Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137235.roa
File: AS137235.roa (raw, json)
Hash identifier: dVBSB/TFx/HofxeUbMMbwV09wR/47CrgP/p0E1A3bps=
Subject key identifier: E1:F3:C9:56:B8:68:4B:1D:1B:93:31:72:49:C7:5A:D0:CC:E5:55:F8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 10E441FA91CA2FD2FF479F4D9523CFE4EB2F51E4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137235.roa
Signing time: Sat 12 Jul 2025 00:00:38 +0000
ROA not before: Fri 11 Jul 2025 23:55:38 +0000
ROA not after: Sat 11 Jul 2026 00:00:38 +0000
asID: 137235
IP address blocks: 143.14.162.0/24 maxlen: 24
155.117.244.0/24 maxlen: 24
162.141.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 07:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e4:41:fa:91:ca:2f:d2:ff:47:9f:4d:95:23:cf:e4:eb:2f:51:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 11 23:55:38 2025 GMT
Not After : Jul 11 00:00:38 2026 GMT
Subject: CN=E1F3C956B8684B1D1B93317249C75AD0CCE555F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:50:00:8a:dc:12:23:fc:22:cd:d4:07:72:
de:f3:86:ea:40:b3:f7:c7:1f:2e:21:15:fb:0f:62:
22:1e:c6:0f:1d:ed:a4:58:25:e5:0f:7e:65:cc:df:
ca:30:33:94:36:07:cc:82:f6:31:f0:0e:a3:4a:06:
38:46:9e:01:5f:58:a2:8b:d6:b5:2d:55:c7:4d:78:
01:ec:0e:6c:a5:0c:38:7b:69:dd:25:49:5c:59:2b:
c9:cf:98:5e:cf:fb:7e:fe:b6:26:db:50:54:ea:ba:
8c:b2:17:90:4f:64:13:61:6c:81:f1:24:3b:5e:5f:
c1:18:a9:33:76:f3:d6:77:48:37:62:19:fe:60:1c:
e8:7c:8e:2e:6e:c9:a9:2e:12:1a:04:80:01:f2:62:
22:2f:1c:3e:c0:0d:67:ef:79:bc:d0:f7:3b:87:ee:
58:21:65:cd:f5:84:ff:54:dd:29:6c:10:67:1d:74:
33:e7:3f:88:8b:73:c0:57:b2:92:25:00:ee:f5:58:
83:16:a2:be:ec:67:b4:14:99:1d:88:ff:87:3a:0c:
4a:51:1f:91:a4:fb:5d:e9:d8:a5:f0:fc:ad:e5:a0:
2a:79:8e:81:4c:2c:7b:f0:11:8d:de:c6:3f:e6:93:
2c:c1:41:05:7f:fa:e9:15:d6:b2:55:a3:17:ff:3c:
dd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F3:C9:56:B8:68:4B:1D:1B:93:31:72:49:C7:5A:D0:CC:E5:55:F8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.162.0/24
155.117.244.0/24
162.141.114.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:31:f7:d0:8e:c3:d7:62:c9:67:84:89:d2:39:10:9e:11:63:
ef:f5:e8:f0:fb:f4:1e:8a:42:b0:c2:23:1d:25:89:a9:de:30:
14:88:5d:b4:ad:40:c9:84:a0:e5:2e:e2:c7:fb:24:9f:19:e2:
6f:de:af:97:8a:94:ab:f0:35:19:0b:b8:51:76:ef:23:31:23:
4c:df:3e:4f:67:e7:fa:83:98:c1:13:50:8e:67:a6:95:fa:2a:
4d:96:96:fe:f0:94:a3:37:53:62:b9:f4:67:f8:46:62:2d:57:
61:f8:b7:af:c0:2c:a5:01:e7:dc:10:0b:fa:a8:da:49:97:22:
fe:e5:b1:bd:42:98:58:67:92:38:29:5c:b9:5c:38:1f:3c:3b:
19:73:83:30:e4:89:03:bb:de:57:9a:aa:31:0d:63:b4:39:e6:
3b:06:bd:02:3e:25:b3:6c:7e:2a:80:e1:d1:c3:b0:d4:ec:ae:
b6:d9:17:68:27:40:81:c1:e3:4c:4e:1a:ce:b0:55:bf:24:6e:
f5:97:60:36:a3:be:37:6f:26:99:a4:56:00:46:2c:fe:6b:ab:
31:cb:cc:38:92:0d:2e:45:f8:6c:e9:b1:15:3a:fe:7c:4a:1e:
0f:a9:ac:49:dc:8a:76:0e:41:12:73:4b:19:47:27:9c:78:fd:
eb:a4:fc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:47:31 2025 by rpki-client