Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa
File: AS153996.roa (raw, json)
Hash identifier: vfaPvXvUoTcaEp9Mmgs6YxajeiKHvpqofk88E6/9a2A=
Subject key identifier: DE:3E:8A:58:50:1D:2D:6F:B6:50:1E:4F:49:85:A5:7B:80:53:81:79
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 45AA5C0CB80DD525591FEA06EE93ED6C6C9F42C0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa
Signing time: Mon 16 Feb 2026 13:46:59 +0000
ROA not before: Mon 16 Feb 2026 13:41:59 +0000
ROA not after: Mon 15 Feb 2027 13:46:59 +0000
asID: 153996
IP address blocks: 143.14.9.0/24 maxlen: 24
143.14.200.0/24 maxlen: 24
155.117.1.0/24 maxlen: 24
162.141.36.0/24 maxlen: 24
162.141.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 11:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:aa:5c:0c:b8:0d:d5:25:59:1f:ea:06:ee:93:ed:6c:6c:9f:42:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 16 13:41:59 2026 GMT
Not After : Feb 15 13:46:59 2027 GMT
Subject: CN=DE3E8A58501D2D6FB6501E4F4985A57B80538179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:ab:0a:a7:44:b4:78:d5:3d:5d:72:03:49:
c7:c1:dd:ae:63:bb:5a:d6:2e:7d:0a:dd:60:74:8a:
b6:c3:78:70:2d:ec:77:7e:93:b7:bb:97:a2:b1:67:
64:68:61:54:31:40:d7:68:3f:27:42:10:26:76:24:
b0:a8:2f:33:7f:31:60:b8:c8:d2:e7:18:51:84:16:
17:b5:e1:c3:e1:8b:16:89:cc:ca:23:98:e0:05:2a:
9a:1f:bd:7e:d6:6c:88:27:41:7e:85:88:1e:46:06:
fa:db:9d:0c:4e:cd:28:e2:e6:b8:ab:f5:8c:40:38:
3b:d1:8a:fa:12:fa:f1:37:dd:ae:6d:47:a0:90:45:
49:6c:15:b8:77:32:91:95:45:2e:94:9c:18:6b:46:
8c:6a:b7:fd:9d:6a:93:d4:35:e0:c0:56:ec:25:c8:
1e:0b:e1:77:32:33:5c:76:d3:ea:ec:1f:8a:90:99:
5a:8a:40:e9:a1:ff:a9:97:5d:47:b1:f5:f5:9a:59:
94:be:dd:3a:5a:f5:bf:89:fe:c2:41:77:e7:f5:b8:
be:d9:29:c3:16:9c:81:aa:79:64:ee:b0:df:f4:de:
10:2e:32:64:d6:ea:6d:5f:59:6a:a6:3e:2d:08:9a:
46:9b:b9:31:be:91:16:d4:f6:7b:46:3a:fe:b3:b5:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3E:8A:58:50:1D:2D:6F:B6:50:1E:4F:49:85:A5:7B:80:53:81:79
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.9.0/24
143.14.200.0/24
155.117.1.0/24
162.141.36.0/24
162.141.142.0/24
Signature Algorithm: sha256WithRSAEncryption
02:4a:e0:d4:72:eb:e5:76:e1:29:27:1a:bf:18:19:77:87:95:
ee:36:41:f2:85:fd:2d:7a:a2:ea:40:f1:d2:fe:cc:a3:1f:c2:
35:32:82:23:e7:28:27:62:95:6f:b7:d3:b3:ee:81:7e:53:f8:
57:5f:b4:bc:d9:d7:c1:40:9a:ba:bd:66:16:56:98:ad:b4:dc:
c8:b0:17:8a:a6:96:08:71:5e:65:f4:3b:f9:ec:ee:47:e1:9c:
e3:1a:c5:ea:ef:d6:ae:00:e4:44:b6:ff:54:73:e9:94:49:b5:
15:13:fb:d2:cd:50:8e:09:28:59:b8:3d:73:4b:f4:ea:3b:82:
e3:6b:5c:a4:51:ae:29:28:4f:4f:ef:a5:c3:cf:6a:0b:01:60:
74:e6:0d:f6:23:0d:e2:fb:1d:a7:54:eb:ae:cb:78:0c:ab:3a:
53:08:af:0a:7d:83:49:27:53:24:dc:f8:90:69:1c:59:39:7a:
6f:fe:9e:53:eb:81:bf:be:b7:9e:cd:43:c6:72:b9:78:17:dc:
be:1b:87:3b:7a:3a:a8:2b:29:f0:0c:7e:2e:6f:ab:5a:fb:23:
f4:a8:d6:57:a7:66:99:dc:02:eb:05:22:c5:81:0d:61:9a:68:
b6:99:ab:95:29:28:d8:39:29:12:dc:8f:0c:bf:91:75:2c:2f:
40:2c:a1:71
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgIURapcDLgN1SVZH+oG7pPtbGyfQsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjAyMTYxMzQxNTlaFw0yNzAyMTUxMzQ2NTlaMDMxMTAvBgNV
BAMTKERFM0U4QTU4NTAxRDJENkZCNjUwMUU0RjQ5ODVBNTdCODA1MzgxNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6asKp0S0eNU9XXIDScfB3a5j
u1rWLn0K3WB0irbDeHAt7Hd+k7e7l6KxZ2RoYVQxQNdoPydCECZ2JLCoLzN/MWC4
yNLnGFGEFhe14cPhixaJzMojmOAFKpofvX7WbIgnQX6FiB5GBvrbnQxOzSji5rir
9YxAODvRivoS+vE33a5tR6CQRUlsFbh3MpGVRS6UnBhrRoxqt/2dapPUNeDAVuwl
yB4L4XcyM1x20+rsH4qQmVqKQOmh/6mXXUex9fWaWZS+3Tpa9b+J/sJBd+f1uL7Z
KcMWnIGqeWTusN/03hAuMmTW6m1fWWqmPi0ImkabuTG+kRbU9ntGOv6ztW7hAgMB
AAGjggIiMIICHjAdBgNVHQ4EFgQU3j6KWFAdLW+2UB5PSYWle4BTgXkwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTUzOTk2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAjw4J
AwQAjw7IAwQAm3UBAwQAoo0kAwQAoo2OMA0GCSqGSIb3DQEBCwUAA4IBAQACSuDU
cuvlduEpJxq/GBl3h5XuNkHyhf0teqLqQPHS/syjH8I1MoIj5ygnYpVvt9Oz7oF+
U/hXX7S82dfBQJq6vWYWVpittNzIsBeKppYIcV5l9Dv57O5H4ZzjGsXq79auAORE
tv9Uc+mUSbUVE/vSzVCOCShZuD1zS/TqO4Lja1ykUa4pKE9P76XDz2oLAWB05g32
Iw3i+x2nVOuuy3gMqzpTCK8KfYNJJ1Mk3PiQaRxZOXpv/p5T64G/vreezUPGcrl4
F9y+G4c7ejqoKynwDH4ub6ta+yP0qNZXp2aZ3ALrBSLFgQ1hmmi2mauVKSjYOSkS
3I8Mv5F1LC9ALKFx
-----END CERTIFICATE-----
Generated at Fri Feb 20 00:45:40 2026 by rpki-client