Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa
File: AS153996.roa (raw, json)
Hash identifier: kM6DXTRgCvxq7S6EoyG/tNHvsQCy2wZxZl6pD+b//Eg=
Subject key identifier: 60:13:20:47:A3:31:B6:65:23:74:CA:8C:FA:7B:2B:B0:4A:A3:9C:31
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 17FDA03B5EB75BD48AB4EE0FDE5A5A55F8DBCB00
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa
Signing time: Wed 09 Sep 2026 18:02:41 +0000
ROA not before: Wed 09 Sep 2026 17:57:41 +0000
ROA not after: Wed 08 Sep 2027 18:02:41 +0000
asID: 153996
IP address blocks: 143.14.9.0/24 maxlen: 24
143.14.11.0/24 maxlen: 24
143.14.36.0/24 maxlen: 24
143.14.147.0/24 maxlen: 24
143.14.200.0/24 maxlen: 24
162.141.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:fd:a0:3b:5e:b7:5b:d4:8a:b4:ee:0f:de:5a:5a:55:f8:db:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 9 17:57:41 2026 GMT
Not After : Sep 8 18:02:41 2027 GMT
Subject: CN=60132047A331B6652374CA8CFA7B2BB04AA39C31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:31:6b:99:5f:c7:06:7d:d1:8a:47:8a:25:
27:c1:9b:ad:07:90:87:3b:8a:32:8c:71:93:3b:a6:
e9:59:0d:b0:61:c6:ca:0c:a6:20:f8:22:f7:3c:96:
56:58:e2:46:aa:3f:2e:2e:d2:a2:a6:6f:c2:65:0e:
49:53:eb:93:40:9b:35:aa:f6:34:94:8c:4d:ec:43:
26:85:f6:7e:5b:08:d9:cb:8b:41:2f:bb:d5:d2:03:
0b:50:37:49:3b:b4:34:51:2b:5d:d5:8b:ae:d9:06:
9c:2b:b1:03:6a:9c:69:a1:e6:c5:da:8c:83:7f:bb:
9b:91:de:82:f6:6a:89:89:64:77:05:9e:55:28:4a:
ee:d6:2d:4f:fa:b8:a0:c4:57:5c:02:da:8d:45:f6:
28:13:97:f7:e2:13:15:b3:13:05:61:e4:30:52:ee:
68:14:c9:c1:fc:e4:9c:5a:17:32:77:58:ce:74:20:
23:94:7f:f9:e7:07:2f:43:d9:ab:c1:c3:69:d7:7f:
c9:cf:3b:28:88:a9:f1:09:11:b2:0e:6a:26:3c:b0:
81:d3:2d:36:b2:f9:c4:ba:36:33:51:e0:39:2e:4d:
a7:36:1a:04:11:a0:67:d4:92:92:82:db:e7:9e:24:
11:9e:43:62:5a:1b:04:b6:ce:1e:b9:29:fd:69:e5:
c3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:13:20:47:A3:31:B6:65:23:74:CA:8C:FA:7B:2B:B0:4A:A3:9C:31
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.9.0/24
143.14.11.0/24
143.14.36.0/24
143.14.147.0/24
143.14.200.0/24
162.141.142.0/24
Signature Algorithm: sha256WithRSAEncryption
06:19:e4:0e:58:6b:39:94:2e:81:bc:7b:e8:e7:ff:d9:ca:36:
49:a2:70:1a:d9:a6:86:a2:a0:08:57:38:c4:6d:21:2e:21:f1:
78:81:07:b0:d3:a0:f3:a3:ac:35:b5:71:e4:ec:a2:6d:0b:f5:
85:a1:4b:4a:f5:5f:d6:c9:59:5f:fa:75:ba:47:f0:4f:f1:32:
da:37:5a:fd:6a:76:e1:d2:80:b1:ea:c4:ca:dc:1d:fc:fb:76:
8e:3e:d3:bd:3d:23:be:de:c4:86:dc:04:de:ce:a4:21:ef:be:
29:29:3e:83:bb:d2:66:36:b4:df:e5:d7:65:18:db:4e:5d:fd:
8d:9d:ff:9e:a1:64:05:a0:18:e3:08:0b:55:10:f2:87:27:31:
3a:35:ed:d1:35:82:08:2f:e3:23:af:99:50:45:0c:dd:01:30:
65:e0:16:8d:9c:7a:21:60:87:6f:81:67:52:cb:5f:bf:77:26:
82:95:4c:1b:2e:84:de:78:a1:07:aa:80:ec:cf:35:19:3b:1b:
0b:14:36:0e:ed:f8:82:56:35:b9:22:88:51:c8:ac:46:c7:e2:
d4:10:d4:a8:4c:3c:9e:4c:4f:83:fd:7e:cd:1a:58:2e:15:f2:
97:e0:93:04:58:c4:f3:d7:24:89:9a:05:a6:35:b1:9d:d9:76:
37:8a:0c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:06:06 2026 by rpki-client