Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS146996.roa
File: AS146996.roa (raw, json)
Hash identifier: zOMt/yj7W4O++5//F6CUJbc/nU95fnFHkuF4CBM6EiM=
Subject key identifier: A0:29:40:44:99:33:A6:25:95:D9:D4:B0:21:62:D7:D2:1B:A8:6A:E7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1D5E3A4B6A078B480FBB2E715F84A9B9FCFA8BFF
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS146996.roa
Signing time: Tue 01 Sep 2026 09:54:10 +0000
ROA not before: Tue 01 Sep 2026 09:49:10 +0000
ROA not after: Tue 31 Aug 2027 09:54:10 +0000
asID: 146996
IP address blocks: 143.14.4.0/24 maxlen: 24
143.14.5.0/24 maxlen: 24
143.14.77.0/24 maxlen: 24
168.222.2.0/24 maxlen: 24
168.222.16.0/24 maxlen: 24
168.222.20.0/24 maxlen: 24
168.222.21.0/24 maxlen: 24
168.222.22.0/24 maxlen: 24
168.222.27.0/24 maxlen: 24
168.222.28.0/24 maxlen: 24
168.222.29.0/24 maxlen: 24
168.222.55.0/24 maxlen: 24
168.222.60.0/24 maxlen: 24
168.222.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:5e:3a:4b:6a:07:8b:48:0f:bb:2e:71:5f:84:a9:b9:fc:fa:8b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 1 09:49:10 2026 GMT
Not After : Aug 31 09:54:10 2027 GMT
Subject: CN=A02940449933A62595D9D4B02162D7D21BA86AE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5b:fa:74:47:f5:0d:0c:a8:5f:c2:e6:19:15:
80:5d:09:3f:63:c4:f5:2b:b4:df:2d:30:c7:99:bb:
a9:78:3f:5f:e8:25:f7:05:4e:41:53:63:c0:b4:f9:
44:5f:74:8e:c1:68:34:f9:9c:76:2f:7b:69:e7:88:
14:d6:4b:69:83:12:6c:74:a9:da:e8:bd:fe:38:34:
64:06:dd:ae:4f:e5:cd:58:e5:1c:e8:27:9a:a7:b2:
6e:2d:92:f6:75:6b:7b:59:8c:11:67:fa:4a:c0:60:
67:1d:b0:ab:f2:46:37:21:f9:1f:42:d0:8f:b2:52:
56:ce:cf:0f:18:bc:e5:0e:38:29:71:37:51:6f:df:
f5:38:13:88:3e:5f:ce:d6:1a:b5:3a:cb:4c:b1:06:
fa:31:33:3f:10:cb:7b:45:1c:e9:9d:84:3f:e4:6e:
3d:fb:23:63:22:ab:29:b5:1b:26:40:fa:61:01:87:
ae:aa:f0:0a:12:ad:7d:59:bb:82:ff:0d:89:70:af:
44:53:2c:a1:08:66:e8:7f:9e:62:04:c2:1a:8c:78:
4d:39:12:44:5c:d3:f9:9b:06:39:4a:3b:3a:b9:11:
09:9a:40:8d:89:8e:5a:7a:54:60:6c:e7:f2:c6:93:
53:99:f2:d8:cb:48:a0:5d:92:4a:05:48:8f:80:d2:
e3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:29:40:44:99:33:A6:25:95:D9:D4:B0:21:62:D7:D2:1B:A8:6A:E7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS146996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.4.0/23
143.14.77.0/24
168.222.2.0/24
168.222.16.0/24
168.222.20.0-168.222.22.255
168.222.27.0-168.222.29.255
168.222.55.0/24
168.222.60.0/24
168.222.88.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:5b:e4:db:73:96:6e:66:6c:ee:5c:85:f5:39:fe:dd:f6:8b:
f9:96:96:98:a2:ee:96:06:fb:a8:1f:8f:6d:bb:f4:34:6a:58:
62:9c:29:a4:0e:99:8a:8d:bc:b0:6d:6b:0a:ef:24:07:3b:da:
ad:b4:ab:9f:15:b6:63:34:bf:ce:05:cc:d7:59:c6:b5:7d:9b:
9d:c7:a1:3e:74:bc:3b:61:15:c5:8f:5e:ad:ca:e8:8f:b2:6c:
0a:21:f4:dd:84:e5:d8:a9:45:44:3a:71:a3:06:87:1d:d1:4a:
e5:73:10:2b:a9:23:33:7d:bd:a9:43:c2:85:58:4e:98:6b:09:
a1:70:d5:dc:aa:e1:99:32:fc:ed:91:90:37:75:11:c6:dd:d4:
88:c6:12:23:f7:f1:41:6b:d2:3e:19:27:93:cc:6a:c0:52:49:
08:e3:8a:63:cc:52:1c:a9:69:68:0c:07:f9:20:13:e8:e1:48:
00:f9:68:18:c7:67:52:dc:f5:d8:50:76:cf:74:b5:f4:6a:96:
74:60:08:c5:b6:ae:bf:6d:cf:f3:2c:ed:e5:6f:79:bc:4b:62:
02:db:69:d6:52:60:94:b2:01:e6:0b:10:8f:35:ad:15:4b:fc:
ca:c6:3d:64:49:86:11:ea:dc:2b:1b:44:72:13:6e:da:af:64:
49:86:2a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:02:58 2026 by rpki-client