Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135402.roa
File: AS135402.roa (raw, json)
Hash identifier: t4PY/PaAE5/cWQvzZqU/xJf1jUODvkWritnnJB4uu9M=
Subject key identifier: FE:C6:86:3E:4A:E2:B6:70:84:57:A6:D5:B1:3A:FB:61:01:62:9E:C8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 64B72D3D95D19253A10613BE03DFC207BFA1353D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135402.roa
Signing time: Tue 29 Jul 2025 00:00:12 +0000
ROA not before: Mon 28 Jul 2025 23:55:12 +0000
ROA not after: Tue 28 Jul 2026 00:00:12 +0000
asID: 135402
IP address blocks: 143.14.141.0/24 maxlen: 24
143.14.159.0/24 maxlen: 24
146.103.0.0/24 maxlen: 24
162.141.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b7:2d:3d:95:d1:92:53:a1:06:13:be:03:df:c2:07:bf:a1:35:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 28 23:55:12 2025 GMT
Not After : Jul 28 00:00:12 2026 GMT
Subject: CN=FEC6863E4AE2B6708457A6D5B13AFB6101629EC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:cd:fb:97:3f:ca:79:ec:ad:c7:7e:b0:f9:
04:36:c2:c7:51:7f:3a:a9:ec:96:4d:95:9f:ef:fa:
35:8c:b2:85:89:37:4c:e7:b4:00:29:04:9d:ac:be:
93:94:8f:fa:a5:6d:5b:ed:33:92:ee:9b:41:cf:56:
af:e6:c2:80:3e:c7:f0:b6:4f:13:bf:60:cc:0b:93:
4b:55:a3:b4:25:2f:36:7c:62:d1:17:7a:b2:b1:87:
13:b4:b2:e5:27:37:00:9b:9f:4c:5d:a4:4b:69:9c:
05:bf:80:ea:f1:44:a1:6b:04:1b:b1:da:e9:c5:09:
04:79:bc:dd:6b:9a:54:cb:3b:16:83:87:2e:14:7c:
bb:56:19:1e:fa:b8:b5:79:e8:5b:58:ad:a6:bb:89:
4b:f7:71:34:f2:20:52:c5:a6:4d:0f:12:73:63:aa:
33:89:18:ba:b2:38:72:69:50:23:b1:1c:86:30:cb:
19:ec:ef:95:a6:f9:de:89:44:a5:8e:20:7e:52:f5:
7a:81:80:8b:2f:93:ed:5b:52:8e:27:5b:39:7d:c2:
e6:dc:0f:a3:c0:d4:bb:51:5c:90:e9:d9:06:7f:0c:
90:95:c8:2a:8f:ad:4d:a7:52:c1:d8:a1:10:58:c7:
e3:ae:0c:3d:8d:ca:16:52:df:74:bf:f7:eb:30:f2:
1e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C6:86:3E:4A:E2:B6:70:84:57:A6:D5:B1:3A:FB:61:01:62:9E:C8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.141.0/24
143.14.159.0/24
146.103.0.0/24
162.141.94.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f8:a1:f7:7d:e2:35:ff:e7:7c:e7:9c:1e:b0:a7:ad:59:64:
69:96:6a:3e:9a:61:cd:84:17:44:dd:2e:fc:c6:53:c1:cc:82:
c3:d6:97:b5:54:24:26:dd:1d:bf:9e:f7:bf:5e:c6:85:ec:63:
4b:74:63:1b:6e:ac:0b:a4:8e:cd:79:22:64:b3:f0:1c:25:fa:
ea:67:21:f6:a5:e9:45:71:41:e8:7d:71:fa:03:07:17:c0:06:
12:68:3d:e6:b2:6f:7e:7a:8e:d1:59:f3:37:6b:f6:3a:c3:ca:
6a:17:58:6c:9c:87:e6:a0:04:38:24:12:50:b5:07:6d:12:99:
9c:e0:9c:3a:65:dc:17:47:aa:aa:cf:33:a9:cd:83:e2:fe:88:
99:cc:30:50:ad:c3:65:f9:3f:02:14:4a:dd:a1:51:85:89:c6:
d5:0d:17:fb:e6:a8:93:19:47:73:3b:32:cf:19:2d:36:37:56:
7a:1f:04:61:31:53:f1:27:f1:59:e2:ec:f4:b9:e0:34:91:6d:
17:e0:a0:f2:b5:4c:77:ca:32:ba:06:9a:be:52:f9:62:00:da:
a6:78:3a:37:d0:fd:41:38:c3:fe:10:cc:19:40:c1:e9:a3:b9:
d7:bd:5f:b1:87:c4:2b:f8:d9:70:a3:e8:91:19:a2:51:bc:d5:
3d:15:7c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:43:48 2025 by rpki-client