Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS151380.roa
File: AS151380.roa (raw, json)
Hash identifier: DWrw1cQL1rZGcNIo3Oa+sQmgrclneYZFXQz9jD/Enc0=
Subject key identifier: E7:83:2F:F5:E3:30:43:E0:22:57:0D:3F:80:28:4E:7E:12:DD:19:F0
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 6CDF5B7E7FF3D41D0F2821A3B1BAD566A48F489D
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS151380.roa
Signing time: Thu 07 May 2026 21:53:25 +0000
ROA not before: Thu 07 May 2026 21:48:25 +0000
ROA not after: Thu 06 May 2027 21:53:25 +0000
asID: 151380
IP address blocks: 46.236.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:df:5b:7e:7f:f3:d4:1d:0f:28:21:a3:b1:ba:d5:66:a4:8f:48:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: May 7 21:48:25 2026 GMT
Not After : May 6 21:53:25 2027 GMT
Subject: CN=E7832FF5E33043E022570D3F80284E7E12DD19F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:e5:ce:0a:8f:04:b7:2d:70:4a:95:fe:9d:
33:8a:21:93:dc:6c:7a:30:28:d7:99:26:54:1d:83:
f5:ca:79:16:eb:21:74:86:24:41:9f:de:db:a8:81:
48:ec:06:82:93:e1:3e:9b:eb:f6:3a:5b:0b:d9:45:
cd:06:7b:11:6b:31:b2:e9:ec:7c:57:20:ec:78:ad:
2c:86:1c:80:9c:9c:5f:01:dc:d3:5e:88:4d:e1:22:
69:64:25:5c:a8:5c:a4:27:97:b7:95:b0:a4:21:85:
84:2f:a0:22:e8:35:13:e7:2f:e2:d8:db:b5:ae:af:
89:bc:74:58:3e:dc:0e:e1:ee:b2:04:48:c8:68:7a:
14:08:fe:f4:8c:20:a5:f5:4d:67:67:f1:c9:7a:f5:
35:93:0b:47:43:39:93:ad:32:1e:2e:bb:b1:46:19:
1c:f0:dd:bc:49:fd:cb:e7:1f:36:f2:d2:80:13:6a:
61:c5:cc:a6:d4:88:13:c0:83:95:7a:bc:56:58:13:
2b:9e:2b:74:e1:84:4e:95:22:cd:f7:dd:56:db:d1:
8d:26:ef:84:d3:9a:6c:42:df:5c:ad:5e:ad:90:87:
18:29:4c:32:cb:7c:60:63:5a:1a:df:15:ca:51:bd:
6c:e5:ed:43:d1:9d:dc:73:e1:e5:12:64:ab:97:58:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:83:2F:F5:E3:30:43:E0:22:57:0D:3F:80:28:4E:7E:12:DD:19:F0
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS151380.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.207.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:9e:42:0f:79:83:1e:09:91:9a:12:34:87:15:3d:16:42:3c:
da:8d:40:9f:7c:73:f3:81:d4:3d:31:99:fd:a3:cd:fa:c4:8d:
20:80:5b:ac:25:80:e9:f1:3e:0a:f5:12:46:37:9c:e1:9e:23:
3c:5f:ba:76:5e:36:27:52:84:90:54:2d:f7:69:7a:a3:72:a9:
dd:83:f8:10:fd:c6:16:cb:e7:fe:15:b8:ca:00:48:40:b4:19:
e4:23:3b:4d:6c:c3:ed:ad:11:54:f1:f9:b5:cb:63:17:53:1f:
47:ba:ec:2a:68:74:57:d1:8e:71:47:3a:8a:3b:47:1c:7d:05:
f4:4e:f5:94:31:31:eb:22:89:2b:35:08:50:ee:63:1d:bb:26:
88:46:60:71:62:9b:5b:78:7a:1e:0c:3c:ea:e3:4d:2a:32:82:
91:19:96:43:de:14:71:7d:45:fa:0b:d6:6f:b8:c2:69:db:0d:
9f:49:69:cf:04:cf:87:17:15:ae:66:4b:57:d2:07:43:00:88:
df:ad:38:64:98:67:f6:33:1c:fb:a0:79:e0:eb:fa:59:ee:f9:
b4:e8:5d:56:28:7c:5f:68:2b:aa:27:aa:f0:10:fd:ce:0d:c0:
70:0a:9f:3e:f6:74:c6:02:45:de:38:09:e0:e1:40:af:bc:54:
20:de:78:0d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUbN9bfn/z1B0PKCGjsbrVZqSPSJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA1MDcyMTQ4MjVaFw0yNzA1MDYyMTUzMjVaMDMxMTAvBgNV
BAMTKEU3ODMyRkY1RTMzMDQzRTAyMjU3MEQzRjgwMjg0RTdFMTJERDE5RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76+XOCo8Ety1wSpX+nTOKIZPc
bHowKNeZJlQdg/XKeRbrIXSGJEGf3tuogUjsBoKT4T6b6/Y6WwvZRc0GexFrMbLp
7HxXIOx4rSyGHICcnF8B3NNeiE3hImlkJVyoXKQnl7eVsKQhhYQvoCLoNRPnL+LY
27Wur4m8dFg+3A7h7rIESMhoehQI/vSMIKX1TWdn8cl69TWTC0dDOZOtMh4uu7FG
GRzw3bxJ/cvnHzby0oATamHFzKbUiBPAg5V6vFZYEyueK3ThhE6VIs333Vbb0Y0m
74TTmmxC31ytXq2QhxgpTDLLfGBjWhrfFcpRvWzl7UPRndxz4eUSZKuXWJELAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU54Mv9eMwQ+AiVw0/gChOfhLdGfAwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMTUxMzgwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuzP
MA0GCSqGSIb3DQEBCwUAA4IBAQCOnkIPeYMeCZGaEjSHFT0WQjzajUCffHPzgdQ9
MZn9o836xI0ggFusJYDp8T4K9RJGN5zhniM8X7p2XjYnUoSQVC33aXqjcqndg/gQ
/cYWy+f+FbjKAEhAtBnkIztNbMPtrRFU8fm1y2MXUx9HuuwqaHRX0Y5xRzqKO0cc
fQX0TvWUMTHrIokrNQhQ7mMduyaIRmBxYptbeHoeDDzq400qMoKRGZZD3hRxfUX6
C9ZvuMJp2w2fSWnPBM+HFxWuZktX0gdDAIjfrThkmGf2Mxz7oHng6/pZ7vm06F1W
KHxfaCuqJ6rwEP3ODcBwCp8+9nTGAkXeOAng4UCvvFQg3ngN
-----END CERTIFICATE-----
Generated at Wed May 13 02:35:21 2026 by rpki-client