Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154132.roa
File: AS154132.roa (raw, json)
Hash identifier: A0aC8bmAvVYD1ztLKY8svFW916gPpF4R3FQVziD9lOM=
Subject key identifier: 64:81:6D:68:9B:F4:43:36:D2:34:76:AB:BA:DA:D6:98:E2:88:B8:74
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2EC0FE2AAE921287D0BEA86546ACA3CAFF63F836
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154132.roa
Signing time: Fri 13 Nov 2026 12:41:04 +0000
ROA not before: Fri 13 Nov 2026 12:36:04 +0000
ROA not after: Fri 12 Nov 2027 12:41:04 +0000
asID: 154132
IP address blocks: 162.141.24.0/24 maxlen: 24
162.141.144.0/24 maxlen: 24
162.141.168.0/24 maxlen: 24
162.141.248.0/24 maxlen: 24
167.148.64.0/24 maxlen: 24
167.148.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c0:fe:2a:ae:92:12:87:d0:be:a8:65:46:ac:a3:ca:ff:63:f8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 13 12:36:04 2026 GMT
Not After : Nov 12 12:41:04 2027 GMT
Subject: CN=64816D689BF44336D23476ABBADAD698E288B874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:40:ab:e6:cc:dc:d4:46:d5:2f:c5:f8:bc:
35:08:01:c5:2f:ca:14:8c:c0:39:74:bc:06:4c:8e:
79:94:70:27:a4:cb:04:93:10:39:f0:35:a0:5a:c1:
2b:34:4b:12:00:8a:01:18:50:7b:1d:ef:b0:4f:71:
68:6b:7b:7d:09:0a:1b:6a:3d:d2:ab:05:9b:7e:b2:
76:35:17:98:be:81:79:32:69:91:f7:4a:a9:81:24:
77:85:3d:33:97:8d:ab:da:58:92:52:07:be:d5:5a:
f5:a1:50:c5:fa:bc:59:20:fe:c1:c5:ea:6b:e2:8e:
af:33:42:da:be:c1:db:01:0b:76:e5:39:de:b0:d7:
80:d3:79:6b:9e:be:9f:a7:7c:e8:84:69:0c:92:d5:
01:dd:92:a1:17:26:5c:d8:08:d5:a8:13:a9:1f:90:
98:4c:6d:cc:09:cf:5e:2e:c9:d3:4b:d1:ab:64:db:
33:ed:82:c7:15:1e:4a:ec:af:0e:c1:b0:3a:fb:31:
61:9c:23:a9:f3:08:4a:53:d2:a9:ae:c0:c5:e5:89:
51:2f:6d:ef:ac:6a:31:eb:25:5a:f5:bc:30:18:82:
af:46:45:62:04:34:db:c5:7e:1c:c1:e8:83:47:0d:
55:d5:ef:40:d7:8c:f8:7c:60:64:8b:cb:04:37:87:
1f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:81:6D:68:9B:F4:43:36:D2:34:76:AB:BA:DA:D6:98:E2:88:B8:74
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.24.0/24
162.141.144.0/24
162.141.168.0/24
162.141.248.0/24
167.148.64.0/24
167.148.108.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:bb:ae:f8:eb:43:fa:9a:aa:62:99:cb:14:32:17:59:e7:cb:
b9:08:70:c6:a7:78:cc:52:0c:1e:d7:87:dc:74:ac:24:33:78:
18:ba:4b:80:a3:44:01:76:c3:08:e9:25:5b:7c:90:f9:ff:71:
6b:71:23:9f:8e:79:ef:1b:b0:35:51:1e:ca:48:14:dd:e5:b8:
d7:98:1c:3c:6a:44:fb:7b:bc:e4:07:b5:03:db:e8:d5:43:cd:
67:7d:8b:93:2b:a8:a6:4f:34:c0:dd:90:08:9b:5f:d9:55:40:
27:dd:f3:6d:9e:11:59:f5:a1:fb:06:b1:e8:43:3c:0b:a5:3f:
31:66:84:46:37:72:15:2d:60:1d:7b:a5:d7:52:c0:3a:74:fe:
8b:11:cf:24:d7:e7:bb:32:b3:9d:a4:88:d2:33:71:23:7f:2c:
12:b0:77:45:29:57:ff:e4:8c:12:fc:04:b2:2c:b3:18:8a:3e:
8c:c1:d6:0e:79:dd:29:75:9a:97:e8:38:e8:e1:6d:82:88:b9:
e6:c5:cd:54:a5:f6:69:3e:25:1c:52:56:44:ed:09:4a:58:a6:
60:31:07:14:3b:53:c3:91:77:4e:d9:86:d5:5e:ea:9b:3e:a5:
24:3e:ec:4d:23:49:d9:d8:bc:c3:6a:46:2c:cc:74:b5:2a:26:
1b:b7:36:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:35:55 2026 by rpki-client