Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa
File: AS153996.roa (raw, json)
Hash identifier: SUea836gV8vRLBj3mFqr7aMUG3vvEV+AZNaItWqImh4=
Subject key identifier: 48:90:A7:E2:7C:18:9D:2C:99:39:C6:92:FA:59:F0:B8:EE:F4:76:B2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 061F873DD27DAC9E0CA9F5DCBBB3DF4DB675A6E2
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa
Signing time: Wed 29 Jul 2026 15:39:43 +0000
ROA not before: Wed 29 Jul 2026 15:34:43 +0000
ROA not after: Wed 28 Jul 2027 15:39:43 +0000
asID: 153996
IP address blocks: 143.14.9.0/24 maxlen: 24
143.14.11.0/24 maxlen: 24
143.14.36.0/24 maxlen: 24
143.14.200.0/24 maxlen: 24
162.141.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:1f:87:3d:d2:7d:ac:9e:0c:a9:f5:dc:bb:b3:df:4d:b6:75:a6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 29 15:34:43 2026 GMT
Not After : Jul 28 15:39:43 2027 GMT
Subject: CN=4890A7E27C189D2C9939C692FA59F0B8EEF476B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6e:1a:f2:de:76:2a:37:f9:e1:b3:c1:0b:eb:
f1:9c:70:94:07:4d:22:8b:aa:2f:23:43:78:ed:74:
6c:b1:2b:d3:61:b1:0c:ec:fe:ba:19:3a:42:06:a0:
12:98:ec:43:43:71:cd:0b:70:9b:f5:a2:ef:3f:78:
21:d5:9d:4f:09:f0:ac:6f:15:fb:58:d7:89:6c:f9:
1e:b3:6a:31:f2:3b:09:18:bb:ff:56:cf:f2:51:9c:
df:35:78:e8:ba:a7:f9:f3:f0:b6:06:d6:da:1c:2d:
a6:38:1b:1d:ae:7d:96:c2:ad:70:9e:72:45:0e:4b:
ba:95:e3:f9:bb:70:f6:87:4b:12:95:f0:e3:eb:10:
5c:48:e1:21:9e:73:b4:b2:3e:b6:1e:db:8d:82:05:
56:c8:a7:01:d8:9b:6d:9c:c5:a2:e1:f3:f0:83:ca:
75:5a:3e:d4:a6:e6:fa:01:95:e8:aa:96:a6:db:bc:
83:72:aa:81:7b:1b:37:05:06:16:cb:4f:1e:97:8e:
cf:86:d6:71:f7:76:38:ce:24:85:92:5a:0b:84:34:
91:ff:ef:92:55:24:42:a1:6d:e2:fe:46:fe:32:34:
df:4f:43:ea:0e:dd:76:48:4d:a5:a4:59:76:36:e9:
5b:5a:7f:76:42:ba:31:72:82:3e:5e:e9:70:79:1f:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:90:A7:E2:7C:18:9D:2C:99:39:C6:92:FA:59:F0:B8:EE:F4:76:B2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.9.0/24
143.14.11.0/24
143.14.36.0/24
143.14.200.0/24
162.141.142.0/24
Signature Algorithm: sha256WithRSAEncryption
87:de:ea:b5:bc:a6:d9:5e:e6:95:88:bd:db:9a:ce:a4:c7:97:
db:af:05:6e:af:53:77:55:8c:d5:1d:df:12:31:2c:aa:dc:1b:
fe:26:54:a4:ea:57:a6:c2:07:ef:b3:52:4c:2b:11:bc:ef:be:
f4:3b:6f:5b:e9:17:90:a7:6a:32:2c:fc:18:92:fc:26:80:78:
8a:3a:7d:0a:f2:8b:73:ed:47:89:b6:f5:21:33:df:34:14:da:
85:27:e0:66:4e:66:81:8e:d6:a5:e6:b6:fb:43:fd:63:13:d3:
89:04:20:01:04:59:8a:d9:61:8d:b9:02:8f:c8:57:ce:22:bf:
be:fa:bf:28:f3:66:f8:03:6b:2e:fd:e6:2f:30:5c:be:8c:5e:
7b:c8:c7:4d:60:e6:1c:8c:0a:8f:c4:04:b5:cb:57:6f:b2:20:
1f:15:29:04:d1:9f:b2:51:ad:b8:67:03:d9:38:08:0b:d8:81:
e0:eb:10:88:7e:a8:9a:2f:bc:22:b2:75:82:30:ae:86:99:2b:
c0:fa:01:fb:6f:82:61:0d:85:8f:da:30:69:c0:40:94:c3:f6:
97:3b:4a:db:ed:50:91:40:a0:68:65:0c:11:97:52:09:ec:9b:
c5:ae:f1:a6:d1:ee:8e:5b:eb:f9:e5:f1:f2:db:58:b4:21:b8:
ce:2d:33:d3
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgIUBh+HPdJ9rJ4MqfXcu7PfTbZ1puIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA3MjkxNTM0NDNaFw0yNzA3MjgxNTM5NDNaMDMxMTAvBgNV
BAMTKDQ4OTBBN0UyN0MxODlEMkM5OTM5QzY5MkZBNTlGMEI4RUVGNDc2QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbbhry3nYqN/nhs8EL6/GccJQH
TSKLqi8jQ3jtdGyxK9NhsQzs/roZOkIGoBKY7ENDcc0LcJv1ou8/eCHVnU8J8Kxv
FftY14ls+R6zajHyOwkYu/9Wz/JRnN81eOi6p/nz8LYG1tocLaY4Gx2ufZbCrXCe
ckUOS7qV4/m7cPaHSxKV8OPrEFxI4SGec7SyPrYe242CBVbIpwHYm22cxaLh8/CD
ynVaPtSm5voBleiqlqbbvINyqoF7GzcFBhbLTx6Xjs+G1nH3djjOJIWSWguENJH/
75JVJEKhbeL+Rv4yNN9PQ+oO3XZITaWkWXY26Vtaf3ZCujFygj5e6XB5H/rrAgMB
AAGjggIiMIICHjAdBgNVHQ4EFgQUSJCn4nwYnSyZOcaS+lnwuO70drIwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTUzOTk2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAjw4J
AwQAjw4LAwQAjw4kAwQAjw7IAwQAoo2OMA0GCSqGSIb3DQEBCwUAA4IBAQCH3uq1
vKbZXuaViL3bms6kx5fbrwVur1N3VYzVHd8SMSyq3Bv+JlSk6lemwgfvs1JMKxG8
7770O29b6ReQp2oyLPwYkvwmgHiKOn0K8otz7UeJtvUhM980FNqFJ+BmTmaBjtal
5rb7Q/1jE9OJBCABBFmK2WGNuQKPyFfOIr+++r8o82b4A2su/eYvMFy+jF57yMdN
YOYcjAqPxAS1y1dvsiAfFSkE0Z+yUa24ZwPZOAgL2IHg6xCIfqiaL7wisnWCMK6G
mSvA+gH7b4JhDYWP2jBpwECUw/aXO0rb7VCRQKBoZQwRl1IJ7JvFrvGm0e6OW+v5
5fHy21i0IbjOLTPT
-----END CERTIFICATE-----
Generated at Thu Sep 3 07:12:02 2026 by rpki-client