Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137409.roa
File: AS137409.roa (raw, json)
Hash identifier: l2s4EGrPpoUShuj2SmbjPkC9VkuxPlu2zyctsIbq/qk=
Subject key identifier: 54:85:AA:90:B4:42:93:EA:05:8D:AA:62:D2:14:99:1E:C9:7C:86:FB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: A008D681DEBE90976EC1ABEACEC7A0A01E0687
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137409.roa
Signing time: Tue 01 Sep 2026 04:50:22 +0000
ROA not before: Tue 01 Sep 2026 04:45:22 +0000
ROA not after: Tue 31 Aug 2027 04:50:22 +0000
asID: 137409
IP address blocks: 143.14.253.0/24 maxlen: 24
146.103.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a0:08:d6:81:de:be:90:97:6e:c1:ab:ea:ce:c7:a0:a0:1e:06:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 1 04:45:22 2026 GMT
Not After : Aug 31 04:50:22 2027 GMT
Subject: CN=5485AA90B44293EA058DAA62D214991EC97C86FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:c7:25:3f:4a:53:9a:cd:df:47:23:51:c4:
be:74:0e:55:ec:74:ce:0b:d7:cc:e3:66:a8:5b:54:
22:b7:70:5d:c1:cf:07:6b:73:4b:01:42:a0:2f:78:
ba:a7:07:e3:0e:9f:5b:8b:29:b9:fd:74:29:9d:72:
5a:d2:e5:35:6e:86:fd:df:ce:ac:23:da:f9:82:b9:
80:2e:6e:f6:92:c1:70:23:4b:5a:a5:a9:90:30:d2:
5b:60:81:ed:e0:6c:92:cd:cf:b6:98:7f:95:41:e5:
62:83:9b:7f:72:fc:8d:5c:46:cc:e3:49:7e:f5:54:
09:79:03:c8:fc:0b:7c:48:aa:de:33:86:ee:e0:e6:
32:b8:60:fc:2c:c8:9d:e3:b8:b6:b8:ef:00:ae:0a:
7a:f6:eb:38:94:8f:68:2c:85:41:2d:34:29:39:d0:
80:01:41:fd:3d:1a:93:b3:6c:aa:22:40:8d:fb:7f:
d7:0f:8a:51:2c:78:75:2f:82:85:bc:d7:5b:e7:7c:
ba:ae:8c:9e:bc:4d:0f:cf:b4:c4:8b:d4:ad:df:af:
a5:0f:4b:10:3c:a9:cd:b8:ea:cf:0d:cb:f8:eb:d5:
e4:81:22:ad:79:5e:37:5c:dd:c4:81:ff:ed:5c:aa:
68:26:a1:55:0a:c9:6e:9a:32:43:0c:5e:4b:eb:33:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:85:AA:90:B4:42:93:EA:05:8D:AA:62:D2:14:99:1E:C9:7C:86:FB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.253.0/24
146.103.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:58:bd:5e:73:1f:b0:91:f2:cc:da:e1:78:bd:27:0b:64:1a:
7f:67:e4:83:dd:e4:84:24:0d:27:a6:1f:69:7c:e3:d0:34:f3:
77:25:10:23:9a:4f:ad:16:dd:ca:9e:79:77:3a:ca:df:51:23:
e7:7a:f7:cb:74:5c:f1:01:fc:b8:e3:03:26:ef:eb:f9:a7:35:
ce:b4:0d:34:b1:7e:79:10:0b:2b:39:f1:7c:1c:b9:67:d2:c9:
cd:c1:ed:fe:67:12:ba:1f:35:4e:15:ed:89:54:7b:f0:22:e0:
6a:40:39:c6:c7:f2:82:d0:03:7c:fc:fe:4b:03:59:83:dc:f0:
9a:10:c5:c0:01:2c:ba:00:12:5a:0e:a4:5a:18:40:27:cc:32:
4a:3e:7f:14:fa:db:63:12:71:1c:da:5d:24:f8:4b:c8:12:c7:
d3:e7:02:64:75:d5:b5:b1:a2:27:1e:fc:22:05:27:ad:a1:61:
49:e6:b7:43:dc:eb:3a:a7:28:46:a0:2b:46:72:44:92:00:c1:
44:d3:67:80:98:eb:df:00:4a:8f:38:a7:7b:1e:82:45:df:cc:
65:56:16:93:23:0b:57:eb:43:bf:aa:46:19:2f:1f:64:da:f0:
bf:a4:42:dd:da:84:3b:6b:42:6a:f9:89:4e:04:a7:67:f2:ec:
d8:a1:b8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:30:47 2026 by rpki-client