Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS139552.roa
File: AS139552.roa (raw, json)
Hash identifier: n0uy+5G6tY8JQkZf2Ixx4dGHsjvz8blwgrfK6onyLpM=
Subject key identifier: 44:F6:64:93:9B:7D:82:83:8B:0F:A2:0C:0E:3B:0E:71:A2:F9:1A:8D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 27FF5B7BE36CBB369C4929CD6E0D9B07E57CD9F8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS139552.roa
Signing time: Tue 14 Jul 2026 10:49:05 +0000
ROA not before: Tue 14 Jul 2026 10:44:05 +0000
ROA not after: Tue 13 Jul 2027 10:49:05 +0000
asID: 139552
IP address blocks: 147.79.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ff:5b:7b:e3:6c:bb:36:9c:49:29:cd:6e:0d:9b:07:e5:7c:d9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 14 10:44:05 2026 GMT
Not After : Jul 13 10:49:05 2027 GMT
Subject: CN=44F664939B7D82838B0FA20C0E3B0E71A2F91A8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:36:aa:81:ef:3f:9f:5b:e9:84:f0:30:dd:cb:
2b:fb:fd:a7:f2:cc:55:f4:54:ce:fd:98:42:6a:40:
3f:b2:63:d5:d5:df:b8:49:e4:c5:a2:68:a0:71:00:
a9:08:21:26:24:41:79:c6:43:a8:89:1f:8e:34:18:
37:ba:08:70:6d:d8:b6:bd:95:9f:31:d3:c4:50:c7:
7a:53:59:1c:d9:9e:d4:45:87:cc:de:c5:d5:ad:b1:
c5:bb:71:13:e4:4d:e7:3b:12:e9:d0:36:11:b8:6a:
a6:a9:7e:61:a8:58:fa:9d:17:e3:9e:37:51:e8:8a:
6e:8b:1e:04:b7:eb:f0:44:d4:a6:b6:fb:9d:97:b1:
26:21:3d:02:1a:52:a7:f6:3c:2d:ac:eb:8f:7f:e3:
07:24:0e:89:e3:17:f7:02:61:87:7a:59:3d:27:eb:
15:41:64:74:1e:92:20:88:7e:4e:90:b1:00:2b:99:
24:32:9a:3d:d3:f9:48:6c:4a:5b:c1:da:0c:91:a6:
fe:1c:07:f7:49:2c:b7:82:f0:9a:d9:ee:bb:cd:6b:
ee:8c:df:ce:13:46:02:1e:05:8a:a1:1f:c9:c5:70:
7b:aa:aa:90:e4:52:a7:a6:31:8c:3f:26:0c:a9:d8:
2b:25:f7:8e:ef:fe:24:1d:da:f2:29:e2:27:b1:8c:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F6:64:93:9B:7D:82:83:8B:0F:A2:0C:0E:3B:0E:71:A2:F9:1A:8D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS139552.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.63.0/24
Signature Algorithm: sha256WithRSAEncryption
76:72:b0:84:4f:5c:02:b6:8f:23:ef:8f:f7:09:59:e4:1e:3e:
b5:79:44:7d:a7:14:42:ca:8e:2a:c0:ef:1f:f3:93:86:07:fe:
ea:d6:51:e9:ec:25:24:39:20:b9:09:49:77:6c:98:c1:92:da:
f4:69:08:ac:85:5a:d9:66:c3:80:43:dd:c5:53:c7:b2:c4:3b:
84:89:88:34:5f:e9:87:10:b4:ab:c2:d1:71:67:4f:02:ef:fe:
ec:88:dd:ff:77:50:ba:6e:79:08:56:ec:15:43:d5:e5:08:04:
8a:37:53:98:cb:81:c5:b3:6e:a6:eb:f3:50:6a:ea:b9:fc:ad:
b6:bd:19:6a:2b:83:f0:f3:ac:86:2d:f4:83:35:f8:1a:70:10:
f8:e8:34:bb:f0:b8:b9:72:00:d2:60:71:64:d3:60:10:f6:a9:
6e:33:d9:fa:55:13:b5:1f:6c:d0:36:6f:a6:f9:46:41:38:64:
13:cd:69:ca:90:35:89:13:70:75:0d:05:bd:54:0c:42:66:61:
6c:9b:e0:4a:1a:b2:57:ba:35:56:18:2e:33:23:cb:ea:a7:96:
88:9e:eb:d3:bd:63:78:36:90:c5:13:c7:b2:cc:6a:a1:48:98:
32:5b:76:16:b5:08:04:15:5d:fe:4c:5e:4b:ca:ed:4a:bf:6f:
4a:48:34:72
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUJ/9be+NsuzacSSnNbg2bB+V82fgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA3MTQxMDQ0MDVaFw0yNzA3MTMxMDQ5MDVaMDMxMTAvBgNV
BAMTKDQ0RjY2NDkzOUI3RDgyODM4QjBGQTIwQzBFM0IwRTcxQTJGOTFBOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfNqqB7z+fW+mE8DDdyyv7/afy
zFX0VM79mEJqQD+yY9XV37hJ5MWiaKBxAKkIISYkQXnGQ6iJH440GDe6CHBt2La9
lZ8x08RQx3pTWRzZntRFh8zexdWtscW7cRPkTec7EunQNhG4aqapfmGoWPqdF+Oe
N1Hoim6LHgS36/BE1Ka2+52XsSYhPQIaUqf2PC2s649/4wckDonjF/cCYYd6WT0n
6xVBZHQekiCIfk6QsQArmSQymj3T+UhsSlvB2gyRpv4cB/dJLLeC8JrZ7rvNa+6M
384TRgIeBYqhH8nFcHuqqpDkUqemMYw/Jgyp2Csl947v/iQd2vIp4iexjMCRAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQURPZkk5t9goOLD6IMDjsOcaL5Go0wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTM5NTUyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk08/
MA0GCSqGSIb3DQEBCwUAA4IBAQB2crCET1wCto8j74/3CVnkHj61eUR9pxRCyo4q
wO8f85OGB/7q1lHp7CUkOSC5CUl3bJjBktr0aQishVrZZsOAQ93FU8eyxDuEiYg0
X+mHELSrwtFxZ08C7/7siN3/d1C6bnkIVuwVQ9XlCASKN1OYy4HFs26m6/NQauq5
/K22vRlqK4Pw86yGLfSDNfgacBD46DS78Li5cgDSYHFk02AQ9qluM9n6VRO1H2zQ
Nm+m+UZBOGQTzWnKkDWJE3B1DQW9VAxCZmFsm+BKGrJXujVWGC4zI8vqp5aInuvT
vWN4NpDFE8eyzGqhSJgyW3YWtQgEFV3+TF5Lyu1Kv29KSDRy
-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:25 2026 by rpki-client