Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151704.roa
File: AS151704.roa (raw, json)
Hash identifier: Y/Ff5p0TzuvfiSWRKH9g1fDWX1nSFpV4XDMIIcTAfxo=
Subject key identifier: 42:2D:D0:8D:20:46:BD:16:3A:2E:C9:C6:DE:BA:F3:74:92:12:92:ED
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0A2F8D3EFBBCD2AC1FAE1FDBCD359D5F6D5AE434
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151704.roa
Signing time: Thu 19 Mar 2026 05:55:06 +0000
ROA not before: Thu 19 Mar 2026 05:50:06 +0000
ROA not after: Thu 18 Mar 2027 05:55:06 +0000
asID: 151704
IP address blocks: 162.141.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:2f:8d:3e:fb:bc:d2:ac:1f:ae:1f:db:cd:35:9d:5f:6d:5a:e4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 19 05:50:06 2026 GMT
Not After : Mar 18 05:55:06 2027 GMT
Subject: CN=422DD08D2046BD163A2EC9C6DEBAF374921292ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1f:a3:9a:07:55:44:cb:a5:65:e8:65:00:2b:
6b:e1:2d:78:af:e1:61:98:34:b5:5c:ae:24:b3:aa:
15:2a:ac:7d:0a:0e:7b:19:d4:e8:9f:e7:65:3f:68:
45:31:c5:f0:f2:32:3d:c0:16:f7:95:10:98:03:38:
24:76:7c:dd:b6:ca:28:27:69:0f:1c:04:26:a1:1c:
0a:97:f7:17:ce:4d:3d:23:6a:26:d4:60:fb:73:e1:
ae:4b:96:4e:3f:08:93:5e:4f:6b:73:58:63:ff:bf:
1c:10:2c:aa:02:41:b2:13:dd:41:22:8c:4b:89:f0:
3f:49:28:8e:38:49:94:74:a0:87:8d:91:a9:b8:a3:
eb:2d:f5:62:2b:41:7a:cb:64:b5:bb:28:46:1a:98:
dc:d5:48:b6:38:a2:b3:7d:89:f8:c9:aa:05:2c:10:
f2:26:cc:72:98:b8:45:1e:2c:e3:a0:b8:84:e0:9b:
37:b6:d4:19:fd:10:b8:89:0a:c4:53:ae:92:63:4d:
20:45:7a:23:d3:38:a5:69:5c:04:80:30:b6:af:fd:
3b:12:61:df:cf:dc:45:1a:ac:20:e9:a5:3e:87:a7:
e2:d5:13:23:88:38:71:6e:09:89:b7:cc:96:5a:bf:
be:0d:10:16:31:81:74:62:e9:92:34:fc:d0:9e:bb:
ab:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2D:D0:8D:20:46:BD:16:3A:2E:C9:C6:DE:BA:F3:74:92:12:92:ED
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151704.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.1.0/24
Signature Algorithm: sha256WithRSAEncryption
14:53:eb:70:36:b7:c6:4c:61:28:78:d0:6c:86:6b:b4:59:34:
ce:f3:34:7a:30:44:22:75:84:c1:e4:55:f5:4d:f6:5d:97:8d:
c7:ae:a1:84:02:ed:fc:ea:38:0a:e6:be:5c:f8:72:a1:ff:22:
b2:5c:74:de:fd:e8:c2:e5:bf:19:c5:4c:cf:16:55:49:60:44:
98:8b:e3:09:f9:02:95:9d:87:15:57:59:05:49:95:9b:e1:11:
43:a6:bb:a3:fa:b1:59:a7:00:e0:2b:81:49:4f:92:fb:5e:e7:
8b:7d:90:fb:31:60:23:c0:99:fc:b4:c7:9a:98:78:71:af:3a:
f4:de:19:64:7e:b4:cf:cd:a1:ca:00:70:89:d5:a1:66:43:f3:
5f:81:2a:03:92:f5:a0:28:69:1b:2a:28:06:06:9d:42:df:47:
53:65:00:f9:36:6a:ae:50:f2:a7:18:ed:79:73:e2:16:98:3b:
75:c6:d3:b1:f2:9a:fc:bf:95:ed:d9:25:dd:55:59:90:c3:8e:
63:f5:c4:c6:66:ec:be:c9:c4:05:ce:85:49:65:f5:19:65:a5:
aa:63:f8:f1:1e:4e:f1:28:75:54:17:51:2e:34:57:4c:d9:5c:
ae:07:68:8e:9c:b9:d6:5c:9d:7f:c4:df:6c:03:f9:ff:f5:13:
02:ee:f9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:27:29 2026 by rpki-client