Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS150293.roa
File: AS150293.roa (raw, json)
Hash identifier: 4udkFMHSlYpk2nm6qL7a/KxGagoUH92YCBq5adKl0qk=
Subject key identifier: 51:D0:E6:C1:92:0A:B4:3C:98:56:84:E5:4C:08:76:F0:13:FF:6D:AE
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 3718AF125C14458D8D3127F0E333A3D9C5842B5A
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS150293.roa
Signing time: Sun 26 Apr 2026 11:26:39 +0000
ROA not before: Sun 26 Apr 2026 11:21:39 +0000
ROA not after: Sun 25 Apr 2027 11:26:39 +0000
asID: 150293
IP address blocks: 193.187.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:18:af:12:5c:14:45:8d:8d:31:27:f0:e3:33:a3:d9:c5:84:2b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Apr 26 11:21:39 2026 GMT
Not After : Apr 25 11:26:39 2027 GMT
Subject: CN=51D0E6C1920AB43C985684E54C0876F013FF6DAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:0c:da:48:7a:2f:83:94:af:ee:70:01:e2:
9a:d9:c5:fa:3c:62:e8:43:97:a7:ec:1c:1c:2a:a1:
bc:8e:f2:92:36:80:0f:25:48:00:0a:42:35:39:bd:
4e:fd:96:f3:a6:43:0f:a6:fa:f2:9d:6d:21:d6:ac:
3a:6e:00:21:36:f3:72:0f:99:ec:c7:5c:ec:5f:b3:
b8:4a:78:3c:0d:29:cb:0f:fb:4a:69:d3:0a:fa:98:
fa:03:18:9f:24:c8:06:2e:95:b3:bb:29:0a:8e:77:
f9:b7:bc:ba:6f:90:3d:77:12:5a:27:48:d1:6a:dd:
c3:eb:12:1a:f2:ea:36:0d:1d:59:4e:b8:b0:cc:98:
b3:a6:84:0e:31:dd:13:62:e2:ed:f1:95:3a:c0:d8:
a4:12:99:36:90:7f:de:dd:63:ae:41:93:b9:49:1b:
d9:4f:86:4a:02:8c:58:15:d9:1c:cc:0d:0f:f1:c6:
b8:de:cb:fe:b2:8b:ca:75:8f:58:f4:a4:3d:7c:9e:
cc:d2:45:a2:24:d5:74:26:7d:3a:30:a1:6b:a9:e0:
59:37:60:13:68:8a:8a:15:22:b2:09:09:2d:50:6b:
a4:d4:20:08:4a:76:de:4d:73:d8:65:a7:8b:29:c2:
ea:ab:9a:af:91:c6:cc:d6:de:b0:85:0c:92:b6:7d:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D0:E6:C1:92:0A:B4:3C:98:56:84:E5:4C:08:76:F0:13:FF:6D:AE
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS150293.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.110.0/24
Signature Algorithm: sha256WithRSAEncryption
22:75:6d:d4:46:9a:9f:51:d6:1a:1f:d3:6d:48:ee:72:2f:e1:
60:be:73:4e:64:8a:b3:93:17:c7:19:8e:d0:63:64:91:72:94:
f5:4a:2e:19:95:85:ff:ce:cd:1f:ba:b8:55:28:4a:05:09:82:
8f:b6:c7:a7:0f:e9:1a:42:e1:df:f0:96:d0:61:58:66:39:09:
ee:27:0d:43:1b:2f:34:0d:a0:00:0e:1a:38:7a:65:8a:f1:37:
0b:18:7f:4d:92:12:b1:1b:d4:12:1a:98:21:63:f0:c1:af:59:
fe:51:84:fa:ca:b6:75:09:01:b9:15:d7:c4:cc:c8:33:4c:58:
4b:bf:b2:e3:9b:86:ec:79:0c:22:d8:a4:4d:dd:d7:c8:eb:6c:
29:c5:4a:30:b6:d5:e0:d1:9a:f1:f6:35:ff:fd:d0:4e:43:ae:
b2:f1:10:6e:ea:c7:a4:b4:25:06:eb:52:ab:51:74:ea:01:0f:
f9:67:ef:e0:4f:76:f5:c2:a9:69:5c:7a:ac:68:03:19:1b:5f:
fc:2c:7a:5a:47:f8:37:b6:bb:35:c6:c9:21:7a:21:96:cc:63:
66:5a:53:d8:ac:e2:fb:88:d1:9c:00:a5:bc:7e:24:40:15:c0:
0b:6b:b2:76:3c:db:1e:c3:3a:2f:b4:4f:8d:a5:60:54:81:e1:
9a:a7:e0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:50:23 2026 by rpki-client