Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: 7+gSJGzWyiCXrYOeg+xKQ7CPy8B5vkg8ZXYv8Y3d5Ak=
Subject key identifier: C9:56:7C:E2:85:18:9A:BE:D0:7A:79:23:D7:81:53:B6:FB:B7:06:F4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 65E6685AEBFD5BCC41D8162BE9FFB562EEFF0273
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53356.roa
Signing time: Wed 04 Nov 2026 00:00:11 +0000
ROA not before: Tue 03 Nov 2026 23:55:11 +0000
ROA not after: Wed 03 Nov 2027 00:00:11 +0000
asID: 53356
IP address blocks: 143.14.21.0/24 maxlen: 24
143.14.38.0/24 maxlen: 24
143.14.39.0/24 maxlen: 24
148.135.163.0/24 maxlen: 24
162.141.14.0/24 maxlen: 24
167.148.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:e6:68:5a:eb:fd:5b:cc:41:d8:16:2b:e9:ff:b5:62:ee:ff:02:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 3 23:55:11 2026 GMT
Not After : Nov 3 00:00:11 2027 GMT
Subject: CN=C9567CE285189ABED07A7923D78153B6FBB706F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:be:06:06:06:23:94:5d:a7:ce:ad:d7:58:
30:b0:1c:e7:90:b5:62:f3:bc:64:44:71:61:1d:70:
72:9c:33:9b:62:07:20:54:ec:0e:99:77:03:cb:f0:
48:3c:98:8d:5e:b2:fa:1b:51:7c:be:6b:fb:8f:8e:
ff:be:16:8b:37:0f:d4:ca:cb:c1:33:b2:77:b1:d5:
0c:45:2d:88:13:b7:66:8a:a3:4a:f1:a7:80:d0:57:
cc:68:57:45:2a:12:da:8e:fb:68:15:44:2b:85:f6:
e1:c4:c4:71:2c:b0:8a:50:b3:dd:73:29:01:e3:a3:
4a:8d:9c:42:d1:c8:b4:26:9e:f2:c4:a4:b7:5b:02:
26:ed:3e:d3:a8:f3:dd:92:10:1f:56:52:6d:fe:1c:
f9:e3:74:61:7e:39:8d:7b:96:34:e4:8c:2c:a9:e7:
68:ba:54:ce:08:24:0c:db:1f:22:26:12:b3:05:c4:
98:9d:b7:4b:8c:55:fd:e4:ae:21:56:4a:2e:06:7d:
ea:ef:95:35:8f:a9:47:db:b0:4f:86:5e:6c:cf:70:
53:e6:ac:36:92:3b:de:94:ee:60:f1:89:87:af:79:
ca:ef:6a:3b:02:1f:3b:2c:cb:1d:1c:f0:29:a5:4b:
5f:9c:78:24:96:5a:86:9e:ae:11:d6:5f:07:aa:cb:
45:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:56:7C:E2:85:18:9A:BE:D0:7A:79:23:D7:81:53:B6:FB:B7:06:F4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.21.0/24
143.14.38.0/23
148.135.163.0/24
162.141.14.0/24
167.148.182.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0e:54:90:57:db:d1:b5:d4:15:e5:e3:11:51:2a:34:15:35:
2b:9c:c9:e8:84:34:6c:bc:78:cb:9d:0c:d5:6d:20:4f:eb:c1:
f6:c4:3c:e5:07:51:80:ef:61:6e:f7:98:76:74:6a:b7:6b:46:
68:82:a7:b3:ad:65:51:a9:20:6b:5e:1c:b3:28:4c:94:7a:46:
5d:26:84:8c:bb:33:74:a7:3e:3e:41:e5:05:cf:24:ab:e5:3f:
5f:67:28:db:0c:58:e9:c4:4f:e6:69:83:c5:d5:41:86:16:75:
b3:4b:bf:0e:6e:d6:ed:63:d1:92:e7:8e:5b:41:4e:bd:62:0b:
ca:d3:91:03:d0:c6:48:af:37:81:c2:a1:5c:2e:3d:b7:c7:97:
f3:46:b9:bc:2e:06:8b:27:fa:f1:9f:60:bd:3e:60:3c:6a:be:
3a:b7:b1:80:c1:7c:b4:39:c6:44:78:7a:24:c2:93:44:ae:07:
3a:3d:f8:a0:ce:83:f6:38:42:ff:d6:17:fa:61:4e:45:b5:f4:
0f:06:a0:d5:a2:d4:7a:91:13:16:22:f7:76:ff:9d:6b:d9:45:
5e:23:ce:c5:4f:c9:0b:83:8a:7c:e4:3e:d0:30:fb:5e:e9:c5:
f2:4d:a7:67:97:0f:80:d1:fe:06:3c:4a:7e:72:95:ee:29:7d:
7d:d3:34:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 06:57:39 2026 by rpki-client