Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS149766.roa
File: AS149766.roa (raw, json)
Hash identifier: HXJCgT3GqaYY3SyUMrha81TGpE3o9VDlDd45NuaLFOE=
Subject key identifier: E4:60:19:DC:0D:0F:EE:3B:95:8B:D1:DB:5B:65:F9:D2:C9:89:61:14
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2CB6FBF5A959185C95280C8B2D4DB7B3AFE5B14B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS149766.roa
Signing time: Tue 21 Apr 2026 04:40:03 +0000
ROA not before: Tue 21 Apr 2026 04:35:03 +0000
ROA not after: Tue 20 Apr 2027 04:40:03 +0000
asID: 149766
IP address blocks: 140.150.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:b6:fb:f5:a9:59:18:5c:95:28:0c:8b:2d:4d:b7:b3:af:e5:b1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 21 04:35:03 2026 GMT
Not After : Apr 20 04:40:03 2027 GMT
Subject: CN=E46019DC0D0FEE3B958BD1DB5B65F9D2C9896114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:01:63:dd:16:d4:ba:e5:23:e3:da:e8:3e:
88:83:7f:e1:70:82:20:32:1b:9d:6e:92:65:c9:00:
ac:4c:e4:30:60:5f:d5:86:cb:20:5a:e4:04:53:1f:
cb:78:69:3f:60:b4:ab:f5:b2:09:f6:4b:48:82:f3:
b8:7e:b6:b5:7c:3d:a6:e6:a0:0e:a0:5a:35:3b:0e:
c9:ca:35:3a:e8:c3:a2:8d:a4:ef:7b:55:ba:49:fb:
f4:b0:dc:15:c6:54:27:3b:0e:64:93:5d:21:48:0d:
54:c7:c8:a7:b1:36:d8:30:f8:bd:14:71:b2:ac:66:
9c:c7:79:f1:73:f6:01:07:1c:1e:d1:8a:01:85:47:
16:a3:cb:0d:5a:86:76:b2:c1:77:08:71:7c:69:a8:
69:8e:4c:d2:ec:c3:1f:38:fd:b7:18:7c:74:7a:3f:
e8:a5:d7:45:93:99:aa:f7:52:bd:0a:19:2a:25:15:
d1:90:6b:08:c5:13:be:02:10:c3:07:1d:5a:93:aa:
73:db:ae:e3:81:50:50:d6:97:5a:65:56:ef:38:71:
7d:ae:8a:fb:0c:8c:1f:2a:a0:05:b9:c6:0d:62:fc:
85:a2:0b:bf:cc:7c:21:dd:ae:a5:3e:31:89:ea:89:
70:57:4a:6a:30:97:7d:6d:4f:4f:c6:aa:7d:02:38:
fa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:60:19:DC:0D:0F:EE:3B:95:8B:D1:DB:5B:65:F9:D2:C9:89:61:14
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS149766.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.152.0/24
Signature Algorithm: sha256WithRSAEncryption
61:bb:f7:fc:3f:8f:8f:37:d8:f4:59:9b:79:3d:4b:96:bc:3a:
8f:e4:fb:d1:dd:33:1c:a7:78:60:74:ea:38:00:a6:7e:54:b4:
95:47:01:58:29:c9:e5:ed:da:ad:9e:ef:c3:62:f0:4d:1d:7b:
9d:08:db:81:d5:96:89:3d:ca:43:aa:45:ab:da:3d:3a:10:16:
77:54:97:43:40:ce:2c:84:6c:1d:12:12:19:69:99:56:74:73:
4b:29:4c:f7:1f:55:6f:4d:5b:b4:53:ff:8b:61:a1:e0:81:f6:
8b:3a:8d:b1:f7:a7:3a:e0:f4:26:6e:4d:44:49:3b:bf:c9:35:
00:e5:66:c4:ac:fe:5b:8b:81:e6:61:47:67:5d:30:a8:aa:d5:
f1:37:3f:86:87:d0:24:89:90:30:a2:c0:cf:12:04:2d:eb:54:
4d:92:2b:f2:97:9e:b2:2d:91:b0:05:0e:5e:33:cb:ac:e8:52:
f9:53:72:a0:77:13:5a:52:2f:f5:e7:81:df:2c:78:24:54:24:
54:a4:fb:72:6d:ed:b9:b9:a4:8c:02:ad:27:f9:a3:50:ac:c5:
b3:75:f4:21:9b:e6:12:47:d9:74:1d:e0:cd:51:d7:48:e8:8f:
07:26:38:73:e9:f7:ff:d1:57:66:97:2f:ee:4f:81:67:44:0b:
22:f3:65:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:47 2026 by rpki-client