Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS133296.roa
File: AS133296.roa (raw, json)
Hash identifier: 8LRDgwv3+IONAGu+PqELUt11S0f1QuVnn2uuO4G3CCc=
Subject key identifier: 64:D8:29:8F:0D:D6:DF:31:2D:D0:66:76:E6:80:3C:39:7D:9B:27:40
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6ED871948BF675EFDF37F4835DF49CBA32D0C8BF
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS133296.roa
Signing time: Fri 07 Aug 2026 09:49:20 +0000
ROA not before: Fri 07 Aug 2026 09:44:20 +0000
ROA not after: Fri 06 Aug 2027 09:49:20 +0000
asID: 133296
IP address blocks: 145.223.10.0/24 maxlen: 24
145.223.11.0/24 maxlen: 24
145.223.12.0/24 maxlen: 24
145.223.13.0/24 maxlen: 24
145.223.14.0/24 maxlen: 24
145.223.15.0/24 maxlen: 24
148.135.155.0/24 maxlen: 24
148.135.164.0/24 maxlen: 24
148.135.165.0/24 maxlen: 24
148.135.166.0/24 maxlen: 24
148.135.167.0/24 maxlen: 24
148.135.168.0/24 maxlen: 24
148.135.169.0/24 maxlen: 24
148.135.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d8:71:94:8b:f6:75:ef:df:37:f4:83:5d:f4:9c:ba:32:d0:c8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 7 09:44:20 2026 GMT
Not After : Aug 6 09:49:20 2027 GMT
Subject: CN=64D8298F0DD6DF312DD06676E6803C397D9B2740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:20:95:f6:09:c8:72:5d:c4:c9:46:a2:f5:fe:
77:51:69:47:60:bd:42:d6:64:0d:f8:02:c8:e6:7a:
f0:72:5d:96:b2:b4:5f:2b:3a:28:d3:20:ed:b8:be:
fd:ab:64:e6:14:f8:46:ed:26:69:ff:20:95:3c:2d:
6c:b0:f5:52:6e:ee:74:f0:d4:6d:36:07:99:dd:8a:
91:ac:8f:27:8d:20:b7:4e:af:98:9a:24:39:c6:9c:
f3:2d:cc:ea:5a:d1:37:da:60:fb:d3:c0:f4:73:ee:
74:3a:70:87:34:5a:08:6b:9a:4b:c2:76:cc:14:67:
9a:f2:cc:d1:f7:93:ed:43:5c:ea:b3:3a:fb:7c:e0:
b9:87:3e:a0:da:61:10:4c:ef:8a:47:21:79:be:45:
50:2e:e2:8a:4f:b4:f8:72:76:6e:12:f4:ef:9f:28:
2c:00:29:75:71:92:59:b6:e3:de:13:7d:13:10:0a:
a5:5d:c7:12:a4:2b:e4:6b:e8:8e:bd:fe:21:b9:1c:
e7:6e:ee:60:cc:83:50:30:68:ce:20:c9:fb:00:ad:
b7:5e:98:55:47:05:2d:c4:52:21:51:1f:a6:9f:73:
b1:a4:56:2b:cd:57:44:5b:0f:67:65:dc:c8:a0:8c:
4d:bd:db:76:6e:9c:5f:c1:39:e2:7a:10:61:98:7e:
e9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D8:29:8F:0D:D6:DF:31:2D:D0:66:76:E6:80:3C:39:7D:9B:27:40
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS133296.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.10.0-145.223.15.255
148.135.155.0/24
148.135.164.0-148.135.170.255
Signature Algorithm: sha256WithRSAEncryption
5a:c6:2c:47:51:8a:c8:fc:0e:27:aa:15:24:f4:fc:80:2b:9f:
dc:54:00:60:93:9c:4d:3f:af:0c:af:f2:30:2b:8d:0d:60:d2:
41:1d:70:ba:9f:80:83:e4:c8:0f:bf:1e:8a:5a:60:b1:06:ac:
30:05:0a:90:ee:9d:1f:68:db:18:ec:33:17:95:82:4f:7d:ae:
61:c5:3b:4c:20:c1:81:6e:7f:f0:b7:72:c0:90:01:96:93:fb:
56:51:5e:ff:e0:27:1d:7a:aa:b0:83:b9:08:9e:53:c2:86:45:
ae:a9:df:8f:08:90:4c:3b:63:c8:ea:f7:f8:08:70:e5:58:e9:
cc:2b:d1:96:64:e6:12:da:0b:e1:fd:76:84:40:de:e7:b2:f8:
e3:c8:bc:a5:a6:18:70:16:1c:4c:be:3c:0c:32:cd:69:4a:f6:
c6:f5:c8:32:1b:05:f8:48:e4:8f:db:d1:b6:d7:ff:97:c6:68:
5f:e7:d0:e6:bd:13:8f:bb:5a:c1:9f:b6:fe:04:55:7f:38:a4:
ea:c0:09:7a:10:49:c5:13:c7:37:e7:85:63:fc:5b:29:6b:90:
6b:4c:63:1d:05:a6:c9:89:f7:21:cb:5e:bb:b7:e4:ca:6e:a6:
38:73:5a:bb:7e:44:23:d6:74:6a:5b:60:75:09:58:1f:85:9b:
f1:4d:3c:e2
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUbthxlIv2de/fN/SDXfScujLQyL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA4MDcwOTQ0MjBaFw0yNzA4MDYwOTQ5MjBaMDMxMTAvBgNV
BAMTKDY0RDgyOThGMERENkRGMzEyREQwNjY3NkU2ODAzQzM5N0Q5QjI3NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPIJX2CchyXcTJRqL1/ndRaUdg
vULWZA34AsjmevByXZaytF8rOijTIO24vv2rZOYU+EbtJmn/IJU8LWyw9VJu7nTw
1G02B5ndipGsjyeNILdOr5iaJDnGnPMtzOpa0TfaYPvTwPRz7nQ6cIc0WghrmkvC
dswUZ5ryzNH3k+1DXOqzOvt84LmHPqDaYRBM74pHIXm+RVAu4opPtPhydm4S9O+f
KCwAKXVxklm2494TfRMQCqVdxxKkK+Rr6I69/iG5HOdu7mDMg1AwaM4gyfsArbde
mFVHBS3EUiFRH6afc7GkVivNV0RbD2dl3MigjE2923ZunF/BOeJ6EGGYfumPAgMB
AAGjggImMIICIjAdBgNVHQ4EFgQUZNgpjw3W3zEt0GZ25oA8OX2bJ0AwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTMzMjk2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAGR
3woDBASR3wADBACUh5swDAMEApSHpAMEAJSHqjANBgkqhkiG9w0BAQsFAAOCAQEA
WsYsR1GKyPwOJ6oVJPT8gCuf3FQAYJOcTT+vDK/yMCuNDWDSQR1wup+Ag+TID78e
ilpgsQasMAUKkO6dH2jbGOwzF5WCT32uYcU7TCDBgW5/8LdywJABlpP7VlFe/+An
HXqqsIO5CJ5TwoZFrqnfjwiQTDtjyOr3+Ahw5VjpzCvRlmTmEtoL4f12hEDe57L4
48i8paYYcBYcTL48DDLNaUr2xvXIMhsF+Ejkj9vRttf/l8ZoX+fQ5r0Tj7tawZ+2
/gRVfzik6sAJehBJxRPHN+eFY/xbKWuQa0xjHQWmyYn3Icteu7fkym6mOHNau35E
I9Z0altgdQlYH4Wb8U084g==
-----END CERTIFICATE-----
Generated at Wed Sep 9 21:28:39 2026 by rpki-client