Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa
File: AS153996.roa (raw, json)
Hash identifier: hng7df9ei72/5GndlkNCyzIEgyS/ao7O0u//JMn3VT8=
Subject key identifier: 63:22:96:75:37:BD:71:EA:6E:7A:03:43:77:AE:C6:20:32:52:70:80
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3533E66EC577D7B1A9525F0B7139B54F43D3FF64
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa
Signing time: Sun 03 May 2026 17:20:58 +0000
ROA not before: Sun 03 May 2026 17:15:58 +0000
ROA not after: Sun 02 May 2027 17:20:58 +0000
asID: 153996
IP address blocks: 143.14.1.0/24 maxlen: 24
143.14.9.0/24 maxlen: 24
143.14.11.0/24 maxlen: 24
143.14.16.0/24 maxlen: 24
143.14.200.0/24 maxlen: 24
143.14.208.0/23 maxlen: 24
155.117.1.0/24 maxlen: 24
162.141.142.0/24 maxlen: 24
168.222.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:33:e6:6e:c5:77:d7:b1:a9:52:5f:0b:71:39:b5:4f:43:d3:ff:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 3 17:15:58 2026 GMT
Not After : May 2 17:20:58 2027 GMT
Subject: CN=6322967537BD71EA6E7A034377AEC62032527080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:87:d5:61:1b:9d:73:e7:a2:2a:ae:50:15:
7a:b0:6d:96:39:93:76:29:b7:59:89:67:c3:33:f2:
5b:a9:89:71:b8:e0:89:90:2f:15:67:40:e9:0f:a0:
43:bc:84:3f:c2:5d:ab:63:64:b1:22:c7:4a:e0:7b:
42:ff:47:2d:ae:47:2c:28:9d:c3:52:51:e2:14:a2:
92:9b:8a:08:ed:be:fd:f0:0e:6d:ea:44:64:25:22:
12:7a:ee:31:af:bc:d4:db:8e:0e:67:8b:5e:c1:ee:
a0:25:84:e5:70:d8:34:8f:ef:3f:ce:64:e3:85:16:
27:f4:36:99:c4:47:3f:7b:b5:4d:79:26:8c:c3:36:
5c:1c:1f:3d:05:04:46:c0:3a:5a:6f:78:20:69:c8:
f3:6a:c8:ed:f9:fc:33:07:1d:f9:3e:11:aa:1a:1e:
ef:db:a1:bb:fc:8f:4f:b2:cf:eb:f8:ac:cf:f0:29:
97:99:f8:b2:db:4d:69:12:50:7a:05:2b:dd:79:2e:
33:86:ee:eb:aa:f2:64:5d:7b:b7:12:38:0d:a5:5d:
3f:b7:3b:99:40:89:21:d0:f2:40:15:0c:b1:e2:0c:
a7:fa:f6:a0:f8:48:ce:dd:99:bd:30:0b:0c:d2:c5:
17:79:82:e6:7e:d9:38:20:91:15:b4:2f:49:05:eb:
6c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:22:96:75:37:BD:71:EA:6E:7A:03:43:77:AE:C6:20:32:52:70:80
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.1.0/24
143.14.9.0/24
143.14.11.0/24
143.14.16.0/24
143.14.200.0/24
143.14.208.0/23
155.117.1.0/24
162.141.142.0/24
168.222.8.0/24
Signature Algorithm: sha256WithRSAEncryption
19:8d:d0:42:35:9c:9c:28:35:03:74:0d:06:87:4b:86:a4:24:
39:37:93:3f:55:93:4e:45:0c:7c:e6:9e:25:a6:b9:58:61:92:
62:41:59:9a:bb:8a:cd:e3:20:62:45:20:95:d5:f7:2c:13:0c:
ad:75:92:8e:8c:20:26:2d:83:76:4e:9b:6a:35:88:72:4d:b0:
7f:71:b2:55:1c:2b:1e:27:4b:bf:ef:c9:38:4e:ea:94:e1:12:
62:bc:f2:c4:b5:b2:c8:75:9a:7a:25:ed:97:5d:9b:d9:86:08:
90:05:a9:b5:03:c7:8e:1a:cd:68:b5:6c:71:a3:97:12:02:99:
78:01:fa:0f:57:28:6e:d9:59:40:e6:d2:f8:0d:47:a5:d0:e9:
48:bf:74:d0:d9:77:ad:91:44:b7:1b:ff:ca:d7:ed:73:87:26:
d5:50:ca:0c:00:5f:5f:71:93:ae:7e:79:fa:39:1e:30:f6:16:
3c:69:c1:d5:ea:d8:67:b1:53:3b:67:6e:00:22:ab:a4:3a:53:
eb:21:ca:b8:a5:b3:bd:89:2e:a8:82:65:c4:f1:b0:89:2a:77:
79:b3:be:2a:6a:b4:fb:80:c8:83:e1:c0:0c:32:bc:f7:f8:1f:
b6:22:54:7f:9f:87:6c:98:b3:ed:c6:c3:b3:fe:7f:74:77:6a:
86:3a:63:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:42:25 2026 by rpki-client