Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS265919.roa
File: AS265919.roa (raw, json)
Hash identifier: 3z6zpw20vxE0WikdVTzyq89IgWkhZU+fqPM1BD7GUhg=
Subject key identifier: 8F:B2:2F:CF:C3:D6:3D:C5:DB:4A:27:DC:0E:B5:58:ED:65:DA:E8:DA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 010754DD43AE2183497D98788DA1F8EF23E88EB6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS265919.roa
Signing time: Tue 28 Jul 2026 13:49:16 +0000
ROA not before: Tue 28 Jul 2026 13:44:16 +0000
ROA not after: Tue 27 Jul 2027 13:49:16 +0000
asID: 265919
IP address blocks: 143.14.163.0/24 maxlen: 24
143.14.165.0/24 maxlen: 24
143.14.167.0/24 maxlen: 24
143.14.168.0/24 maxlen: 24
143.14.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:07:54:dd:43:ae:21:83:49:7d:98:78:8d:a1:f8:ef:23:e8:8e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 28 13:44:16 2026 GMT
Not After : Jul 27 13:49:16 2027 GMT
Subject: CN=8FB22FCFC3D63DC5DB4A27DC0EB558ED65DAE8DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:6c:50:22:ff:8e:24:f6:c7:9a:4b:57:37:
c2:41:70:62:08:88:e4:88:14:57:86:f3:6b:93:c0:
8e:11:28:e3:38:2a:cf:da:9f:65:f4:c4:76:46:4a:
50:d6:d6:f4:40:91:16:e4:42:58:49:e6:f9:2e:bb:
a4:55:e6:6f:ef:71:cd:81:ca:28:68:fe:f5:b2:40:
e3:c8:e4:ee:25:a4:82:99:b5:63:58:db:ac:a9:f3:
96:c6:71:0d:cc:ec:10:03:5d:76:00:91:ab:fb:a2:
e9:ef:54:db:d4:fa:5d:ec:df:e9:3e:29:c3:f6:a7:
f6:ee:bb:8c:1c:e6:d1:1c:43:a2:8d:07:6d:d9:82:
b5:aa:f2:34:f5:ad:28:33:c5:7e:88:ca:cf:7a:a6:
c9:49:34:0a:6e:6b:ce:ba:47:d2:2f:cf:20:fc:8a:
61:2f:1e:8e:68:66:ab:28:27:eb:a6:36:5a:9f:5c:
5f:26:61:84:33:14:97:bb:84:a2:54:20:71:d3:34:
78:ba:b5:35:99:db:e8:72:f9:df:99:c2:17:35:75:
9f:3d:ad:3b:c3:80:5b:b3:40:5e:f7:f7:0f:52:04:
5d:e9:c0:ad:f4:cd:98:04:fb:75:43:e3:bc:f6:d2:
77:d4:97:57:b2:95:f8:dd:24:9f:ba:ef:d7:c4:c2:
63:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B2:2F:CF:C3:D6:3D:C5:DB:4A:27:DC:0E:B5:58:ED:65:DA:E8:DA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS265919.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.163.0/24
143.14.165.0/24
143.14.167.0-143.14.168.255
143.14.176.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:c6:92:03:1b:d4:59:5f:9e:d0:89:e3:63:fe:cd:36:58:67:
1b:eb:f6:66:6d:a2:8f:6f:17:05:92:5c:69:3e:89:e3:c3:f6:
9e:96:fe:36:ee:bf:b7:05:1e:cf:1b:53:c8:24:0d:e1:8a:09:
48:32:56:38:12:1c:bf:32:69:6e:97:bd:21:e3:70:37:5c:34:
e5:5f:42:8a:1d:d1:71:96:6f:a7:68:77:79:c7:f1:5e:6e:d3:
cf:63:0e:5d:b0:37:ad:3e:a6:d3:32:0c:59:30:8c:4c:aa:2d:
89:dc:f3:7a:5c:de:58:ee:5d:0d:85:60:43:2f:d5:1f:4f:de:
c2:6f:8e:52:8b:39:f6:56:32:dc:d5:5f:91:a6:a3:8a:7d:4f:
34:d5:93:77:c8:1a:24:4e:10:30:6c:56:ea:7e:48:9d:6f:b8:
74:34:fe:f5:d0:fe:cf:f6:27:02:cd:36:3a:fc:50:c6:ed:ea:
3d:f0:50:ed:6f:1c:7a:53:9e:5d:5d:88:fc:9d:8b:a0:6d:60:
5e:65:21:b2:3c:a0:ea:68:29:86:8e:30:25:f9:3d:8a:0f:2a:
81:b8:b4:27:3e:e5:5a:62:66:a3:a7:d1:9e:47:2c:24:85:c7:
82:31:a1:0c:46:27:40:7f:66:c7:30:fc:fe:fe:2e:8f:c3:3d:
90:a8:84:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:03:13 2026 by rpki-client