Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135392.roa
File: AS135392.roa (raw, json)
Hash identifier: huD6kUUlEmMTaQNU3IKMu0k2vc+1dNWJnBnDeE2RF04=
Subject key identifier: ED:D4:06:06:DF:FA:EE:1C:D4:2B:8C:0C:24:99:5E:E2:F9:65:1B:26
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 292F8FEBBC337917DA2A76D0D6A33EAE6DA90DA7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135392.roa
Signing time: Mon 23 Mar 2026 19:39:02 +0000
ROA not before: Mon 23 Mar 2026 19:34:02 +0000
ROA not after: Mon 22 Mar 2027 19:39:02 +0000
asID: 135392
IP address blocks: 143.14.49.0/24 maxlen: 24
167.148.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:2f:8f:eb:bc:33:79:17:da:2a:76:d0:d6:a3:3e:ae:6d:a9:0d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 23 19:34:02 2026 GMT
Not After : Mar 22 19:39:02 2027 GMT
Subject: CN=EDD40606DFFAEE1CD42B8C0C24995EE2F9651B26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:65:e4:92:5f:9c:d1:d1:6e:80:4e:56:8c:
e1:c7:67:07:62:77:4b:50:1b:93:fc:67:80:62:fb:
3f:90:7a:e8:ae:ef:f8:78:98:34:78:0d:34:5c:f5:
99:d9:d6:f3:45:59:c6:b9:6b:48:1d:5f:a9:49:dd:
6f:93:b7:ea:ca:6a:28:16:04:94:fa:01:69:b3:8f:
33:17:1d:6d:30:80:45:f7:ee:1a:60:49:89:13:2b:
b4:44:2a:dd:62:bf:2d:14:6b:75:ed:aa:e5:24:c2:
65:ad:c4:2f:40:fb:96:57:7c:e8:10:a9:47:97:0b:
93:b4:47:b5:d6:40:60:ea:49:98:32:96:49:21:ad:
05:92:b0:43:b4:11:1f:58:25:9d:7d:5f:2d:9b:bf:
a2:b4:5b:30:09:71:09:6a:44:5a:94:4f:33:7d:46:
66:68:c8:bc:5e:c5:7d:79:cd:f5:2a:23:88:15:56:
73:21:65:99:35:8d:75:a2:e5:71:c9:52:9e:82:90:
61:df:49:ca:1c:7e:ac:99:1d:dc:d6:23:84:52:33:
38:d3:22:2d:9b:70:dd:5f:e9:70:a9:47:f0:03:0f:
b7:f3:57:88:15:83:cb:c7:02:77:0d:87:13:31:f8:
4a:a4:77:97:b6:63:7e:ef:4c:00:4b:07:68:70:6a:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D4:06:06:DF:FA:EE:1C:D4:2B:8C:0C:24:99:5E:E2:F9:65:1B:26
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135392.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.49.0/24
167.148.201.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:84:57:7f:e1:a1:2a:b9:21:60:8f:c6:cb:0d:4a:19:db:44:
13:63:d7:2a:50:7f:c7:4d:01:73:a1:01:18:ed:83:1d:d9:fb:
13:77:81:74:17:ac:77:bd:ac:d8:d6:60:f7:37:a4:77:8e:10:
d1:fc:6a:a0:ee:19:ff:86:2b:b9:5b:6f:9e:1d:81:3b:48:05:
1f:2c:1a:d3:fd:61:e4:d7:47:be:94:80:85:b2:d1:a4:d1:8a:
81:3b:fd:90:c8:1b:1b:ba:72:0b:15:f4:b4:0b:17:7a:e8:74:
83:26:ff:5b:85:40:e1:3f:5f:8b:c6:1c:df:b3:9b:b4:54:3d:
2e:04:93:64:9f:f7:68:ea:e0:e8:a4:c3:2d:d3:e1:b5:47:c5:
39:87:ce:ef:88:da:c9:8e:15:ab:54:6f:90:8a:e4:88:8f:9d:
21:6f:fb:ae:a2:9a:a2:76:8a:6a:2f:f7:3d:76:08:15:a6:7f:
1a:82:de:7e:8c:a0:39:b3:8d:e5:ea:d6:91:21:d6:f9:2d:a9:
7a:fa:46:f7:ee:ca:19:71:6f:14:2c:e6:81:e5:d3:6e:01:20:
2a:1d:2b:c2:6d:37:1d:bb:80:68:59:82:48:b9:cc:1a:f8:58:
a6:c1:d4:55:6a:03:18:f5:b9:f3:09:b8:b8:69:02:0a:29:13:
bd:95:9c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:38 2026 by rpki-client