Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS14315.roa
File: AS14315.roa (raw, json)
Hash identifier: Rsxgz12PRPVgLMUbI0k1OjYgGfIrdO4o5WwPYuUTw4o=
Subject key identifier: 3D:3F:40:95:C0:B7:6D:C8:00:F8:64:04:2F:28:43:5B:B2:F2:8E:81
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 09C40E0D34173D22BEE856E7FC2FE06C3672B753
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS14315.roa
Signing time: Fri 14 Aug 2026 12:42:58 +0000
ROA not before: Fri 14 Aug 2026 12:37:58 +0000
ROA not after: Fri 13 Aug 2027 12:42:58 +0000
asID: 14315
IP address blocks: 155.117.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c4:0e:0d:34:17:3d:22:be:e8:56:e7:fc:2f:e0:6c:36:72:b7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 14 12:37:58 2026 GMT
Not After : Aug 13 12:42:58 2027 GMT
Subject: CN=3D3F4095C0B76DC800F864042F28435BB2F28E81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:09:a1:89:5c:3e:ef:4f:a8:13:22:05:86:
56:ad:80:d3:5d:99:29:07:2d:63:92:75:bb:89:f5:
3a:35:d4:60:03:0a:5c:e9:3b:c3:0d:f1:ba:c8:47:
4b:23:69:84:6c:d1:0d:50:eb:8e:75:59:63:b6:c3:
b0:7a:ba:cc:40:33:b2:57:c4:cc:8e:66:e9:db:f5:
33:14:ee:33:2b:38:1c:04:82:37:8c:46:bb:de:33:
5c:0a:98:57:2f:83:56:27:b6:98:ea:94:10:72:e6:
ab:14:63:0a:23:e4:7d:b9:d0:5d:8c:5d:2d:fd:07:
49:98:71:75:f6:09:a5:b4:25:28:10:9b:9c:fa:ca:
57:ad:77:91:cb:75:ec:da:97:7f:87:f2:d3:e1:ec:
dc:f5:6d:d9:f1:f4:aa:84:8a:87:2f:b9:ba:26:93:
50:4c:44:8d:ca:1c:d3:cf:d9:14:6a:00:cf:b0:0a:
25:45:95:0e:6e:79:d6:f4:ae:9a:e7:c3:52:3e:bb:
81:5c:2e:f7:5e:39:a0:a6:12:8e:fb:05:17:34:18:
20:ed:19:e3:75:b4:05:24:8c:f2:61:1a:6f:5e:cf:
c4:dc:d1:ac:d6:58:e2:68:34:24:2e:7f:31:8e:62:
d0:3d:22:76:6f:18:be:09:90:b2:3a:56:f1:3d:30:
f3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3F:40:95:C0:B7:6D:C8:00:F8:64:04:2F:28:43:5B:B2:F2:8E:81
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS14315.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.9.0/24
Signature Algorithm: sha256WithRSAEncryption
74:7d:41:6a:1a:39:42:8f:b3:fa:4b:3a:10:b9:74:ac:58:16:
a0:0e:08:f5:d5:c8:64:a6:b8:5a:4a:65:5b:78:f9:9e:d0:5f:
e5:a0:d7:4f:d8:bb:32:eb:e3:1f:b2:de:11:99:23:e7:f7:47:
ab:99:6b:7a:9e:5c:50:16:73:c0:64:b1:6e:01:7e:4b:38:a0:
92:d1:60:0b:a1:c2:e1:fc:c2:cd:2f:34:7c:dc:6c:7a:74:43:
c8:f1:fa:bd:b2:93:56:47:75:a5:7f:ce:2d:4a:24:30:e2:d1:
ff:b2:0f:b1:5b:89:e2:c2:a2:5d:61:d9:44:ba:7d:e4:e3:3b:
0f:28:60:23:bd:e6:d5:2d:55:25:59:b3:e9:b7:f4:d7:6a:f7:
d6:5a:13:e9:5a:74:e3:9b:89:6d:b7:ba:c7:26:6f:30:80:96:
b0:02:19:87:79:1f:ce:07:38:95:a4:05:ea:1f:13:4c:fc:44:
6a:dc:f1:da:bb:da:08:ee:24:97:af:a2:5e:99:f4:b9:66:16:
7b:e7:29:fc:81:77:df:df:e8:8b:f0:c7:5a:cf:59:96:50:bb:
eb:a1:45:22:3a:1b:46:de:90:dc:e4:b8:f8:52:0a:56:44:8b:
36:e5:8f:bc:15:c0:f9:9f:16:56:f0:08:46:a7:8e:d7:15:bf:
96:78:43:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:26 2026 by rpki-client