Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa
File: AS153996.roa (raw, json)
Hash identifier: 3xO4DqyzTJoE+q2FnxqIX0MTgOlqWH25FT7KApueZoE=
Subject key identifier: AE:DF:EC:DA:35:AC:C9:9F:3C:86:97:0E:7D:0F:96:10:B4:0D:BF:60
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 42FEA2B8C9BB522254A2134A215C7154D673AA2B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa
Signing time: Mon 20 Jul 2026 14:10:45 +0000
ROA not before: Mon 20 Jul 2026 14:05:45 +0000
ROA not after: Mon 19 Jul 2027 14:10:45 +0000
asID: 153996
IP address blocks: 143.14.9.0/24 maxlen: 24
143.14.11.0/24 maxlen: 24
143.14.36.0/24 maxlen: 24
143.14.200.0/24 maxlen: 24
143.14.229.0/24 maxlen: 24
162.141.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:fe:a2:b8:c9:bb:52:22:54:a2:13:4a:21:5c:71:54:d6:73:aa:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 20 14:05:45 2026 GMT
Not After : Jul 19 14:10:45 2027 GMT
Subject: CN=AEDFECDA35ACC99F3C86970E7D0F9610B40DBF60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:a3:a5:22:f3:08:f8:fe:70:7c:cd:5d:35:
08:c1:50:c6:d8:a8:1d:0d:74:f4:77:16:5b:18:4e:
d5:79:a3:76:df:fb:fe:08:ff:78:ba:92:9a:3f:1d:
2f:06:07:bf:04:19:f2:64:4b:6e:b8:b6:73:71:08:
7b:e4:92:37:10:81:12:6e:32:30:d8:da:ea:aa:f0:
88:31:6d:b0:28:76:ee:5f:9b:8a:87:f4:25:4d:24:
10:8e:87:58:65:49:39:41:40:e9:b8:98:7f:4a:d1:
a0:40:41:c6:05:7a:7f:97:44:14:0c:fc:78:ea:53:
92:ef:2f:1e:79:af:c5:7c:00:65:79:1c:96:71:8c:
cb:30:48:c0:ea:1a:d1:ef:8f:83:be:b3:b8:65:e0:
03:39:e3:a7:ef:b6:d3:29:fa:e9:4a:1b:4e:02:94:
04:8b:4b:fd:b4:da:40:cc:bf:0e:b9:22:24:ca:fb:
65:39:3e:e3:9f:3b:e7:81:19:52:e5:99:1c:84:e5:
02:9b:31:ef:74:75:4b:b6:4a:69:d9:06:a0:eb:8d:
bd:f9:db:c0:33:1f:30:41:40:29:29:d4:c5:99:17:
43:56:0f:e6:a1:bb:59:f8:8d:c9:88:3d:7a:a8:fb:
96:f0:fd:4c:d2:26:4a:0a:67:59:5c:8a:dc:43:0e:
03:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DF:EC:DA:35:AC:C9:9F:3C:86:97:0E:7D:0F:96:10:B4:0D:BF:60
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.9.0/24
143.14.11.0/24
143.14.36.0/24
143.14.200.0/24
143.14.229.0/24
162.141.142.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d0:14:99:cb:86:5f:73:85:0a:09:2b:4c:9e:0b:85:8f:f5:
d0:03:67:00:6c:3f:cc:a7:24:8e:3c:8b:c8:ed:64:80:a4:cc:
4d:e0:76:a0:b1:9c:9c:8c:43:62:0d:39:08:8f:8e:ac:67:bf:
75:5f:d2:27:b9:80:2c:e5:ae:0e:61:90:7e:66:53:97:25:0d:
44:0c:0d:11:4e:98:e5:48:9e:e3:6a:b5:49:fd:fd:e4:a7:92:
a1:81:f1:bd:2b:ee:b7:5b:f6:44:a0:ff:32:7f:58:b8:42:d3:
e7:a3:ed:7f:2f:d2:bf:67:8c:78:79:87:d7:27:eb:fb:dd:de:
65:f5:75:a2:a4:b2:b2:b8:c8:b7:f4:d5:f1:ae:8c:d9:b1:57:
99:5b:aa:e7:90:70:bb:50:a2:0d:a2:4b:f6:0c:f6:97:c2:c6:
13:0d:f6:5d:b8:a0:54:46:07:4f:ad:7a:5e:75:b3:63:68:ee:
3f:d7:ea:db:db:df:87:92:11:c8:fd:12:62:19:37:6f:0c:4f:
cd:e8:54:1a:5c:ec:1f:2a:9f:bb:45:1d:92:09:5c:e3:a8:79:
64:88:7b:2a:0a:00:36:ab:1d:4b:73:41:48:cf:6b:d2:96:6d:
5c:69:9a:03:75:df:2d:f9:67:c7:7f:6a:1c:bb:97:b5:d2:9b:
f7:1e:92:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:11:35 2026 by rpki-client