Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS149981.roa
File: AS149981.roa (raw, json)
Hash identifier: YQ78xTEcDnLsiU0ikRQJuc6EZfGgYuovIGb36I1jcRs=
Subject key identifier: 8C:BA:33:4D:4F:B1:F4:2F:0A:17:DA:B9:27:EC:86:A7:D3:9B:DC:C8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 024555EC4A9D82F540D86D79DD75D0D2DA833156
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS149981.roa
Signing time: Mon 22 Sep 2025 13:35:24 +0000
ROA not before: Mon 22 Sep 2025 13:30:24 +0000
ROA not after: Mon 21 Sep 2026 13:35:24 +0000
asID: 149981
IP address blocks: 155.117.107.0/24 maxlen: 24
155.117.114.0/24 maxlen: 24
155.117.122.0/24 maxlen: 24
155.117.142.0/24 maxlen: 24
155.117.165.0/24 maxlen: 24
155.117.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:45:55:ec:4a:9d:82:f5:40:d8:6d:79:dd:75:d0:d2:da:83:31:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 22 13:30:24 2025 GMT
Not After : Sep 21 13:35:24 2026 GMT
Subject: CN=8CBA334D4FB1F42F0A17DAB927EC86A7D39BDCC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:43:8d:21:bd:f5:f6:91:24:6f:30:c5:3b:21:
8b:42:36:f5:b0:25:b7:d3:df:97:7e:05:d4:d9:ba:
c8:68:76:92:6e:a4:c2:42:d9:4f:54:f0:a8:97:54:
7f:62:f5:e5:73:16:0e:f3:c4:df:05:15:49:36:53:
2f:60:98:84:df:6a:74:7b:88:a7:63:c2:7c:4d:8f:
94:cd:b9:0f:f3:14:e0:1e:d3:d7:f8:19:4e:33:a9:
00:c9:fa:ef:b2:2f:c1:2f:f4:08:02:be:14:75:86:
58:1d:cc:d1:8a:57:27:ff:cc:64:97:32:ef:9e:0e:
34:fe:ad:2d:58:8b:31:09:17:27:78:1b:2e:2d:69:
87:14:7e:88:c6:fe:96:7b:36:5d:00:df:c3:8d:2c:
61:bb:a2:8e:6c:0a:c1:3c:61:6e:b9:19:65:3b:db:
3f:57:c5:c5:ee:12:9f:d5:c2:9f:e4:b0:ce:04:0b:
65:28:02:d9:7c:04:f5:55:1f:cc:d9:21:27:f9:ef:
43:6d:e6:d6:58:09:f1:f5:89:2d:59:65:76:ba:31:
d5:7a:51:33:b4:e4:89:4b:96:96:e4:f7:01:10:ee:
7e:bd:47:e2:03:b9:87:5d:50:08:78:1a:c9:5f:c0:
86:d9:9b:9c:e1:af:ab:0f:17:93:d8:cf:ca:74:47:
11:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BA:33:4D:4F:B1:F4:2F:0A:17:DA:B9:27:EC:86:A7:D3:9B:DC:C8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS149981.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.107.0/24
155.117.114.0/24
155.117.122.0/24
155.117.142.0/24
155.117.165.0/24
155.117.219.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:90:f7:ee:d8:ad:51:7c:4d:97:e8:9a:72:fe:13:a3:e8:ad:
bd:3f:29:0f:fa:66:ee:c3:31:1d:f6:26:b8:4b:98:27:17:1f:
49:a8:79:96:3a:f6:1b:f6:59:7e:b1:de:25:b7:d5:91:10:23:
ff:7a:2b:ad:7e:55:82:3f:2d:cf:fc:fa:84:6c:87:37:76:e2:
9e:33:32:7a:3d:88:6c:19:e2:8b:12:69:43:1c:85:61:8e:d7:
0a:f7:83:d7:21:92:62:0a:de:4e:74:f9:60:e8:31:36:7f:e8:
31:42:f5:8b:1e:58:11:f7:8f:cb:c4:70:04:0a:5b:d1:5b:22:
fe:48:f8:95:c9:f9:45:dd:13:5d:0e:8f:73:13:fa:31:6b:54:
d0:08:5a:78:1c:8e:b8:e9:19:60:b7:7b:45:0f:e6:1e:65:60:
c7:05:e8:91:06:41:51:28:70:56:a6:26:8d:9f:6c:22:89:96:
e6:76:c2:d4:f4:08:7d:1f:e6:7c:09:f8:11:f1:0f:92:1d:1b:
ba:30:68:7f:61:00:43:20:78:59:65:fb:b6:58:08:42:bb:c0:
ce:94:f6:33:77:5f:68:22:5f:44:bf:88:2a:27:c3:14:3f:5c:
9b:c3:8f:f8:c9:79:11:52:10:fb:be:eb:a3:b6:59:c4:b3:bb:
02:82:15:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:10:11 2025 by rpki-client