
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53107.roa
File: AS53107.roa (raw, json)
Hash identifier: HP+IdcFAWypF9/TXxUIAT+hIG/2gwx1dqujPfE9Y5n8=
Subject key identifier: EB:26:4D:4D:C9:31:77:36:BB:34:A7:A6:C3:6E:3C:66:11:DE:F2:04
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 43236A52F71691EC1E40CF5556136FD2AFC7DB03
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53107.roa
Signing time: Thu 02 Oct 2025 18:16:30 +0000
ROA not before: Thu 02 Oct 2025 18:11:30 +0000
ROA not after: Thu 01 Oct 2026 18:16:30 +0000
asID: 53107
IP address blocks: 143.14.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:23:6a:52:f7:16:91:ec:1e:40:cf:55:56:13:6f:d2:af:c7:db:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 2 18:11:30 2025 GMT
Not After : Oct 1 18:16:30 2026 GMT
Subject: CN=EB264D4DC9317736BB34A7A6C36E3C6611DEF204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:a1:f2:d1:de:62:af:31:66:fe:9a:f4:d6:
9b:d7:2a:da:03:bd:9c:22:db:ba:fe:4a:42:51:24:
6f:8b:9c:3a:dc:98:db:e6:88:cd:e8:e6:8c:ab:28:
11:b5:0a:8e:42:de:59:43:55:da:4b:ac:d9:08:eb:
8f:7b:82:7d:d2:c3:ee:bd:53:40:2c:b6:c7:d0:2e:
73:3b:83:7a:1d:c3:68:b6:27:2a:6b:c5:50:0b:a0:
04:3b:a3:ba:a8:48:e7:5a:bb:98:ef:72:b9:ea:77:
d2:41:5c:a4:c6:b7:6c:a2:eb:9d:41:b4:74:94:2f:
ee:9f:ef:57:37:89:4a:ca:e3:cb:0b:4f:9b:f1:e5:
d2:88:35:8d:f0:61:65:a1:48:79:ae:8b:94:18:0f:
32:07:5d:20:c9:39:94:86:d7:a3:0b:d4:f7:d4:d9:
a2:b5:59:0b:8e:82:81:60:af:d3:cf:b9:f0:ca:a9:
dc:9d:ac:ae:da:fa:d7:31:01:8f:4d:d1:1c:2a:9c:
32:97:af:c4:41:a1:89:5c:c2:76:db:7a:cc:26:7c:
ee:34:04:7a:9c:e8:d8:11:1f:ee:2c:eb:36:b9:e0:
be:39:75:2b:5b:90:bb:6d:6a:29:b4:ac:4f:c8:3b:
00:b0:df:be:97:84:a5:fa:1c:13:ba:b9:f5:41:0d:
8f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:26:4D:4D:C9:31:77:36:BB:34:A7:A6:C3:6E:3C:66:11:DE:F2:04
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53107.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.244.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:38:a9:b2:d3:d4:de:71:b5:8e:8b:bc:37:d8:f0:0f:ed:a0:
ff:73:10:a5:d5:c2:f5:1c:ea:93:8b:2c:89:7c:17:3d:5d:ac:
63:b5:73:05:e5:20:06:d3:0b:e6:aa:b0:a9:77:5f:26:42:20:
6e:d9:b9:c5:09:d9:23:5b:e5:f7:8f:05:a5:b8:5f:69:f9:5e:
c2:95:95:1c:48:8d:a2:e4:b6:cf:63:f2:1e:46:47:69:8e:06:
c2:08:a3:e8:20:b9:cc:9a:23:8b:fd:69:70:09:a6:0a:13:35:
85:80:9b:3a:c0:5f:31:c5:ed:3f:e6:f5:5e:0e:fa:16:2d:44:
9f:db:1c:47:7b:14:b9:54:48:57:f5:ad:cc:32:b5:4c:47:cf:
5f:5b:bf:f9:04:b6:ad:5b:cd:e5:db:77:38:59:96:d3:8d:1c:
a0:a7:d3:11:a2:4b:dd:a4:f0:a2:b5:c4:11:f9:34:06:19:c5:
ea:3c:d4:51:5c:68:07:6f:57:37:1e:0d:0e:38:d4:83:e5:77:
86:ff:70:4b:3f:f6:26:65:d1:18:1d:3c:1a:85:2e:75:09:63:
f0:a1:f3:28:c3:04:19:a3:63:3f:0a:60:be:7c:8c:d2:f6:eb:
5c:8d:00:3e:9e:9d:0f:7d:9c:99:33:03:12:4f:93:32:10:7f:
0d:b6:49:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:32:30 2025 by rpki-client