Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS132359.roa
File: AS132359.roa (raw, json)
Hash identifier: xwnKtntweLjtQHBKtsyfOKYjj0HewsDlrxFTJRH9DQk=
Subject key identifier: E7:42:4E:52:7B:2B:9C:F9:73:1A:B5:DC:71:62:98:87:90:C8:30:63
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1CFD0E62094C8BF617628B6ABA077494E57E131E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS132359.roa
Signing time: Thu 11 Jun 2026 07:45:03 +0000
ROA not before: Thu 11 Jun 2026 07:40:03 +0000
ROA not after: Thu 10 Jun 2027 07:45:03 +0000
asID: 132359
IP address blocks: 143.14.91.0/24 maxlen: 24
162.141.158.0/24 maxlen: 24
167.148.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:fd:0e:62:09:4c:8b:f6:17:62:8b:6a:ba:07:74:94:e5:7e:13:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 11 07:40:03 2026 GMT
Not After : Jun 10 07:45:03 2027 GMT
Subject: CN=E7424E527B2B9CF9731AB5DC7162988790C83063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:06:13:5d:6d:8a:b4:a8:f2:35:2e:17:96:
9d:a2:5d:88:2c:47:6f:34:dc:6b:ad:b8:a7:57:eb:
1f:1b:ef:65:8d:df:44:17:7f:0b:ee:97:14:f9:ae:
51:5a:7e:a9:03:94:c3:45:60:4b:b1:7d:c4:b9:a4:
9e:a2:b1:45:d8:b1:10:43:61:a9:1f:a8:58:55:a2:
9d:cc:b0:be:1f:fe:bb:4a:14:9c:90:4d:6f:55:29:
be:6c:52:1c:e7:a9:c8:76:03:39:0f:3c:2c:53:af:
57:2a:45:8e:cb:c9:8b:a6:ed:ff:ba:84:03:65:7c:
34:41:d5:36:bd:fa:1b:cb:72:fd:1d:6e:58:5b:6f:
e1:49:70:08:b6:60:22:15:a6:c0:f2:6e:38:fc:3c:
cb:98:59:2f:d5:36:83:69:6a:c1:d3:e8:56:97:88:
71:8c:a6:a3:58:68:dd:86:07:25:e6:21:e8:f8:c8:
8a:11:08:5f:09:73:03:f4:c4:96:43:b0:22:3f:f5:
09:b7:9a:64:2c:22:d2:d8:e4:35:bf:ad:92:5d:c7:
e1:77:27:f9:32:1e:43:4b:1d:7f:3a:b4:3e:45:e9:
50:4a:cb:0d:b7:94:be:3c:7b:68:00:61:04:1c:a7:
3c:61:c7:37:36:bf:ca:7c:4b:2b:cc:de:f7:50:ee:
b8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:42:4E:52:7B:2B:9C:F9:73:1A:B5:DC:71:62:98:87:90:C8:30:63
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS132359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.91.0/24
162.141.158.0/24
167.148.119.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:80:ad:54:1c:24:e0:87:fa:e2:6b:53:ff:3c:99:b3:e5:7d:
cc:43:1c:40:2b:d1:93:a7:65:27:f4:85:ea:d1:59:ab:27:92:
41:0b:ff:43:5e:c7:ed:70:42:ed:5a:5c:73:7f:94:8a:a3:29:
17:59:b0:3e:ee:ef:b2:35:ed:50:a2:06:48:59:e5:1a:41:15:
3c:14:0a:b8:36:5a:e1:73:05:83:18:74:fb:4f:e5:6d:7f:d4:
6b:b1:3e:c1:4d:a6:27:b1:f0:4d:7e:a8:59:26:b2:09:58:70:
bf:21:94:c1:94:71:25:01:f2:f5:1a:31:56:cf:24:06:d2:4f:
29:8f:1f:aa:f7:2a:8f:00:ac:82:0e:11:75:f4:05:0e:1d:bf:
9f:e0:c4:65:32:17:a7:18:24:95:d7:f9:37:78:ac:60:11:5c:
f9:41:16:6e:e7:ea:82:44:34:e5:39:f9:9e:fd:9f:b0:22:9b:
cc:bd:d0:5a:1c:95:41:f0:ec:e5:76:03:00:5e:26:a1:b7:e5:
b2:93:5b:a7:b7:f5:da:67:1b:09:10:bd:ad:75:02:ea:c4:7c:
b3:8e:8c:88:31:bc:21:25:b8:ee:54:40:49:97:fa:a9:b6:1a:
e1:e7:b2:08:a1:cf:12:da:a7:f9:c0:ac:f2:aa:d2:c6:b2:ea:
e1:df:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:34:59 2026 by rpki-client