Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135402.roa
File: AS135402.roa (raw, json)
Hash identifier: 9QFj+XeETKdAMkYpUiXsnO5YG+lv5Ye7gy5rnnx3/Zk=
Subject key identifier: 70:3F:7B:3B:91:CC:E2:23:9F:D4:15:54:D4:72:57:BD:B7:2D:7E:17
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 541B1D532684145AB4EC7FF271DDCA89569382EB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135402.roa
Signing time: Thu 12 Feb 2026 08:23:19 +0000
ROA not before: Thu 12 Feb 2026 08:18:19 +0000
ROA not after: Thu 11 Feb 2027 08:23:19 +0000
asID: 135402
IP address blocks: 143.14.159.0/24 maxlen: 24
146.103.0.0/24 maxlen: 24
162.141.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:1b:1d:53:26:84:14:5a:b4:ec:7f:f2:71:dd:ca:89:56:93:82:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 12 08:18:19 2026 GMT
Not After : Feb 11 08:23:19 2027 GMT
Subject: CN=703F7B3B91CCE2239FD41554D47257BDB72D7E17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:71:a2:b0:7e:54:c6:6d:11:f2:fb:98:af:
20:39:20:74:70:7f:21:06:2f:ad:af:e4:0c:88:c9:
1e:66:ac:e2:02:09:3d:45:f2:60:66:a3:78:bc:9d:
77:b1:d7:01:fe:f2:39:02:46:28:25:07:5d:ca:58:
95:43:1e:89:a0:92:8a:23:30:8f:d5:52:37:54:d5:
9e:c3:29:d3:5a:da:2e:a0:34:62:60:e9:f1:21:db:
9b:01:41:e1:39:ad:b8:21:fc:76:e9:dd:4c:45:a0:
4f:9e:41:62:b6:27:7f:91:b3:8f:5b:f6:3f:7d:8e:
95:2a:ee:e2:b8:22:30:a5:bc:8a:9e:00:51:98:c0:
9f:87:18:af:2c:c0:b0:06:28:bd:67:e0:26:99:84:
93:f8:2a:f8:41:05:d8:79:4b:ab:2c:bf:01:17:18:
e6:c8:8d:ed:5d:71:27:58:60:7b:90:0c:8a:24:84:
ba:de:a3:3c:83:c5:2a:f6:f0:3c:87:6f:ac:d1:ad:
ad:aa:18:35:f3:19:63:4c:35:83:a8:ad:23:0b:55:
b1:5a:26:ea:63:4c:26:eb:65:9b:ee:bb:b0:62:90:
8f:68:5d:3b:58:cf:f0:c8:77:e5:cf:81:a4:d4:61:
a4:10:48:35:74:df:c8:17:09:48:ee:96:0d:4b:fb:
e6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3F:7B:3B:91:CC:E2:23:9F:D4:15:54:D4:72:57:BD:B7:2D:7E:17
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.159.0/24
146.103.0.0/24
162.141.94.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:75:d3:59:bc:be:5c:7e:3a:ea:e3:c2:c3:6f:70:80:52:3e:
35:44:22:45:15:ef:b2:83:23:8f:b4:db:40:47:47:b7:7e:b9:
40:7c:83:76:0b:88:57:9c:44:23:7b:d9:28:d0:de:0c:f6:f9:
98:e1:da:cf:50:7e:4f:a7:7b:13:7c:cb:3b:55:94:cc:90:9c:
ef:1b:fb:73:da:39:38:f0:27:3a:11:13:ae:94:ad:da:79:7f:
b7:80:17:8a:e7:11:d2:40:96:d3:22:da:bf:78:0f:9a:7e:74:
a9:3d:ba:29:bf:81:a9:1b:8a:0f:e7:a7:f0:cb:bc:09:5d:81:
08:2e:de:25:a2:80:09:d7:87:4c:85:dc:76:ba:2b:70:09:33:
e9:0a:c7:ce:1c:54:a8:be:ff:44:27:77:94:3a:73:04:14:c0:
e4:eb:8e:39:94:ec:d9:cf:83:e7:c8:34:67:6f:3a:92:89:6c:
67:4b:90:fd:05:ea:bc:03:d2:97:b6:66:63:97:80:c2:aa:d3:
ba:22:b8:64:1a:f0:f3:91:4c:4c:01:03:64:b7:22:fe:66:51:
2f:80:79:28:28:b4:4c:d3:ff:ff:86:ee:27:c4:e6:95:65:6d:
47:06:39:36:5f:16:fb:0c:a2:08:32:84:73:db:84:49:64:b5:
36:38:cf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:53:01 2026 by rpki-client