Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS139921.roa
File: AS139921.roa (raw, json)
Hash identifier: UcoQ+hD3IBx/4l0ZdDrDKhrRJMT0r7s5EkTfRcjYUlQ=
Subject key identifier: BF:BF:09:E1:B2:0E:50:51:20:79:F3:E1:09:A1:15:76:3A:36:CC:43
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6A7C17A04E23E3DF197CB53FE1B1404C8F18783C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS139921.roa
Signing time: Sun 21 Jun 2026 04:56:37 +0000
ROA not before: Sun 21 Jun 2026 04:51:37 +0000
ROA not after: Sun 20 Jun 2027 04:56:37 +0000
asID: 139921
IP address blocks: 143.14.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:7c:17:a0:4e:23:e3:df:19:7c:b5:3f:e1:b1:40:4c:8f:18:78:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 21 04:51:37 2026 GMT
Not After : Jun 20 04:56:37 2027 GMT
Subject: CN=BFBF09E1B20E50512079F3E109A115763A36CC43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:60:48:14:e9:35:d8:db:90:d2:63:35:68:
59:f7:17:31:9a:7d:62:25:ab:95:aa:0d:11:13:07:
45:a5:05:00:bd:e5:a6:d0:56:11:f8:b5:b5:e8:d4:
b0:a8:49:a4:41:02:77:88:ff:87:aa:67:9e:54:75:
78:d8:ff:fd:a4:49:dc:4a:7d:83:f9:33:ed:7c:28:
ba:ae:c3:a5:44:ef:f1:6a:6d:05:62:ce:6c:c7:a6:
da:1d:c3:4c:c7:13:a7:f7:8b:7b:ef:a0:ad:33:ae:
09:a0:c6:01:6a:be:3a:6d:26:af:f0:ed:3a:3a:00:
bb:45:18:f9:67:a0:7e:7c:cc:dc:31:e7:b6:11:e3:
87:cf:2c:af:90:79:ad:5d:84:30:b5:41:ed:96:cf:
9c:f5:1e:54:3f:8c:f3:dd:e5:94:fa:1a:ba:2a:01:
04:b9:ce:28:33:47:23:7e:17:4b:3c:ac:ef:9a:eb:
09:7a:9b:60:d0:c4:3b:98:1b:04:9e:05:ea:b6:5e:
e5:c6:43:3c:ef:38:24:76:38:0c:21:18:24:30:87:
49:8e:6a:7c:25:4b:8e:19:54:a1:6b:8e:1a:37:8e:
95:75:70:07:95:f5:c0:96:62:dd:47:94:5f:e3:9a:
1a:56:18:25:79:cd:c2:61:a3:99:39:a2:66:9f:4a:
d7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BF:09:E1:B2:0E:50:51:20:79:F3:E1:09:A1:15:76:3A:36:CC:43
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS139921.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.66.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f7:c8:41:39:a1:21:79:8f:b0:e5:e1:48:a0:a5:4f:00:82:
c3:72:54:e3:aa:bb:20:4d:c6:70:28:5b:df:15:5d:87:7c:04:
1f:68:a0:80:4f:2b:fe:80:8b:95:f8:4c:e0:75:b4:e9:c6:39:
30:41:5c:86:88:d8:12:67:67:9d:52:be:8a:eb:73:ed:2b:59:
5e:9f:fb:4e:c0:0c:ec:45:07:76:a4:2a:80:2a:a1:0f:e4:db:
cf:e6:5d:a4:4f:a3:e1:35:b8:70:55:7a:0f:62:13:86:ec:e0:
16:10:14:cf:87:db:db:dd:36:8c:6c:98:b3:08:12:82:2a:18:
9a:69:7c:8f:77:43:cd:fd:c6:52:a0:f2:da:ab:0e:98:1a:6d:
26:1c:e1:3e:62:84:63:f1:ed:07:65:40:3f:cd:24:03:1d:b4:
50:e6:ee:6d:f5:05:67:98:3d:52:8d:75:1e:c6:63:65:af:79:
c4:d2:d8:6d:62:6c:1c:26:9f:fb:9d:28:e9:14:e9:90:bc:13:
fe:4f:eb:9e:dc:f0:0c:2d:48:35:db:c4:c6:9f:75:16:c3:f5:
3e:d1:af:78:ae:2e:d0:f4:a0:b6:3f:9c:67:a7:f5:3e:26:07:
22:80:d6:df:66:78:33:fb:7d:69:63:df:a8:2a:ee:40:e9:52:
ef:0f:b3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:52:35 2026 by rpki-client