Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa
File: AS153996.roa (raw, json)
Hash identifier: crRDKWeNnPtPaIq8/4aWiq1ZUsNFhuqQ413h4l0xvVI=
Subject key identifier: 5F:4F:7B:48:C5:A0:5A:04:1E:AA:C0:63:49:EB:52:F4:D0:0E:D0:A5
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5B07FC71960E4591E1388A0DEB66CBF2EE2241CA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa
Signing time: Sat 14 Mar 2026 21:36:16 +0000
ROA not before: Sat 14 Mar 2026 21:31:16 +0000
ROA not after: Sat 13 Mar 2027 21:36:16 +0000
asID: 153996
IP address blocks: 143.14.1.0/24 maxlen: 24
143.14.9.0/24 maxlen: 24
143.14.200.0/24 maxlen: 24
143.14.208.0/23 maxlen: 24
155.117.1.0/24 maxlen: 24
162.141.36.0/24 maxlen: 24
162.141.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:07:fc:71:96:0e:45:91:e1:38:8a:0d:eb:66:cb:f2:ee:22:41:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 14 21:31:16 2026 GMT
Not After : Mar 13 21:36:16 2027 GMT
Subject: CN=5F4F7B48C5A05A041EAAC06349EB52F4D00ED0A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:3e:3a:13:6e:0f:7e:f9:19:ed:60:de:77:
c2:2c:90:1a:cc:17:1b:43:3f:e6:27:32:da:e5:e0:
cb:d4:ab:d3:90:21:f0:bf:02:43:4e:5f:7c:c4:ec:
e9:e6:be:34:ba:9d:dc:e5:ce:09:07:f4:f8:a3:3f:
ea:a0:ba:43:5e:e9:38:b5:08:05:28:d7:40:f0:1b:
af:fd:94:c1:24:a0:bf:e8:c8:46:1a:04:38:18:81:
51:70:21:43:c4:3b:e1:b1:2d:d2:10:d0:f9:ca:22:
2c:ad:4e:3a:fb:50:5b:7f:6f:e1:c3:98:18:f1:6c:
c0:83:fc:76:57:0b:91:82:f0:f7:e4:36:66:7c:83:
61:3d:c4:f3:15:a6:4c:da:1c:3a:3d:20:c7:37:a1:
2b:da:62:e7:e0:58:20:85:76:59:af:7f:40:44:e2:
4b:24:26:70:63:a6:92:16:4c:37:70:fc:1e:b9:64:
d3:18:45:1d:cd:ed:1d:9f:e7:3b:ee:e4:63:41:e5:
56:09:5e:a7:e6:5d:62:de:38:19:d0:82:50:da:b5:
65:b1:56:42:a3:83:81:14:36:6a:30:3e:ae:aa:af:
06:3e:1b:fb:09:bc:b3:86:8a:db:95:19:5b:3d:b4:
e3:d9:55:9c:7d:c1:eb:5c:22:2d:d4:71:46:5f:d5:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4F:7B:48:C5:A0:5A:04:1E:AA:C0:63:49:EB:52:F4:D0:0E:D0:A5
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.1.0/24
143.14.9.0/24
143.14.200.0/24
143.14.208.0/23
155.117.1.0/24
162.141.36.0/24
162.141.142.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b2:b2:65:2c:ca:d7:d7:b3:18:e3:97:87:ee:90:a5:b4:15:
30:3c:30:2e:10:a6:03:9d:0d:5e:88:a7:03:82:b4:0f:6d:55:
cb:75:73:a0:64:fc:ee:99:f3:d2:57:b9:0e:89:28:02:8a:4a:
6b:5c:25:c3:ea:ca:e3:b0:29:34:94:34:9d:39:0f:81:99:39:
29:ad:b6:e1:35:2b:20:4a:ce:fc:2b:b7:05:dd:88:0b:03:a1:
35:d4:20:89:86:a9:a2:7c:77:79:66:65:37:b0:8d:14:71:14:
4f:6e:74:b5:b9:e8:08:aa:db:4e:72:13:9f:38:1f:02:12:00:
ac:e6:82:e2:0d:01:be:f8:cd:53:94:a7:5e:e5:14:14:73:e7:
a9:df:37:ea:e9:9b:4f:b4:de:f7:2c:3c:b2:12:6b:2e:0b:64:
e0:3a:a0:91:13:f5:8d:f5:c0:e6:68:3d:27:f1:63:11:1f:28:
c0:bb:8a:e3:6a:8b:d8:fa:d5:d9:cd:77:14:a7:4b:0d:a3:9e:
fb:e9:22:27:e9:f9:69:d3:e3:bb:a1:82:b7:b3:0e:c4:a7:d8:
82:9b:2e:95:3f:76:be:35:ef:77:17:cb:3c:ab:01:7f:ff:0b:
2a:3e:e4:60:81:3c:2c:bb:92:48:95:b9:06:9f:b3:c0:75:82:
4e:f2:a1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:48:35 2026 by rpki-client