Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS945.roa
File: AS945.roa (raw, json)
Hash identifier: OeXWEEsYWXdl045EjOJ/TQ1pA/+URylLkH8cSEj1Eec=
Subject key identifier: C1:9B:0B:62:0B:F1:E4:14:06:2F:29:DD:85:E9:AA:9C:E7:F5:86:B4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 07E97806D314B7BF8A72D222578BF7B2760CA636
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS945.roa
Signing time: Tue 22 Sep 2026 20:49:35 +0000
ROA not before: Tue 22 Sep 2026 20:44:35 +0000
ROA not after: Tue 21 Sep 2027 20:49:35 +0000
asID: 945
IP address blocks: 148.135.216.0/23 maxlen: 24
148.135.218.0/23 maxlen: 24
148.135.224.0/23 maxlen: 24
148.135.226.0/23 maxlen: 24
148.135.232.0/23 maxlen: 24
148.135.234.0/23 maxlen: 24
148.135.240.0/23 maxlen: 24
148.135.242.0/23 maxlen: 24
148.135.248.0/23 maxlen: 24
148.135.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:e9:78:06:d3:14:b7:bf:8a:72:d2:22:57:8b:f7:b2:76:0c:a6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 22 20:44:35 2026 GMT
Not After : Sep 21 20:49:35 2027 GMT
Subject: CN=C19B0B620BF1E414062F29DD85E9AA9CE7F586B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:51:59:dc:c0:5f:af:43:11:bf:82:a0:32:
68:a2:e9:f5:f1:41:e5:4b:c4:3d:5d:b4:6c:4b:df:
41:60:18:47:c7:18:37:cb:9e:ed:89:30:6d:6c:76:
d2:ca:5b:a3:35:93:fb:c3:5c:ed:97:9a:7e:18:8a:
9d:05:4d:08:9c:38:54:8a:50:1b:c3:fb:55:bb:89:
79:06:6e:53:cf:a9:ac:85:c0:54:6f:a8:74:15:72:
b0:b0:7f:36:52:b2:59:c8:b3:7b:05:55:ac:9a:dd:
21:de:44:d4:b6:ef:22:80:91:c6:a9:25:d0:1a:8d:
73:46:ef:4d:b8:88:c7:c1:af:56:35:ac:09:15:85:
a6:c3:41:3b:eb:ce:02:ad:8e:dc:2a:a7:08:04:93:
2e:63:30:35:50:19:c1:16:f1:0c:2e:80:19:b6:1e:
a7:c9:31:60:5f:95:45:84:4c:71:85:47:98:57:c9:
34:7c:f1:2f:c3:98:13:ab:74:75:4e:3b:87:98:58:
d1:51:b2:a6:ef:3f:a9:07:3b:cf:b9:ef:d8:4a:ae:
77:50:ce:2f:fc:b4:39:a4:80:64:70:40:48:af:2f:
70:76:91:8e:76:9d:03:4d:41:9b:31:a1:55:d0:1c:
79:c4:67:0f:93:ad:ad:67:da:13:e9:83:41:ad:1a:
4c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9B:0B:62:0B:F1:E4:14:06:2F:29:DD:85:E9:AA:9C:E7:F5:86:B4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS945.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.216.0/22
148.135.224.0/22
148.135.232.0/22
148.135.240.0/22
148.135.248.0/22
Signature Algorithm: sha256WithRSAEncryption
05:16:f0:2b:dc:5b:6d:0c:9e:bd:26:de:1f:94:34:b1:11:f3:
57:f7:82:51:e2:5b:74:24:6f:79:eb:8c:e2:b0:4d:34:a0:ca:
a3:26:e9:ed:56:e9:f5:d9:07:42:d2:59:14:d8:1b:b5:1b:92:
1d:39:cb:36:64:52:df:f5:d0:45:b3:6c:d2:91:af:06:f2:8e:
74:8a:66:ed:53:ac:f8:97:d8:60:a3:2a:2b:8e:57:42:97:e7:
85:a8:c5:e7:41:0f:36:fd:c4:c8:37:b0:5a:ea:ab:77:23:0b:
dc:9d:5a:02:aa:12:eb:34:59:27:55:e5:ee:0b:7c:58:12:82:
d6:8d:c9:19:de:10:a2:24:9d:c1:f4:cb:17:59:89:7b:5d:23:
c4:c5:a2:61:51:fe:1e:e6:78:2b:38:51:b5:1f:09:02:dc:6b:
b3:73:ac:f3:ea:89:f8:ba:fb:ea:a6:0c:a9:1f:bd:b1:cd:17:
b7:b7:85:93:ae:8e:4a:60:b4:de:b5:07:d4:c8:70:9f:fd:df:
20:3c:81:0b:81:65:81:90:0b:8f:27:a6:33:77:39:05:99:ac:
97:09:f9:e7:89:89:c9:e2:d9:9f:c2:e2:8f:c0:a9:7d:c3:4f:
e9:fc:d7:01:0d:30:85:96:f8:d1:76:d5:dc:e9:77:c2:ac:34:
33:d3:b9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:58:23 2026 by rpki-client