Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS134494.roa
File: AS134494.roa (raw, json)
Hash identifier: 0Ht1tdOuxeQlSU2zhZgl0uC4Bj5sCdixiLay1i2SZho=
Subject key identifier: 5F:B1:92:DC:48:1A:74:1D:8E:DB:8A:D5:D6:11:F6:78:1B:DA:1F:D7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3E2E6423A708F3FC9527B9A7A9B0AFE5968A045C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS134494.roa
Signing time: Sat 31 Oct 2026 15:01:36 +0000
ROA not before: Sat 31 Oct 2026 14:56:36 +0000
ROA not after: Sat 30 Oct 2027 15:01:36 +0000
asID: 134494
IP address blocks: 96.62.96.0/24 maxlen: 24
147.79.8.0/24 maxlen: 24
148.135.187.0/24 maxlen: 24
150.241.201.0/24 maxlen: 24
162.141.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:2e:64:23:a7:08:f3:fc:95:27:b9:a7:a9:b0:af:e5:96:8a:04:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 31 14:56:36 2026 GMT
Not After : Oct 30 15:01:36 2027 GMT
Subject: CN=5FB192DC481A741D8EDB8AD5D611F6781BDA1FD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a7:78:a1:cd:18:e2:29:84:8d:15:67:2c:d3:
cd:1e:95:41:8a:e8:52:cd:b3:6e:58:ae:43:c4:2f:
88:7d:2b:f7:ea:b6:9c:09:5b:60:ce:8a:f4:cb:cf:
ab:05:74:7b:5d:7d:02:78:22:41:3b:d2:b7:28:02:
96:7b:79:95:1d:56:5b:69:cd:fc:10:76:69:77:f4:
eb:81:65:83:08:a1:f0:18:04:ab:b9:97:85:77:42:
d5:2b:38:d8:82:3f:de:97:81:2c:d4:36:4d:90:83:
17:b7:cc:f7:34:d1:c5:56:20:2a:44:9e:cb:75:f6:
ff:ab:0b:86:f5:70:1b:d9:e0:b4:7d:36:55:09:2e:
3d:51:f3:ea:ca:da:4c:87:1c:04:45:03:3a:35:46:
20:ef:9f:72:e3:3b:e3:98:4c:ae:ef:93:73:fc:92:
3e:c0:c8:00:93:e0:4a:2f:ec:29:75:d3:20:c3:18:
01:d2:cf:64:29:96:6b:0f:8f:4d:45:ce:ac:c9:24:
13:6f:d0:33:d3:48:84:f6:bb:62:28:a4:4d:d3:3d:
48:ac:d7:e3:59:74:d6:1a:29:40:bf:9a:f5:c6:b5:
de:69:09:7a:08:26:49:a1:70:80:0e:2b:04:c0:a7:
d9:18:d0:d5:6c:37:8b:7d:6b:5e:f0:f7:ec:5a:b0:
1a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B1:92:DC:48:1A:74:1D:8E:DB:8A:D5:D6:11:F6:78:1B:DA:1F:D7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS134494.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.96.0/24
147.79.8.0/24
148.135.187.0/24
150.241.201.0/24
162.141.105.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ea:45:9b:05:a7:ad:c0:1f:f3:5b:52:b2:80:4c:6a:69:d3:
57:1d:1f:a6:e4:5c:12:e5:0c:db:cf:42:37:62:b5:55:19:48:
c1:f0:01:a3:8f:83:15:2d:09:a1:45:c6:1a:63:b0:b8:ba:af:
35:67:25:f6:e2:0a:66:2c:7a:fe:4d:e4:f9:30:47:f5:6c:18:
14:d8:76:ee:bb:a5:07:89:5a:31:40:a7:bb:77:0e:b8:60:05:
dd:30:94:bb:a8:9a:73:f2:66:74:7e:ef:27:26:56:ae:0d:f1:
51:88:d1:ff:08:6c:3e:b2:8e:61:4e:f3:88:10:3a:df:7e:87:
15:6d:41:4e:82:56:e3:94:03:35:bb:a9:57:1a:0d:b5:7e:96:
43:2e:a2:6a:0f:bf:1c:79:d7:1f:72:65:55:ea:b8:cf:2f:a2:
39:1f:0b:44:1c:61:62:73:0d:68:a4:17:a7:88:0c:a1:a8:e0:
03:65:50:f7:6a:e0:90:a6:95:fc:01:e3:28:ff:65:0e:b5:bf:
26:a5:93:bc:41:eb:47:a6:2b:42:71:23:61:95:e3:b9:24:a7:
a7:8e:55:b6:64:8a:89:9a:9e:2b:f8:dd:d4:a3:f6:a6:53:6f:
bd:97:2e:f2:eb:13:51:24:94:2e:f8:a4:97:80:13:08:59:97:
4e:a4:9b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 13:20:02 2026 by rpki-client