Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS4213.roa
File: AS4213.roa (raw, json)
Hash identifier: DgmohIJXSXyMCCadBThwba3eErq5qNmtOTHDpKGhV8o=
Subject key identifier: 1D:3B:D7:1A:59:3B:AB:2A:A7:54:2F:3D:5E:84:0B:49:80:16:64:16
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 74D4F81B3294E5D9331555262C448B13369F776E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS4213.roa
Signing time: Wed 03 Jun 2026 07:02:39 +0000
ROA not before: Wed 03 Jun 2026 06:57:39 +0000
ROA not after: Wed 02 Jun 2027 07:02:39 +0000
asID: 4213
IP address blocks: 150.241.174.0/24 maxlen: 24
150.241.234.0/24 maxlen: 24
162.141.48.0/24 maxlen: 24
162.141.116.0/24 maxlen: 24
162.141.138.0/24 maxlen: 24
167.148.136.0/24 maxlen: 24
167.148.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d4:f8:1b:32:94:e5:d9:33:15:55:26:2c:44:8b:13:36:9f:77:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 3 06:57:39 2026 GMT
Not After : Jun 2 07:02:39 2027 GMT
Subject: CN=1D3BD71A593BAB2AA7542F3D5E840B4980166416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:ae:18:71:7b:35:f8:b8:58:4c:ed:b0:51:
96:96:03:4c:58:84:a3:37:57:01:05:5f:43:e6:dd:
67:69:40:d3:44:2b:28:be:81:d5:d2:97:b2:20:3d:
88:a7:b7:9b:9b:41:d0:fb:c0:21:03:3c:a8:61:1f:
de:9c:0a:04:fd:30:8b:f4:eb:75:7a:ab:2d:cf:ea:
88:8a:e9:50:7e:66:e9:b7:33:0f:97:c3:c4:a4:a5:
0e:95:ef:63:6e:0c:d5:33:7e:7a:c7:a2:3b:d2:7a:
b7:9b:d9:3c:7b:dc:03:93:c2:d3:97:f3:66:71:80:
4f:9a:15:9f:cc:bb:d6:ca:ce:c1:69:ed:d1:05:4e:
24:0b:28:e3:90:63:2f:d2:d3:5e:46:6e:6f:5a:57:
20:91:00:58:4b:97:70:47:29:0f:07:78:36:77:63:
a5:ab:16:18:73:24:c5:4c:b3:76:9d:1d:89:cd:c7:
86:42:78:e7:3e:81:b0:c2:83:d1:74:b3:9c:9c:07:
d0:e4:15:e8:64:3b:92:f8:0b:49:c7:27:df:fc:9c:
a5:b1:68:61:42:9e:ca:5f:7e:3f:55:d1:38:f7:55:
59:3b:a3:4e:33:df:61:35:89:c7:8c:3c:15:7b:36:
25:56:f7:1c:e0:0e:fb:71:5e:9f:db:28:7c:97:54:
bb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3B:D7:1A:59:3B:AB:2A:A7:54:2F:3D:5E:84:0B:49:80:16:64:16
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS4213.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.174.0/24
150.241.234.0/24
162.141.48.0/24
162.141.116.0/24
162.141.138.0/24
167.148.136.0/24
167.148.162.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:be:a1:d8:67:de:74:4c:9e:bf:87:50:08:80:98:cb:d2:a7:
9b:53:e7:78:65:7a:5f:38:a5:e8:cd:88:73:5c:c3:ab:f0:df:
de:60:f8:f7:3a:a3:97:a2:e6:39:7a:d2:bf:d2:45:29:81:f9:
ed:2c:26:a3:f5:47:7a:91:a0:72:fd:02:29:ec:62:2c:f8:eb:
04:3d:a6:b5:3c:b3:a6:5c:4a:23:64:9a:38:6d:db:12:38:34:
12:d7:33:fc:e9:4d:d8:ae:0a:72:99:67:28:4d:ea:76:2c:4a:
bc:e0:49:c9:96:89:ad:95:c0:24:05:06:70:a7:5e:f7:83:b7:
c8:77:26:a3:36:f3:44:c5:f6:d4:c1:77:e5:b3:c2:83:31:d9:
94:59:df:56:c6:04:3a:85:c2:81:9a:7b:0e:8b:0a:41:9d:6e:
f5:58:9f:18:85:0f:c1:db:8b:16:d2:29:44:36:57:9b:ce:61:
ac:cc:b2:4b:db:06:53:6e:f5:42:bd:82:a5:d7:f0:92:22:e5:
cc:0f:e7:a8:18:24:52:83:d4:b8:ae:f8:86:fd:43:75:b8:40:
4f:fd:20:c4:e8:6b:f2:d4:7f:5f:35:da:77:dc:a0:55:09:91:
08:97:0c:2a:94:a8:ab:7d:40:d9:87:82:b8:b6:ce:05:7b:66:
94:00:bc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:25 2026 by rpki-client