Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS149981.roa
File: AS149981.roa (raw, json)
Hash identifier: /sc84oYWtKpAKdFW+H7ZlH0QJLOTd81ugr73K8f1/Sc=
Subject key identifier: 5D:00:04:C3:E5:7D:50:89:45:0D:A1:CE:24:01:7E:F7:25:D6:B0:AB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4DE039E236968E5904C2F96532872E5CED286786
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS149981.roa
Signing time: Mon 24 Aug 2026 13:49:30 +0000
ROA not before: Mon 24 Aug 2026 13:44:30 +0000
ROA not after: Mon 23 Aug 2027 13:49:30 +0000
asID: 149981
IP address blocks: 155.117.107.0/24 maxlen: 24
155.117.114.0/24 maxlen: 24
155.117.122.0/24 maxlen: 24
155.117.142.0/24 maxlen: 24
155.117.165.0/24 maxlen: 24
155.117.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:e0:39:e2:36:96:8e:59:04:c2:f9:65:32:87:2e:5c:ed:28:67:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 24 13:44:30 2026 GMT
Not After : Aug 23 13:49:30 2027 GMT
Subject: CN=5D0004C3E57D5089450DA1CE24017EF725D6B0AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:13:f1:ca:b6:95:39:00:2c:5b:8a:34:06:
5f:bc:4a:b5:8b:14:8c:48:c3:c0:e0:14:de:cf:39:
7e:8a:e0:9c:fb:ee:3b:47:ac:8a:f6:5d:00:42:78:
f1:13:59:21:f5:62:ec:ca:3a:e7:1c:98:d0:af:99:
5d:e7:2d:ad:79:08:3e:08:59:96:23:77:bb:cc:cf:
6a:65:2c:bb:9a:fa:80:0f:a7:10:a2:ef:48:20:29:
84:9d:2b:c1:79:0a:3b:12:ef:da:c5:e0:ed:78:62:
b4:54:37:c1:c9:ff:eb:40:74:9d:fb:91:6d:89:0b:
5d:5b:0b:b2:a1:42:75:e9:5f:56:b0:bd:ba:af:d2:
52:3c:07:db:55:d8:f6:3e:45:94:07:69:e9:b0:57:
59:d1:67:e3:be:2a:7b:06:cf:c2:5f:52:a0:a5:b2:
19:c3:59:39:80:64:09:5e:d4:0d:e2:e8:9f:87:a2:
49:76:57:40:ec:68:14:b9:c7:cd:c6:0d:4b:be:c9:
f4:78:8f:87:db:03:f8:e8:d9:bd:47:2d:87:4b:24:
87:0c:68:96:6a:a2:38:17:c1:0a:66:87:c4:bd:41:
7d:f8:33:f8:76:8c:4c:58:b8:62:8f:38:de:ba:09:
e2:59:2b:f0:23:20:8e:1a:25:9a:4d:c5:32:58:ac:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:00:04:C3:E5:7D:50:89:45:0D:A1:CE:24:01:7E:F7:25:D6:B0:AB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS149981.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.107.0/24
155.117.114.0/24
155.117.122.0/24
155.117.142.0/24
155.117.165.0/24
155.117.219.0/24
Signature Algorithm: sha256WithRSAEncryption
82:46:90:47:74:16:7f:8a:58:8c:30:c0:8f:cb:12:a3:92:54:
e7:1c:7b:2f:97:dd:5f:27:a3:35:20:e8:a8:1f:5e:a3:98:7d:
c4:48:06:24:d9:1e:55:55:4d:b6:6b:26:27:a8:5e:65:c0:1d:
f9:44:b0:e4:86:63:79:32:a3:21:64:f4:46:45:e3:a6:0c:ac:
35:06:1b:71:b8:46:e8:60:40:c3:c5:b3:aa:5a:22:5c:d7:61:
0a:fc:a6:f4:23:5a:8e:55:2a:49:3f:e7:f1:bf:8b:e4:39:f9:
c2:ec:b4:2b:94:0a:f4:ea:08:34:96:80:8f:fa:b3:99:91:06:
81:3d:4a:c9:d2:68:ab:e8:b9:d7:a3:01:f0:05:2e:8d:8b:88:
16:11:dd:1f:ca:a2:59:81:30:db:9b:4e:05:c9:4a:1c:6b:e2:
e8:8e:4b:d2:7f:55:cd:d2:66:e3:de:de:f1:93:bf:dd:40:33:
25:a4:b7:1c:37:29:3c:47:63:83:55:8f:e3:69:38:e4:89:2e:
62:0b:f2:4b:6c:98:78:34:72:13:71:e8:77:ac:15:c1:90:0a:
1c:9d:ca:2b:70:30:3c:a2:85:83:6e:ec:d9:79:fa:71:2e:9e:
b9:94:65:19:82:cd:9d:d1:06:ea:58:39:77:36:b4:7e:22:c6:
bd:3c:74:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:50:10 2026 by rpki-client