Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53107.roa
File: AS53107.roa (raw, json)
Hash identifier: Bo4jk2z8B+cqt48VKJ2U03R/FCbnjz784G3VxTSeeWM=
Subject key identifier: DF:A4:A9:78:7C:3E:32:87:23:66:19:0B:EF:85:38:D8:41:4E:63:F9
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7267D37F4D1C3C37578B35455AAA1B15474B0B60
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53107.roa
Signing time: Thu 03 Sep 2026 18:49:32 +0000
ROA not before: Thu 03 Sep 2026 18:44:32 +0000
ROA not after: Thu 02 Sep 2027 18:49:32 +0000
asID: 53107
IP address blocks: 143.14.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:67:d3:7f:4d:1c:3c:37:57:8b:35:45:5a:aa:1b:15:47:4b:0b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 3 18:44:32 2026 GMT
Not After : Sep 2 18:49:32 2027 GMT
Subject: CN=DFA4A9787C3E32872366190BEF8538D8414E63F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:21:1c:5b:02:81:3e:f6:05:11:93:67:0d:43:
f3:4c:19:34:d5:41:a5:12:82:a9:16:ca:4d:17:47:
d4:7f:f4:cf:7e:85:07:36:a0:36:3e:bf:9f:63:b1:
5c:79:c0:35:e9:2d:60:3e:db:11:04:9a:07:3a:49:
a2:9d:74:73:90:97:d9:2c:79:a4:e5:ce:00:c1:e3:
ea:37:a1:28:aa:cc:df:bf:b6:02:12:20:9d:e8:72:
7b:f3:ac:af:f7:81:b4:0d:93:a4:c6:f3:43:ce:69:
c6:0a:b2:7f:97:c8:e5:f2:27:4b:38:63:61:ae:2b:
34:14:36:e7:5d:4e:5c:60:48:b1:fc:0d:f0:d4:34:
2d:02:ca:96:fc:55:e0:fd:0e:ed:2a:ff:fb:32:d8:
e4:89:58:5b:c2:3a:c4:2d:27:31:b6:b5:84:8a:c2:
65:63:55:c9:66:54:c7:fe:ec:6d:b2:9c:fe:b5:51:
93:12:84:ca:73:0c:57:ca:a4:65:73:e5:b2:ab:d9:
78:0f:22:71:9e:bb:b9:3a:6d:d0:5e:50:25:18:d1:
ca:2c:ec:d6:bb:42:4a:bc:44:d0:9a:ab:43:f8:23:
b3:5a:ae:b6:17:36:bb:21:4f:3c:7d:a2:70:2e:a7:
cc:27:3f:d9:7b:d4:fe:1b:0d:c5:00:03:ee:b8:fa:
72:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A4:A9:78:7C:3E:32:87:23:66:19:0B:EF:85:38:D8:41:4E:63:F9
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53107.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.244.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f0:fb:7c:b8:0a:a6:53:bf:5e:39:89:a3:4f:8a:bb:85:48:
14:4c:45:5a:18:67:77:05:ad:aa:e4:f3:2c:23:37:d2:94:10:
9f:17:94:81:85:2c:0b:05:53:d7:1b:b6:d5:fa:07:80:32:8a:
2e:26:fb:30:59:5d:1e:59:68:e4:ad:1e:b7:d5:d5:3c:f5:53:
03:b5:6a:f1:41:bd:af:38:69:59:54:64:d9:57:06:b5:d4:c1:
cd:bd:3d:2c:df:64:2e:1b:8c:00:96:9b:cd:b0:08:0a:1e:89:
ea:fd:5b:64:88:ad:b8:36:df:30:de:07:da:3d:54:b4:5f:ef:
78:39:20:35:d8:89:ed:53:7b:e9:4d:18:9d:97:09:09:9e:5a:
f5:61:2c:02:43:6e:1d:aa:44:9a:f9:7a:66:9d:63:0b:ba:30:
f6:ce:0c:7e:c8:59:d3:ce:79:09:c6:48:f7:c5:d7:63:6d:a0:
d6:9c:87:cb:aa:04:a3:c1:dc:26:e8:89:29:0d:f3:0b:95:b8:
b8:eb:c0:48:e6:bd:9e:8f:15:e7:87:63:b0:e5:4a:89:cb:ce:
09:33:d2:56:c8:c0:64:8e:77:c2:72:9a:3f:c3:e2:c3:6b:83:
67:bb:61:a9:5d:a8:be:ab:1a:c7:3b:4c:d6:f1:fe:16:58:22:
a6:19:da:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:44:10 2026 by rpki-client