Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151704.roa
File: AS151704.roa (raw, json)
Hash identifier: RInOdUzb2v7wJlnoS1bdZrejkYepWwB9dBbLCbcjPsM=
Subject key identifier: FD:C0:91:56:74:6D:97:C9:8B:3C:0E:C7:6C:CF:FE:36:9A:99:18:1E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 681C03183ADCAB4F89FFAEE80F8536CA519C8208
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151704.roa
Signing time: Thu 23 Jul 2026 07:21:46 +0000
ROA not before: Thu 23 Jul 2026 07:16:46 +0000
ROA not after: Thu 22 Jul 2027 07:21:46 +0000
asID: 151704
IP address blocks: 168.222.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:1c:03:18:3a:dc:ab:4f:89:ff:ae:e8:0f:85:36:ca:51:9c:82:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 23 07:16:46 2026 GMT
Not After : Jul 22 07:21:46 2027 GMT
Subject: CN=FDC09156746D97C98B3C0EC76CCFFE369A99181E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:3e:2b:ae:7f:2b:76:5f:97:21:7e:e4:65:
a5:bf:f2:8e:f0:8c:bf:72:74:60:2b:fc:31:42:54:
d7:eb:91:37:48:c8:ce:ba:5d:56:52:12:62:d7:a3:
6a:c8:5c:16:da:37:30:fe:82:7b:a4:78:41:05:b6:
89:b7:21:05:d6:02:ab:5d:ea:4e:b6:ee:a0:3d:e7:
a2:96:e4:3e:bf:bf:a5:3b:0e:f9:d8:3e:7e:56:9b:
8f:60:54:33:51:4c:0a:d2:f2:25:01:29:01:2f:06:
dd:b9:7a:93:44:20:cd:10:1f:16:01:76:51:a1:ff:
c5:22:5d:0f:0e:e2:6d:da:47:9e:ee:df:8d:d8:01:
e5:06:54:35:4c:46:7d:d7:7e:7f:0a:7f:02:75:a1:
09:92:cf:94:2b:90:5a:b1:59:df:37:94:d9:73:98:
4e:22:0f:66:0a:ae:ab:6b:dc:93:a1:33:ba:9b:16:
f0:a4:7d:82:cd:24:bf:b6:98:43:ab:4f:34:2f:af:
62:cc:c6:da:d9:f0:e4:0b:3d:5c:1e:b0:c8:d6:f7:
54:36:88:30:63:af:e0:80:87:1c:7e:42:be:df:71:
a1:de:59:ac:ea:8d:50:5d:92:d7:04:d0:17:f1:d1:
42:df:a1:62:c8:81:42:43:37:f6:db:b5:ee:2f:21:
32:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C0:91:56:74:6D:97:C9:8B:3C:0E:C7:6C:CF:FE:36:9A:99:18:1E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151704.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:4b:48:3b:47:86:83:98:af:c2:fe:af:89:7c:e8:6a:83:bf:
7e:57:08:5a:36:eb:4a:6d:60:b1:56:33:97:85:36:93:5f:8f:
cd:d2:7f:95:f3:47:d8:ed:b5:0c:3a:82:02:5f:0d:0b:ad:94:
0b:98:cd:b3:d3:67:af:76:29:d4:32:4c:61:4e:75:bf:73:26:
fe:97:79:31:ce:9d:18:eb:f4:6c:80:30:c4:da:2c:43:ac:5c:
83:cc:a8:e2:47:7d:0f:71:1a:ea:c1:0c:69:90:cc:5d:6e:09:
51:1b:21:6f:1d:bf:54:a6:cf:87:82:ac:0f:d3:e7:d4:63:63:
a2:78:27:31:f5:e3:df:58:f7:99:bb:63:49:bd:69:7f:02:0d:
42:bc:75:f4:4f:e7:fb:b7:07:a6:3d:3b:29:d8:33:2b:23:fc:
65:d1:86:fa:86:14:c2:8c:65:41:46:eb:7e:b0:14:eb:09:92:
89:9f:44:52:33:b6:f4:fa:d7:6c:36:32:a5:1a:ab:52:c5:0a:
87:6b:39:6d:40:3c:a0:0e:d4:92:ab:eb:d8:a9:7e:19:ea:84:
81:57:34:a9:76:80:f0:27:c7:6b:d9:eb:c6:2e:53:cd:e6:f9:
cb:c1:ae:90:04:76:49:2c:a6:ce:0a:26:65:5b:21:41:f2:1e:
ee:85:d0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:12 2026 by rpki-client