Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS139057.roa
File: AS139057.roa (raw, json)
Hash identifier: Ip51rJN8qJe8aLQPCX8RVLJdOTQS3fNMhwCnhxKs2Qc=
Subject key identifier: 6E:4E:2A:31:F7:CE:D6:E8:F4:9E:0F:2B:70:38:32:DF:1B:42:0A:8F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0431AB9D50116FAAD5C9684E7630224A058E9F58
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS139057.roa
Signing time: Mon 22 Sep 2025 13:38:11 +0000
ROA not before: Mon 22 Sep 2025 13:33:11 +0000
ROA not after: Mon 21 Sep 2026 13:38:11 +0000
asID: 139057
IP address blocks: 143.14.0.0/24 maxlen: 24
143.14.2.0/24 maxlen: 24
143.14.8.0/24 maxlen: 24
143.14.15.0/24 maxlen: 24
143.14.34.0/24 maxlen: 24
143.14.45.0/24 maxlen: 24
143.14.48.0/24 maxlen: 24
143.14.52.0/24 maxlen: 24
143.14.53.0/24 maxlen: 24
143.14.54.0/24 maxlen: 24
143.14.56.0/24 maxlen: 24
143.14.57.0/24 maxlen: 24
143.14.58.0/24 maxlen: 24
143.14.62.0/24 maxlen: 24
143.14.64.0/24 maxlen: 24
143.14.70.0/24 maxlen: 24
143.14.90.0/24 maxlen: 24
143.14.138.0/24 maxlen: 24
143.14.139.0/24 maxlen: 24
143.14.160.0/24 maxlen: 24
143.14.161.0/24 maxlen: 24
143.14.190.0/24 maxlen: 24
143.14.201.0/24 maxlen: 24
143.14.203.0/24 maxlen: 24
143.14.230.0/24 maxlen: 24
155.117.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:31:ab:9d:50:11:6f:aa:d5:c9:68:4e:76:30:22:4a:05:8e:9f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 22 13:33:11 2025 GMT
Not After : Sep 21 13:38:11 2026 GMT
Subject: CN=6E4E2A31F7CED6E8F49E0F2B703832DF1B420A8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:cd:fa:49:3a:4c:c4:0e:79:a9:01:df:71:
9f:c0:70:51:a8:81:3a:e7:b5:96:f5:35:21:b5:ac:
d3:97:eb:c6:27:ec:82:9b:5b:99:e5:b3:d1:d6:8c:
a6:8d:d7:ed:2e:11:a0:9d:e5:54:f1:a5:d5:a6:3f:
2a:92:32:eb:75:f9:33:9a:e6:74:6b:3e:72:51:1c:
61:a0:a0:48:18:3d:51:25:66:18:f2:25:42:a6:95:
4a:f6:5d:fe:19:b8:f7:eb:1f:ea:a2:5c:4b:7e:d0:
18:f7:ae:7d:05:5a:61:d2:6b:a9:b8:e7:ac:46:44:
12:56:9a:02:a5:45:8c:f1:23:f8:d1:92:91:0c:fa:
1b:3b:00:95:0d:65:c8:30:29:f9:e8:3e:d9:ee:68:
2b:4e:05:12:51:40:4c:b3:a4:fb:b6:4e:44:91:8a:
8f:64:fd:26:f3:7e:80:46:67:81:38:44:54:10:e0:
ec:1c:c2:94:28:17:f7:fb:61:ea:49:0f:f0:09:e8:
d1:90:26:e8:f4:94:a2:ee:37:9b:19:dc:d8:ca:86:
ba:a6:0e:95:96:13:e0:c1:42:b9:2d:07:0a:73:90:
cc:a9:01:0d:03:5f:21:55:f9:3a:5d:e2:5c:21:a5:
57:25:56:3d:9a:25:3b:07:0f:6c:7e:31:22:c4:d2:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4E:2A:31:F7:CE:D6:E8:F4:9E:0F:2B:70:38:32:DF:1B:42:0A:8F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS139057.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.0.0/24
143.14.2.0/24
143.14.8.0/24
143.14.15.0/24
143.14.34.0/24
143.14.45.0/24
143.14.48.0/24
143.14.52.0-143.14.54.255
143.14.56.0-143.14.58.255
143.14.62.0/24
143.14.64.0/24
143.14.70.0/24
143.14.90.0/24
143.14.138.0/23
143.14.160.0/23
143.14.190.0/24
143.14.201.0/24
143.14.203.0/24
143.14.230.0/24
155.117.21.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f8:a2:f9:98:31:ad:d4:b6:b8:d4:02:50:0f:68:76:5a:5a:
ef:8b:7f:02:51:c2:7f:44:7b:71:c1:52:bc:42:cb:22:58:65:
10:cc:c7:4c:e4:c7:61:3c:06:05:3e:29:40:bc:02:a4:72:a7:
03:c9:3b:9c:ca:3c:a9:47:46:9b:99:49:1e:97:e3:1b:eb:cf:
08:e1:cf:3d:55:72:46:33:97:1d:26:f2:7d:77:ac:5e:95:17:
e3:42:8a:01:83:4d:ef:80:c1:a4:5e:f1:24:ec:a5:69:13:1e:
c0:9a:b4:43:ad:5d:3d:ce:49:78:e9:2d:d1:79:96:ff:a7:01:
e0:6b:3d:20:bf:ad:cc:33:a9:a3:c3:e4:1b:62:d9:10:fa:cb:
f5:02:7e:9f:61:c6:b6:77:b8:69:56:61:ab:87:1f:7a:77:68:
93:88:30:bf:f7:c4:a3:09:1c:1c:15:8b:2e:9b:68:70:56:a6:
8f:a8:57:97:1b:67:62:12:32:7f:01:bc:87:5c:e9:5c:e1:5b:
3f:ae:91:71:c2:60:75:5f:5b:e8:e7:b8:b3:b6:26:3b:44:33:
94:c8:c8:04:f0:78:3c:f7:c9:f9:fe:5b:77:8c:ef:39:36:1d:
8f:30:84:06:61:2e:45:7d:81:7d:cb:47:b0:a4:4f:f4:93:16:
c1:fb:07:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:40 2025 by rpki-client