Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135402.roa
File: AS135402.roa (raw, json)
Hash identifier: +p2b5jbOkRy5wS6ZLvvAUv7gk+ELLZk2bgWQ/woQgjA=
Subject key identifier: 8B:A0:EB:95:52:5A:CB:EA:21:B8:CA:F0:58:2C:34:65:74:7C:BE:A5
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7B74964E724A67ECC2B82346C66F8541F1835D27
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135402.roa
Signing time: Sat 25 Oct 2025 00:09:30 +0000
ROA not before: Sat 25 Oct 2025 00:04:30 +0000
ROA not after: Sat 24 Oct 2026 00:09:30 +0000
asID: 135402
IP address blocks: 143.14.159.0/24 maxlen: 24
146.103.0.0/24 maxlen: 24
162.141.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:74:96:4e:72:4a:67:ec:c2:b8:23:46:c6:6f:85:41:f1:83:5d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 25 00:04:30 2025 GMT
Not After : Oct 24 00:09:30 2026 GMT
Subject: CN=8BA0EB95525ACBEA21B8CAF0582C3465747CBEA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:d2:b0:cf:90:0f:58:78:24:23:74:ee:6e:
eb:d4:79:f9:43:09:41:7c:63:3c:30:bb:8b:b4:b2:
de:aa:f3:78:f1:b0:1a:42:4c:68:e6:57:7f:da:9a:
c9:f4:b0:b7:bd:d1:ed:fb:84:c7:bd:f2:db:90:b8:
f5:26:19:b7:fd:c6:b0:41:b8:23:f6:b7:4f:8c:d8:
39:fb:05:f1:ed:e9:92:ef:f9:8d:31:82:45:3d:0a:
f3:7f:d8:1d:c7:86:53:e5:45:04:71:71:25:15:d0:
16:c9:a2:76:1b:38:d7:88:a9:0b:1b:91:7e:37:f2:
cd:1d:d4:79:01:ad:8d:cc:10:01:9f:c1:9e:b5:73:
34:d2:01:48:ca:b4:95:88:13:31:f0:ce:c7:01:ac:
d6:d0:e4:58:0c:58:33:00:7b:99:6a:ad:05:68:05:
69:60:93:96:42:b0:c0:ef:13:be:39:7a:bd:dc:77:
1d:ee:05:45:66:92:9f:48:21:d1:20:ce:34:7a:32:
ff:5e:00:19:3f:cd:e1:92:33:6c:42:b3:7d:24:e3:
62:ab:3f:b3:84:c3:97:d7:65:e6:77:87:04:35:8c:
89:27:bc:8c:d2:ba:a3:df:e1:2b:fd:0a:1c:4c:a6:
6e:36:49:4f:93:d4:e8:57:26:3f:c3:f0:0c:60:44:
43:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A0:EB:95:52:5A:CB:EA:21:B8:CA:F0:58:2C:34:65:74:7C:BE:A5
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.159.0/24
146.103.0.0/24
162.141.94.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d2:6f:99:ac:dd:43:1d:74:a1:40:4b:e2:fb:05:e6:ec:8c:
66:db:c3:9b:28:96:4e:5f:0e:6f:9b:1b:78:3d:e8:e2:e2:8d:
7f:eb:0a:dd:aa:ef:9d:cd:97:45:20:db:1b:ba:ea:a4:fe:af:
96:3f:22:2c:8a:fb:95:32:6f:ce:ab:c4:a0:87:7d:e5:81:8d:
48:54:bd:94:c2:43:63:6c:2c:a4:3f:ff:9d:10:e3:5c:db:5e:
c3:02:5c:af:24:b3:9f:fe:32:01:85:1f:03:83:e3:7e:01:18:
54:48:2b:64:9a:eb:a5:f6:9d:64:51:ef:cc:ed:c3:0b:59:be:
6d:df:a1:c5:58:e6:af:c7:b6:02:78:e6:d3:89:fd:83:8f:ee:
58:7d:7f:95:3b:01:5f:97:ea:3c:2a:85:e9:89:cb:5d:3a:f6:
fc:f5:1b:52:37:cf:af:87:24:82:ad:54:db:43:72:d0:d7:62:
db:fd:dd:fe:17:fc:c6:2b:6f:b6:53:6c:08:aa:84:b9:76:17:
dc:f1:39:f0:19:d7:78:81:db:da:7e:5c:3e:1a:a8:e0:83:9c:
e4:85:f5:e2:bc:66:de:46:5d:aa:b0:4a:08:14:8d:17:7a:7a:
ec:35:97:b4:6e:33:05:c8:83:a8:89:38:7b:46:e5:66:4e:f5:
3b:14:7f:15
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUe3SWTnJKZ+zCuCNGxm+FQfGDXScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTEwMjUwMDA0MzBaFw0yNjEwMjQwMDA5MzBaMDMxMTAvBgNV
BAMTKDhCQTBFQjk1NTI1QUNCRUEyMUI4Q0FGMDU4MkMzNDY1NzQ3Q0JFQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJxtKwz5APWHgkI3TubuvUeflD
CUF8Yzwwu4u0st6q83jxsBpCTGjmV3/amsn0sLe90e37hMe98tuQuPUmGbf9xrBB
uCP2t0+M2Dn7BfHt6ZLv+Y0xgkU9CvN/2B3HhlPlRQRxcSUV0BbJonYbONeIqQsb
kX438s0d1HkBrY3MEAGfwZ61czTSAUjKtJWIEzHwzscBrNbQ5FgMWDMAe5lqrQVo
BWlgk5ZCsMDvE745er3cdx3uBUVmkp9IIdEgzjR6Mv9eABk/zeGSM2xCs30k42Kr
P7OEw5fXZeZ3hwQ1jIknvIzSuqPf4Sv9ChxMpm42SU+T1OhXJj/D8AxgREOZAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUi6DrlVJay+ohuMrwWCw0ZXR8vqUwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTM1NDAyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjw6f
AwQAkmcAAwQAoo1eMA0GCSqGSIb3DQEBCwUAA4IBAQBM0m+ZrN1DHXShQEvi+wXm
7Ixm28ObKJZOXw5vmxt4Peji4o1/6wrdqu+dzZdFINsbuuqk/q+WPyIsivuVMm/O
q8Sgh33lgY1IVL2UwkNjbCykP/+dEONc217DAlyvJLOf/jIBhR8Dg+N+ARhUSCtk
muul9p1kUe/M7cMLWb5t36HFWOavx7YCeObTif2Dj+5YfX+VOwFfl+o8KoXpictd
Ovb89RtSN8+vhySCrVTbQ3LQ12Lb/d3+F/zGK2+2U2wIqoS5dhfc8TnwGdd4gdva
flw+Gqjgg5zkhfXivGbeRl2qsEoIFI0XenrsNZe0bjMFyIOoiTh7RuVmTvU7FH8V
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:32:29 2025 by rpki-client