Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS134494.roa
File: AS134494.roa (raw, json)
Hash identifier: isRWuClkYFagCuqu9y2HcIG0dtRLjK3MG3DMMO2K70s=
Subject key identifier: C5:1F:D8:DD:92:48:5C:76:5C:B7:12:0A:C2:6E:B7:1C:BB:7F:D4:47
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1B824608FDBD8FC84247388A0022F3ADA1DF1002
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS134494.roa
Signing time: Thu 06 Aug 2026 09:02:45 +0000
ROA not before: Thu 06 Aug 2026 08:57:45 +0000
ROA not after: Thu 05 Aug 2027 09:02:45 +0000
asID: 134494
IP address blocks: 143.20.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 11:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:82:46:08:fd:bd:8f:c8:42:47:38:8a:00:22:f3:ad:a1:df:10:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 6 08:57:45 2026 GMT
Not After : Aug 5 09:02:45 2027 GMT
Subject: CN=C51FD8DD92485C765CB7120AC26EB71CBB7FD447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5b:e0:7b:f7:76:51:45:21:3a:db:49:69:82:
8b:36:35:0b:8d:8b:db:92:a9:1f:7d:d5:3e:e6:f7:
41:bf:13:69:c6:12:9c:d1:16:c1:f6:0e:ab:9c:3b:
c5:c1:11:c2:73:a1:a6:d7:c9:94:94:e5:6c:2a:9e:
09:28:cf:89:33:d0:3a:7d:05:e7:39:41:78:0a:f3:
ba:cb:e2:d6:ff:7a:bf:7c:93:6c:7d:87:58:54:23:
e4:75:9c:53:2a:0a:18:37:c7:1d:f6:65:d4:31:2a:
68:d7:a8:bd:e1:6f:df:93:17:42:8c:c0:7e:7f:25:
0e:b8:59:cf:e1:fe:26:9c:ef:9b:62:f2:91:22:99:
55:16:1e:ff:7a:07:f5:50:fd:9f:93:9b:f0:59:79:
c4:04:11:7f:a5:4f:6d:77:6d:7f:01:9f:0f:1d:63:
bd:f3:10:ff:81:7e:62:6a:c3:1f:b9:98:1e:12:0c:
53:3f:b0:61:6d:0f:d6:7b:2b:e3:8b:c0:f8:2e:9b:
de:13:71:9e:cc:9f:05:63:63:2f:ea:bb:de:79:be:
6f:59:d8:c0:53:08:97:77:b6:59:e8:0c:27:cd:92:
5a:c1:b4:ef:26:5d:c4:b4:26:3e:7d:2e:0a:3a:f8:
1e:84:25:08:04:23:7b:12:6a:60:53:3b:ca:97:c8:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1F:D8:DD:92:48:5C:76:5C:B7:12:0A:C2:6E:B7:1C:BB:7F:D4:47
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS134494.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.131.0/24
Signature Algorithm: sha256WithRSAEncryption
32:70:7e:41:69:2b:a4:ca:28:1e:d3:ff:cd:12:21:e7:3a:2d:
cc:66:20:ae:b9:e7:36:f0:29:b2:ae:ac:90:5c:53:c8:d5:dd:
c0:5b:1c:41:14:d8:f3:8b:03:f7:ff:fb:de:c8:e5:49:16:91:
12:98:bd:f2:33:5d:1b:ba:49:74:01:b1:7e:fc:ef:7a:38:53:
b5:01:85:dd:41:0b:ed:2e:a9:88:1f:c7:e1:63:d4:a9:00:6e:
9d:bd:47:4e:36:1f:ac:3c:2f:b0:d6:92:15:85:55:96:94:bf:
a2:08:7e:5e:f5:ae:1f:67:f5:39:4d:6a:e1:8a:4b:1b:bd:f3:
11:a2:21:ff:c2:e6:84:21:e4:15:2c:73:33:13:ef:c4:90:34:
69:a6:a2:c1:58:52:81:b3:f6:52:9c:25:ac:74:db:7c:d8:80:
ca:74:91:41:54:4f:41:d8:4b:41:0e:9e:45:21:78:1f:99:a6:
47:aa:1c:cf:20:05:ef:dc:6f:ea:90:da:d8:bd:01:0f:c4:fa:
b9:9c:1f:1b:45:5c:73:0f:ee:d5:82:dd:5c:5c:92:a1:37:50:
83:b1:1b:f8:77:69:3b:bd:15:60:44:cf:c3:d0:2f:0c:ad:8a:
fd:a9:b9:61:9a:e1:f7:b6:92:bb:59:fd:b5:24:38:8f:98:60:
09:2b:e8:23
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUG4JGCP29j8hCRziKACLzraHfEAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA4MDYwODU3NDVaFw0yNzA4MDUwOTAyNDVaMDMxMTAvBgNV
BAMTKEM1MUZEOEREOTI0ODVDNzY1Q0I3MTIwQUMyNkVCNzFDQkI3RkQ0NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnW+B793ZRRSE620lpgos2NQuN
i9uSqR991T7m90G/E2nGEpzRFsH2DqucO8XBEcJzoabXyZSU5Wwqngkoz4kz0Dp9
Bec5QXgK87rL4tb/er98k2x9h1hUI+R1nFMqChg3xx32ZdQxKmjXqL3hb9+TF0KM
wH5/JQ64Wc/h/iac75ti8pEimVUWHv96B/VQ/Z+Tm/BZecQEEX+lT213bX8Bnw8d
Y73zEP+BfmJqwx+5mB4SDFM/sGFtD9Z7K+OLwPgum94TcZ7MnwVjYy/qu955vm9Z
2MBTCJd3tlnoDCfNklrBtO8mXcS0Jj59Lgo6+B6EJQgEI3sSamBTO8qXyAV7AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUxR/Y3ZJIXHZctxIKwm63HLt/1EcwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMTM0NDk0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxSD
MA0GCSqGSIb3DQEBCwUAA4IBAQAycH5BaSukyige0//NEiHnOi3MZiCuuec28Cmy
rqyQXFPI1d3AWxxBFNjziwP3//veyOVJFpESmL3yM10bukl0AbF+/O96OFO1AYXd
QQvtLqmIH8fhY9SpAG6dvUdONh+sPC+w1pIVhVWWlL+iCH5e9a4fZ/U5TWrhiksb
vfMRoiH/wuaEIeQVLHMzE+/EkDRppqLBWFKBs/ZSnCWsdNt82IDKdJFBVE9B2EtB
Dp5FIXgfmaZHqhzPIAXv3G/qkNrYvQEPxPq5nB8bRVxzD+7Vgt1cXJKhN1CDsRv4
d2k7vRVgRM/D0C8MrYr9qblhmuH3tpK7Wf21JDiPmGAJK+gj
-----END CERTIFICATE-----
Generated at Thu Aug 13 00:28:55 2026 by rpki-client