Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152391.roa
File: AS152391.roa (raw, json)
Hash identifier: dppSRP5aBh587R6z/T4S3e0U5oKQWpxqj08QYC4ltaU=
Subject key identifier: 7C:DC:25:E3:33:99:73:58:99:31:27:43:81:47:25:FB:56:E8:D6:7B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3787811ED4575A6AECD3E8DD4B3134F26BEA43E6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152391.roa
Signing time: Fri 05 Sep 2025 07:58:17 +0000
ROA not before: Fri 05 Sep 2025 07:53:17 +0000
ROA not after: Fri 04 Sep 2026 07:58:17 +0000
asID: 152391
IP address blocks: 143.14.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:87:81:1e:d4:57:5a:6a:ec:d3:e8:dd:4b:31:34:f2:6b:ea:43:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 5 07:53:17 2025 GMT
Not After : Sep 4 07:58:17 2026 GMT
Subject: CN=7CDC25E33399735899312743814725FB56E8D67B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:99:90:11:aa:8b:43:7e:13:a1:c5:56:ef:
bb:e8:79:e3:a8:1a:5a:db:91:0f:2e:1e:e6:07:87:
c3:33:3c:82:d1:6e:6c:e8:50:f0:20:83:a9:2c:0d:
38:30:d7:bb:0f:ed:47:08:d0:0b:f1:32:01:3c:2a:
56:e9:3a:92:c3:71:c0:cf:c4:c9:0b:ca:04:d6:ff:
0d:47:09:78:68:55:4f:eb:db:c9:fe:37:76:77:01:
04:f8:93:8b:99:1c:50:34:85:e4:d7:08:6d:b7:57:
12:ac:ec:b7:2c:28:cc:9e:85:03:f7:89:7a:29:e4:
94:ba:3b:af:e1:4c:a7:c9:10:7c:cd:4d:92:12:08:
10:7e:b8:16:7a:9e:e7:6b:40:56:fe:13:fe:be:f9:
2e:6d:fd:fa:20:fc:d8:cb:da:4e:17:fd:5d:07:3a:
a6:27:33:7b:36:5d:d0:2f:3d:fc:cd:3a:e7:be:d5:
04:e7:fc:a7:0c:63:d3:e9:3c:8b:89:77:71:fa:50:
08:bf:36:e2:00:b8:77:d1:5b:34:28:b4:5e:2d:57:
aa:2b:2c:90:e9:57:2d:d2:1f:36:68:3a:ae:b2:be:
bb:59:0b:eb:30:99:9f:e9:18:ad:89:dc:05:43:c6:
1d:c9:24:04:b9:8e:b4:ca:6b:d2:cd:86:fb:45:02:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DC:25:E3:33:99:73:58:99:31:27:43:81:47:25:FB:56:E8:D6:7B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152391.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.87.0/24
Signature Algorithm: sha256WithRSAEncryption
67:12:22:b3:02:3e:d3:98:79:41:51:3f:6c:da:b1:27:02:b4:
2a:bf:51:a7:37:58:6d:56:0f:b2:05:31:b6:1e:3f:22:70:a6:
a4:52:8c:6e:6b:56:35:6b:63:3f:7b:68:b2:06:42:b7:ea:f5:
50:20:5a:da:82:c5:b6:54:3b:ff:8e:95:a4:4d:78:0a:a7:56:
b9:ec:a0:12:b3:2b:85:92:d9:58:7f:28:f8:5d:d1:5b:9f:69:
1b:61:a2:43:98:40:51:a1:c6:bb:b6:61:3b:60:b9:99:3d:ed:
fe:d7:07:9a:6e:c2:56:5b:8f:c3:ce:77:d2:25:ea:ad:3d:30:
32:82:b5:cf:86:6b:13:26:70:50:34:4a:57:90:90:91:43:37:
dd:38:7f:40:ef:06:d1:2d:98:92:ec:1e:3d:48:66:78:11:b0:
20:1f:90:07:4b:50:1a:95:25:98:9b:9c:ab:63:b8:a9:95:4c:
cb:ff:c8:fa:9e:90:16:e4:80:7b:9b:85:84:c9:ad:e6:4b:20:
a0:3c:cf:f9:6e:55:64:44:ac:7e:e2:f7:92:91:99:b4:5f:9f:
f2:77:89:96:86:1a:cb:10:07:8d:a0:8e:fc:25:ee:0e:dc:43:
59:34:af:7d:0b:7c:15:68:cf:a8:4c:0a:9b:db:3f:0c:6c:bf:
e0:7f:e2:47
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUN4eBHtRXWmrs0+jdSzE08mvqQ+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA5MDUwNzUzMTdaFw0yNjA5MDQwNzU4MTdaMDMxMTAvBgNV
BAMTKDdDREMyNUUzMzM5OTczNTg5OTMxMjc0MzgxNDcyNUZCNTZFOEQ2N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJJmQEaqLQ34TocVW77voeeOo
GlrbkQ8uHuYHh8MzPILRbmzoUPAgg6ksDTgw17sP7UcI0AvxMgE8KlbpOpLDccDP
xMkLygTW/w1HCXhoVU/r28n+N3Z3AQT4k4uZHFA0heTXCG23VxKs7LcsKMyehQP3
iXop5JS6O6/hTKfJEHzNTZISCBB+uBZ6nudrQFb+E/6++S5t/fog/NjL2k4X/V0H
OqYnM3s2XdAvPfzNOue+1QTn/KcMY9PpPIuJd3H6UAi/NuIAuHfRWzQotF4tV6or
LJDpVy3SHzZoOq6yvrtZC+swmZ/pGK2J3AVDxh3JJAS5jrTKa9LNhvtFAnGlAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUfNwl4zOZc1iZMSdDgUcl+1bo1nswHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTUyMzkxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjw5X
MA0GCSqGSIb3DQEBCwUAA4IBAQBnEiKzAj7TmHlBUT9s2rEnArQqv1GnN1htVg+y
BTG2Hj8icKakUoxua1Y1a2M/e2iyBkK36vVQIFragsW2VDv/jpWkTXgKp1a57KAS
syuFktlYfyj4XdFbn2kbYaJDmEBRoca7tmE7YLmZPe3+1weabsJWW4/DznfSJeqt
PTAygrXPhmsTJnBQNEpXkJCRQzfdOH9A7wbRLZiS7B49SGZ4EbAgH5AHS1AalSWY
m5yrY7iplUzL/8j6npAW5IB7m4WEya3mSyCgPM/5blVkRKx+4veSkZm0X5/yd4mW
hhrLEAeNoI78Je4O3ENZNK99C3wVaM+oTAqb2z8MbL/gf+JH
-----END CERTIFICATE-----
Generated at Fri Sep 5 19:47:56 2025 by rpki-client