Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136379.roa
File: AS136379.roa (raw, json)
Hash identifier: i8btXR8BgytSTzIijH3TtdebyzY67Oy8+rmkkXZw0ZA=
Subject key identifier: F1:29:AD:18:08:0A:47:A9:AB:32:EA:22:0B:B1:1A:A3:BE:72:B8:1D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4E3C76D7C6CFD8D9C6D54087D132AE624AF88F0B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136379.roa
Signing time: Sun 05 Jul 2026 13:48:55 +0000
ROA not before: Sun 05 Jul 2026 13:43:55 +0000
ROA not after: Sun 04 Jul 2027 13:48:55 +0000
asID: 136379
IP address blocks: 143.14.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:3c:76:d7:c6:cf:d8:d9:c6:d5:40:87:d1:32:ae:62:4a:f8:8f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 5 13:43:55 2026 GMT
Not After : Jul 4 13:48:55 2027 GMT
Subject: CN=F129AD18080A47A9AB32EA220BB11AA3BE72B81D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:71:c0:c8:9a:14:e2:77:86:f6:e1:af:3d:e1:
e7:7a:58:e7:45:75:9e:24:26:f9:cd:ef:80:b9:ca:
24:c4:9f:4e:cf:36:16:78:c0:be:76:51:8e:02:cb:
e0:75:61:66:5a:0e:6b:03:c5:54:11:a9:f2:51:b4:
5e:eb:e9:00:d4:8e:06:69:aa:9c:15:1a:3d:5d:ca:
20:39:a9:73:b2:8a:e0:65:8c:df:84:b9:77:57:dd:
0d:ad:c0:42:ff:7e:0f:ab:3b:26:28:98:a3:ba:92:
87:0a:f5:17:fc:b4:28:bf:e6:0f:43:a2:ea:25:9c:
ec:ed:83:cf:34:b5:19:fb:46:80:c8:2f:c2:9f:24:
5a:d8:2c:83:31:5a:ee:b6:f0:d4:72:11:26:6b:02:
c8:d8:71:72:08:17:36:63:cf:31:86:e5:4f:d1:d9:
96:1e:bb:5a:a7:c5:4e:e3:ae:dd:b6:d6:21:7d:4e:
b5:58:5c:70:95:6d:b1:49:48:17:6d:55:9f:71:e0:
13:66:8e:09:ce:c7:eb:f7:d1:02:cc:60:2d:0f:2a:
1b:60:31:90:7f:20:88:c0:38:4d:24:27:ee:3b:0e:
66:4b:ff:63:7b:9c:ae:2e:10:01:6d:41:83:ac:56:
29:ac:bb:2f:66:f0:67:ba:0d:fc:49:23:d6:db:8c:
77:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:29:AD:18:08:0A:47:A9:AB:32:EA:22:0B:B1:1A:A3:BE:72:B8:1D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136379.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.3.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:19:e2:e0:6b:fb:02:bb:2c:81:f9:59:db:08:15:05:f9:94:
88:66:d5:7c:d1:ab:5d:d2:d2:03:80:f0:a8:b3:c5:e9:93:42:
eb:95:c3:cc:12:ef:c3:89:6e:dc:b6:b8:53:36:8b:8e:73:d3:
27:8d:ee:a5:2d:78:84:2e:20:79:ae:f8:7c:e3:75:3a:6e:b4:
25:49:40:23:1c:34:27:ac:82:2a:a2:c6:33:33:1e:8e:38:02:
1f:54:3a:a6:ec:75:38:37:88:cb:26:99:b3:2f:c5:a6:b2:9a:
05:3c:77:b7:3b:55:ea:0a:a0:5b:a7:b1:af:5b:25:ae:10:72:
a7:32:96:57:26:5e:4c:e0:08:4d:89:b2:f0:92:82:70:20:8c:
c9:bb:d6:af:ef:26:f2:32:05:2e:0f:a5:68:89:99:1c:0f:96:
b6:c9:c8:55:45:ba:aa:f6:a6:cd:23:bf:43:24:76:50:50:16:
8f:af:a2:00:d7:b8:fb:77:d9:5b:41:10:34:a3:8d:ea:bc:8c:
9e:c6:42:48:0b:2a:4b:7b:1b:f2:6d:2a:b8:c1:01:44:9e:c4:
90:01:f3:e9:7b:28:94:54:d9:04:ae:38:2c:06:8c:df:59:ae:
8c:6c:eb:a2:82:9c:31:00:34:b1:a3:45:41:82:dd:64:f5:d8:
e4:59:16:55
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUTjx218bP2NnG1UCH0TKuYkr4jwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA3MDUxMzQzNTVaFw0yNzA3MDQxMzQ4NTVaMDMxMTAvBgNV
BAMTKEYxMjlBRDE4MDgwQTQ3QTlBQjMyRUEyMjBCQjExQUEzQkU3MkI4MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSccDImhTid4b24a894ed6WOdF
dZ4kJvnN74C5yiTEn07PNhZ4wL52UY4Cy+B1YWZaDmsDxVQRqfJRtF7r6QDUjgZp
qpwVGj1dyiA5qXOyiuBljN+EuXdX3Q2twEL/fg+rOyYomKO6kocK9Rf8tCi/5g9D
ouolnOztg880tRn7RoDIL8KfJFrYLIMxWu628NRyESZrAsjYcXIIFzZjzzGG5U/R
2ZYeu1qnxU7jrt221iF9TrVYXHCVbbFJSBdtVZ9x4BNmjgnOx+v30QLMYC0PKhtg
MZB/IIjAOE0kJ+47DmZL/2N7nK4uEAFtQYOsVimsuy9m8Ge6DfxJI9bbjHelAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU8SmtGAgKR6mrMuoiC7Eao75yuB0wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTM2Mzc5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjw4D
MA0GCSqGSIb3DQEBCwUAA4IBAQAqGeLga/sCuyyB+VnbCBUF+ZSIZtV80atd0tID
gPCos8Xpk0LrlcPMEu/DiW7ctrhTNouOc9Mnje6lLXiELiB5rvh843U6brQlSUAj
HDQnrIIqosYzMx6OOAIfVDqm7HU4N4jLJpmzL8WmspoFPHe3O1XqCqBbp7GvWyWu
EHKnMpZXJl5M4AhNibLwkoJwIIzJu9av7ybyMgUuD6VoiZkcD5a2ychVRbqq9qbN
I79DJHZQUBaPr6IA17j7d9lbQRA0o43qvIyexkJICypLexvybSq4wQFEnsSQAfPp
eyiUVNkErjgsBozfWa6MbOuigpwxADSxo0VBgt1k9djkWRZV
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:19:58 2026 by rpki-client