Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153169.roa
File: AS153169.roa (raw, json)
Hash identifier: 12wfSMtdbreKr1r7JTP4W96oVzU/UnjsA4/SmZoobrM=
Subject key identifier: D6:80:34:EB:01:4C:1E:EB:34:D1:5A:CE:7C:F1:59:5F:EB:A4:5E:20
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4D34B5711514C561A3708CAF797761301E4CDB4C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153169.roa
Signing time: Mon 25 May 2026 07:29:43 +0000
ROA not before: Mon 25 May 2026 07:24:43 +0000
ROA not after: Mon 24 May 2027 07:29:43 +0000
asID: 153169
IP address blocks: 143.14.33.0/24 maxlen: 24
167.148.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:34:b5:71:15:14:c5:61:a3:70:8c:af:79:77:61:30:1e:4c:db:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 25 07:24:43 2026 GMT
Not After : May 24 07:29:43 2027 GMT
Subject: CN=D68034EB014C1EEB34D15ACE7CF1595FEBA45E20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:a1:24:ff:29:14:61:f1:a3:55:73:d8:60:
e9:2e:8e:10:15:b8:54:85:84:ff:7d:b6:71:16:21:
14:b3:67:98:85:5e:b9:8a:51:ea:a7:f9:e5:45:b1:
2c:27:8d:e6:73:80:cf:f4:71:09:0e:d4:8a:de:6a:
4b:80:89:e1:ba:4e:b8:98:ee:80:4b:c8:3e:33:e2:
cf:50:2d:41:e5:04:33:e2:7c:0b:37:1c:d7:b9:1c:
86:d6:89:f2:f5:54:d2:c6:94:b1:30:f4:66:72:e3:
ed:56:e8:d2:05:7a:1a:ec:e1:02:49:54:30:1e:ad:
7d:14:7c:13:da:3b:df:ad:6d:49:28:47:d7:9d:55:
6d:d9:3b:5a:f6:2f:e4:7d:79:f7:47:9a:e8:91:c0:
28:25:e6:ef:1f:54:0b:48:81:8e:ce:fe:ed:43:ec:
4a:76:4f:5b:0d:30:49:3b:79:42:b4:d6:a7:9c:b1:
f3:51:b8:34:d7:3c:b7:80:ab:23:16:1c:3f:75:2f:
c8:85:6b:8a:83:48:27:04:96:cd:06:53:07:4a:7c:
3b:7c:7a:f2:20:a1:e4:ab:eb:04:90:6b:05:86:cc:
f8:d6:4c:67:2c:5f:56:95:b6:47:79:eb:fb:6a:95:
6c:e8:ad:23:5f:13:fa:33:86:41:df:5c:56:6c:06:
60:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:80:34:EB:01:4C:1E:EB:34:D1:5A:CE:7C:F1:59:5F:EB:A4:5E:20
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153169.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.33.0/24
167.148.85.0/24
Signature Algorithm: sha256WithRSAEncryption
89:9b:57:3d:67:dd:1a:ab:5c:50:ed:ab:7e:6c:69:c0:64:de:
b4:52:53:3e:36:cc:ea:b3:c6:23:6c:60:f5:fb:ba:39:a0:c8:
d6:37:55:1b:97:f2:0e:1a:65:3e:e0:ba:96:c0:9f:a3:cb:ba:
a9:4a:69:1d:c7:72:a3:6b:6f:fe:da:74:8c:58:96:5e:66:87:
12:45:cc:49:16:ee:4d:8e:01:7d:63:e4:7b:2c:c8:f9:44:8c:
3e:a6:3b:db:56:a6:65:c6:d1:1b:0a:9d:e2:e0:2c:6f:c8:f9:
23:f4:e3:b3:bc:fb:a1:ef:cf:12:ff:52:fc:05:be:f0:b3:e9:
b3:e8:3e:39:07:14:ca:bf:5d:ea:18:e1:2f:50:fb:b7:0e:88:
dd:17:6f:ee:fd:d8:da:52:13:ca:cf:b0:55:26:6b:42:99:81:
c4:39:04:42:12:29:ba:bb:cb:cc:ff:16:79:46:71:8d:0a:ef:
20:d4:46:79:24:04:1a:a2:1c:81:ad:f9:b0:2b:9f:39:fc:1c:
db:52:cd:2d:89:2f:3b:67:11:5a:e2:53:03:6a:11:70:49:9b:
09:80:f5:fd:8f:a2:67:17:39:57:55:27:da:0e:90:ed:39:85:
87:a8:a5:a0:ab:62:c6:cb:0c:63:f3:02:a3:23:c2:ed:88:57:
06:cb:31:70
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUTTS1cRUUxWGjcIyveXdhMB5M20wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA1MjUwNzI0NDNaFw0yNzA1MjQwNzI5NDNaMDMxMTAvBgNV
BAMTKEQ2ODAzNEVCMDE0QzFFRUIzNEQxNUFDRTdDRjE1OTVGRUJBNDVFMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfFKEk/ykUYfGjVXPYYOkujhAV
uFSFhP99tnEWIRSzZ5iFXrmKUeqn+eVFsSwnjeZzgM/0cQkO1IreakuAieG6TriY
7oBLyD4z4s9QLUHlBDPifAs3HNe5HIbWifL1VNLGlLEw9GZy4+1W6NIFehrs4QJJ
VDAerX0UfBPaO9+tbUkoR9edVW3ZO1r2L+R9efdHmuiRwCgl5u8fVAtIgY7O/u1D
7Ep2T1sNMEk7eUK01qecsfNRuDTXPLeAqyMWHD91L8iFa4qDSCcEls0GUwdKfDt8
evIgoeSr6wSQawWGzPjWTGcsX1aVtkd56/tqlWzorSNfE/ozhkHfXFZsBmC5AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQU1oA06wFMHus00VrOfPFZX+ukXiAwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTUzMTY5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjw4h
AwQAp5RVMA0GCSqGSIb3DQEBCwUAA4IBAQCJm1c9Z90aq1xQ7at+bGnAZN60UlM+
Nszqs8YjbGD1+7o5oMjWN1Ubl/IOGmU+4LqWwJ+jy7qpSmkdx3Kja2/+2nSMWJZe
ZocSRcxJFu5NjgF9Y+R7LMj5RIw+pjvbVqZlxtEbCp3i4CxvyPkj9OOzvPuh788S
/1L8Bb7ws+mz6D45BxTKv13qGOEvUPu3DojdF2/u/djaUhPKz7BVJmtCmYHEOQRC
Eim6u8vM/xZ5RnGNCu8g1EZ5JAQaohyBrfmwK585/BzbUs0tiS87ZxFa4lMDahFw
SZsJgPX9j6JnFzlXVSfaDpDtOYWHqKWgq2LGywxj8wKjI8LtiFcGyzFw
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:04 2026 by rpki-client