Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: T2m/2E9AwTfFNzWE2GssSn6kua2miOgwDjc4HbgxO9o=
Subject key identifier: 96:EF:5A:C5:D4:12:B1:BC:17:B9:E8:65:0F:22:0A:CA:40:C4:51:A2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3CF93F560D0441DF93B264A42C62AC3874BAC1E4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53356.roa
Signing time: Sat 01 Aug 2026 00:11:48 +0000
ROA not before: Sat 01 Aug 2026 00:06:48 +0000
ROA not after: Sat 31 Jul 2027 00:11:48 +0000
asID: 53356
IP address blocks: 143.14.17.0/24 maxlen: 24
143.14.21.0/24 maxlen: 24
143.14.38.0/24 maxlen: 24
143.14.39.0/24 maxlen: 24
148.135.163.0/24 maxlen: 24
162.141.14.0/24 maxlen: 24
162.141.160.0/24 maxlen: 24
167.148.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:f9:3f:56:0d:04:41:df:93:b2:64:a4:2c:62:ac:38:74:ba:c1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 1 00:06:48 2026 GMT
Not After : Jul 31 00:11:48 2027 GMT
Subject: CN=96EF5AC5D412B1BC17B9E8650F220ACA40C451A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:85:8a:61:55:73:16:05:3f:2f:ed:dc:ed:
74:b5:c4:02:d2:f0:0b:e1:24:e3:32:cc:0c:e8:f2:
ff:23:94:02:99:78:c9:63:0d:15:59:d0:c6:c7:65:
9b:f8:51:44:68:fd:20:b7:95:3d:fa:73:33:87:ea:
ee:f0:da:cc:f0:ae:c7:d3:d6:61:46:85:fd:ab:30:
87:20:39:3a:ba:65:23:de:8a:fe:5c:7e:3e:bd:58:
ed:38:15:39:a9:61:1f:75:4e:68:19:a3:f3:66:22:
b4:2f:df:e1:45:51:54:8b:21:9e:eb:b7:89:59:28:
51:76:8d:52:39:6d:b1:c3:37:6e:d1:2f:4a:95:f0:
2f:07:68:b6:ee:bf:a9:f3:8c:6f:d0:8b:32:3c:81:
e7:3a:90:a2:a4:9a:c2:de:47:6c:f4:14:9c:ab:ff:
6d:7b:1d:51:4f:4b:72:03:5e:e1:c4:54:3d:4f:5a:
d4:b0:29:c1:dd:fe:8c:66:99:72:6c:98:65:1b:9f:
c4:4b:b3:b4:60:b7:20:71:cd:a4:ef:66:2f:d8:20:
a0:40:55:ee:ff:bf:f4:a3:70:ad:0a:b7:a5:95:e2:
17:42:aa:1e:a2:0e:82:03:d6:5c:81:97:3f:a1:4c:
1f:30:58:8b:ce:1d:00:1c:a7:aa:57:a3:e3:75:13:
47:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EF:5A:C5:D4:12:B1:BC:17:B9:E8:65:0F:22:0A:CA:40:C4:51:A2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.17.0/24
143.14.21.0/24
143.14.38.0/23
148.135.163.0/24
162.141.14.0/24
162.141.160.0/24
167.148.182.0/24
Signature Algorithm: sha256WithRSAEncryption
35:4e:80:62:e5:6f:44:7a:a0:18:36:91:27:50:ec:ba:63:b3:
8b:6f:47:89:a9:2e:8d:90:9b:98:2e:76:87:e0:7c:a2:ad:e7:
8d:6e:6b:0c:3b:e2:16:e8:25:e0:e7:36:e6:fd:0d:09:8b:97:
94:24:af:32:bf:64:43:36:9b:cd:a1:5d:b5:51:05:57:28:b1:
f7:90:29:1c:f1:22:34:c1:f5:ba:81:42:a9:cd:2c:99:e8:8f:
ac:67:04:0f:7f:71:77:bf:0a:2d:0d:c6:2b:f5:36:b8:01:89:
b6:f1:14:d0:fe:3e:bc:4f:e2:77:24:32:1a:40:e5:b0:51:e4:
ce:7f:39:e4:1f:2b:3d:6a:1f:9d:4a:0c:a8:b2:cb:d0:9c:ac:
9d:21:98:4e:0c:8e:fd:b5:f5:d7:3e:28:50:bc:bb:6a:ba:0f:
db:b7:c6:5c:8d:9f:d4:5c:e1:4e:1a:53:d3:48:71:42:68:66:
9e:59:c4:a5:57:7d:aa:8d:32:f1:f8:fa:04:02:53:84:bd:2e:
10:ca:ce:e6:0d:4a:2c:93:eb:7a:b2:e9:e5:18:27:22:3b:dd:
58:f7:35:6c:60:11:fe:0d:cc:b2:88:2e:f5:9a:13:60:da:b9:
60:24:d9:13:6f:11:cf:06:cd:69:f0:1d:cc:38:d8:0a:54:4d:
c0:3d:f2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:23:43 2026 by rpki-client