not after: Sun 20 Jun 2027 18:39:00 +0000
asID: 135392
IP address blocks: 143.14.49.0/24 maxlen: 24
150.241.209.0/24 maxlen: 24
155.117.213.0/24 maxlen: 24
167.148.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:08:d1:ab:9d:f1:00:02:2d:89:05:11:9a:88:8d:f2:73:32:9a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 21 18:34:00 2026 GMT
Not After : Jun 20 18:39:00 2027 GMT
Subject: CN=37B49FBE33D2F7AA8F2075B223D8DCBB8AAA03ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a2:e7:0a:4b:f6:a6:3d:18:5c:8e:1a:db:d0:
ba:3b:80:ea:11:56:9c:d7:2b:9a:96:9b:e6:a3:cf:
97:f6:99:25:15:41:f3:13:e3:74:38:33:13:56:44:
2c:61:6d:ee:27:42:21:4e:a3:c9:7e:b5:f3:7d:a0:
06:01:0e:c8:36:35:07:19:57:2a:c0:32:4c:55:83:
83:3d:af:0e:fa:d0:01:8e:3e:55:39:ce:60:7c:db:
18:85:4e:14:54:e6:78:29:5c:0a:0c:72:ea:e9:51:
34:7c:c9:71:5d:05:9e:9f:f5:03:0c:a5:cf:44:e5:
83:f5:1b:a3:9e:ab:a4:46:31:5a:57:5a:07:32:a5:
a4:2d:cc:d1:5c:75:c0:40:9e:1b:7d:04:5e:ba:59:
f7:60:27:9d:53:92:67:0b:34:1b:b2:e1:e8:9c:5b:
63:30:98:6d:a2:71:e1:da:23:e2:8d:aa:44:99:b0:
7d:c1:59:02:1e:b1:ea:61:7e:39:7e:1a:9c:87:1d:
3b:b6:3c:c2:c1:1a:8c:48:0a:91:f7:e4:96:ea:12:
ec:b2:c4:98:e3:b2:16:be:a8:f7:3c:1a:8a:1a:82:
44:37:7a:56:76:96:60:8a:af:a5:6a:85:3e:a4:5e:
a2:26:f5:49:a0:3d:5d:a5:af:f5:24:64:04:57:ad:
48:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B4:9F:BE:33:D2:F7:AA:8F:20:75:B2:23:D8:DC:BB:8A:AA:03:ED
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135392.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.49.0/24
150.241.209.0/24
155.117.213.0/24
167.148.201.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a8:34:83:5c:5c:33:dd:57:65:47:6f:48:33:15:5a:c7:6f:
5e:72:87:f9:7a:ac:66:9d:12:1f:19:41:8b:8f:65:c5:0a:70:
b9:67:67:3b:f0:ea:10:af:37:c4:c1:4e:e1:44:27:fe:41:b2:
45:b8:69:e4:64:55:f3:3d:bf:d8:cd:6c:5b:88:7e:49:a3:f0:
63:1a:02:0d:23:d9:ed:f9:79:ad:19:0d:14:8c:08:cd:4a:f3:
23:5a:ac:e3:e1:0b:4e:f2:3b:e2:8b:34:54:b0:88:d9:5f:e3:
68:36:24:15:d8:03:dc:d6:1e:05:7f:a1:5c:4c:c7:3d:32:39:
79:69:78:c1:9c:f0:e3:c2:24:8a:bd:af:37:e7:cd:a4:b5:a7:
3e:ab:e6:83:7c:94:21:be:90:c6:d6:34:b5:aa:c6:88:13:26:
6d:b5:19:37:80:48:d4:3a:63:17:13:86:9e:b8:cd:73:cc:22:
9b:61:29:e6:56:9f:b9:e1:e3:07:4b:a1:54:1a:74:7c:ba:bc:
30:10:db:b6:97:9b:02:1c:b1:aa:c0:b5:e7:69:1d:37:4d:4a:
d6:dd:3c:2f:37:68:35:b9:53:d5:43:13:95:bc:fa:88:33:97:
59:b2:0e:e3:76:6f:ea:ae:88:69:5b:5a:af:b9:66:53:ec:f1:
00:2c:82:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:32:12 2026 by rpki-client