Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154132.roa
File: AS154132.roa (raw, json)
Hash identifier: 369JL9idvUh7FfB6TPztC06nFhsG3BG54g0W8DzPjJ4=
Subject key identifier: C6:9A:A8:36:E4:F4:72:CA:55:13:DD:92:CF:CE:BB:DB:BB:44:94:37
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5E9447DD94066C359093BDF45EDCEF5D4A379519
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154132.roa
Signing time: Mon 09 Nov 2026 12:27:44 +0000
ROA not before: Mon 09 Nov 2026 12:22:44 +0000
ROA not after: Mon 08 Nov 2027 12:27:44 +0000
asID: 154132
IP address blocks: 162.141.24.0/24 maxlen: 24
162.141.144.0/24 maxlen: 24
162.141.168.0/24 maxlen: 24
167.148.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:94:47:dd:94:06:6c:35:90:93:bd:f4:5e:dc:ef:5d:4a:37:95:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 9 12:22:44 2026 GMT
Not After : Nov 8 12:27:44 2027 GMT
Subject: CN=C69AA836E4F472CA5513DD92CFCEBBDBBB449437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:08:9f:dd:36:8b:fc:a3:58:8d:56:55:67:
be:1f:f3:81:01:a1:ed:4f:a3:d3:4c:4b:52:5c:0e:
21:8d:66:1a:4d:c9:55:4d:5a:bb:82:b6:83:7a:cc:
10:69:98:ed:a0:09:8c:19:c3:da:4e:ba:f2:f0:1f:
1e:ec:8b:ec:36:9b:80:d1:4a:4a:b4:3b:24:80:28:
0b:50:4f:b7:d6:d0:c6:6b:fd:3c:32:6d:7b:b9:a5:
d2:1e:d5:ab:e8:5f:da:9d:30:dc:97:27:ce:94:c0:
3c:3b:c3:f2:9f:b8:84:99:dd:11:0d:3d:0d:1e:16:
5f:8f:ad:37:97:dc:79:fb:bf:95:9a:81:00:3e:49:
43:53:de:6d:85:b0:a1:be:06:9b:11:b4:75:f5:0e:
29:35:6c:0a:b8:56:a9:48:3d:b3:a0:c1:5c:b9:94:
63:10:84:bf:2f:d1:98:85:b3:50:06:4d:cf:88:9c:
4b:08:32:da:1d:f5:ab:59:20:92:7c:f2:3e:7f:e3:
87:5e:32:dc:2c:3d:2b:71:03:bf:f7:a2:c1:29:0b:
f7:05:3d:bf:cb:6e:ff:b1:f3:09:b7:29:d8:8d:e5:
37:89:20:4b:9e:f2:35:d4:f7:56:de:be:d8:ce:c7:
23:be:23:ad:34:5e:33:18:41:91:5d:db:26:23:91:
fb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9A:A8:36:E4:F4:72:CA:55:13:DD:92:CF:CE:BB:DB:BB:44:94:37
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.24.0/24
162.141.144.0/24
162.141.168.0/24
167.148.64.0/24
Signature Algorithm: sha256WithRSAEncryption
18:cb:f7:1e:1a:81:47:24:bb:24:fa:df:70:74:1f:a4:ed:0f:
39:88:78:90:72:ce:6a:bc:93:39:a3:4e:7b:1e:77:ea:05:fa:
5e:b9:a6:2b:04:4f:4c:77:44:ac:7e:f1:9d:2d:3f:7b:60:8d:
dd:1b:36:a4:44:b2:ef:4c:dd:a2:4e:a4:a7:ec:d9:7d:f7:c9:
b2:ae:38:68:ac:71:f7:96:6c:1e:b1:a1:ea:5c:de:45:b1:d8:
bb:c9:bb:22:6b:d2:e1:2a:28:93:d6:d0:82:6f:f8:7d:bb:4c:
8a:f8:15:da:1e:f2:4b:48:0e:2d:99:73:64:47:9b:2c:67:1f:
a8:f6:6d:2c:d0:15:3c:d9:ae:de:2d:a2:ae:89:12:74:63:22:
a1:f0:03:12:14:61:56:bf:9a:2b:9e:c1:1f:62:c5:17:1f:19:
79:7a:5a:70:23:cd:e2:9b:76:96:10:ac:26:7c:d0:1b:40:b0:
e5:81:07:0a:bf:2a:76:01:84:03:89:5f:3a:03:67:65:5f:36:
20:3a:f1:e0:d2:75:3b:9f:6d:96:e0:c4:aa:ba:b3:50:29:a4:
07:01:01:af:64:8d:89:3a:3b:fe:9b:c9:33:f3:39:15:ff:81:
3b:53:a2:d3:65:bc:7a:8c:21:61:24:c8:13:78:71:3c:7f:a2:
f8:1d:1c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:21:36 2026 by rpki-client