Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS150293.roa
File: AS150293.roa (raw, json)
Hash identifier: reIAUicn8/ptjA2VqM80ZMVGXW722LRTMWI1Iptzgv8=
Subject key identifier: 17:A1:7F:AD:A4:82:EB:D2:0D:A3:18:0B:42:4C:69:04:B6:37:24:1C
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 6514778C665B6EBDB7B64B1B63BC5E24866CCACA
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS150293.roa
Signing time: Thu 19 Mar 2026 06:30:10 +0000
ROA not before: Thu 19 Mar 2026 06:25:10 +0000
ROA not after: Thu 18 Mar 2027 06:30:10 +0000
asID: 150293
IP address blocks: 193.187.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:14:77:8c:66:5b:6e:bd:b7:b6:4b:1b:63:bc:5e:24:86:6c:ca:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Mar 19 06:25:10 2026 GMT
Not After : Mar 18 06:30:10 2027 GMT
Subject: CN=17A17FADA482EBD20DA3180B424C6904B637241C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:c1:e8:28:52:31:2f:6e:fe:42:83:f0:fc:
04:9b:54:88:ac:ae:48:d2:a8:f4:75:5b:cf:4d:ef:
89:0c:f1:97:e2:1c:e4:31:90:03:91:87:17:f1:6d:
f7:ba:68:08:67:4e:b1:11:bd:ed:4c:ec:56:73:3e:
01:37:fb:42:0b:39:eb:7f:0c:e9:da:cf:d7:8b:10:
b0:ca:17:4d:89:06:17:eb:fb:e5:38:ff:a2:8e:b4:
87:6b:6e:47:4d:3b:92:95:58:3f:89:50:6a:cc:63:
40:75:1d:2e:de:69:6d:9e:36:3b:d7:2a:a8:57:0b:
41:b3:be:85:e8:ef:c4:c1:b0:5e:9f:23:48:6a:e5:
f9:ee:e8:bb:69:15:84:3b:37:81:58:d0:c7:74:d1:
d3:cd:2a:07:9e:54:fc:ec:30:a4:f9:e5:17:2f:c7:
d2:41:b8:ba:24:2f:91:fb:21:26:7c:ea:dd:bd:8b:
74:bd:14:50:e5:a1:9d:88:99:ae:be:99:56:27:a9:
78:41:10:c7:b2:70:06:59:29:26:c0:11:41:d3:37:
56:ca:56:93:0d:35:d2:ba:e4:70:bb:52:3e:2f:b6:
08:83:f4:de:c3:e1:6b:d6:76:4f:9f:08:ef:47:73:
20:00:61:d5:0e:ed:22:02:fb:6e:71:30:89:f0:9c:
15:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A1:7F:AD:A4:82:EB:D2:0D:A3:18:0B:42:4C:69:04:B6:37:24:1C
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS150293.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.110.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:db:02:47:82:b2:d6:29:b8:59:f8:95:0a:79:2d:4b:4b:97:
1a:11:49:2c:96:b6:7e:6a:14:3e:fa:01:1f:8b:dd:12:79:a9:
74:77:41:0a:e7:b8:ef:f5:8b:1e:41:74:69:42:9b:b2:fd:1f:
ec:53:ad:63:f6:54:33:67:7d:f4:d4:b5:f6:03:ed:66:10:83:
57:e3:ef:44:8d:ce:d8:dc:18:eb:87:10:df:87:3b:1d:6c:c3:
29:75:fc:5d:38:ed:36:19:45:60:69:90:3b:89:a6:2d:14:10:
1e:87:51:04:bc:04:59:69:0d:3a:ce:d1:42:d9:02:31:e0:8d:
1a:57:a7:ba:ff:95:f8:61:41:49:b3:9b:8a:05:20:ff:45:9f:
32:65:c0:4e:9a:fc:ec:37:28:57:5a:d2:b0:06:41:94:26:3f:
19:1e:3e:a3:b0:00:1d:43:4e:5c:41:e5:c1:e3:f1:57:fb:0e:
6a:87:05:9a:f1:f2:cc:f3:64:09:59:61:77:04:46:6a:7b:e6:
6b:99:4f:89:f2:24:20:c7:7f:cd:04:fb:d5:1d:4c:b7:c7:df:
88:09:60:37:7a:84:31:f1:67:b2:bd:49:49:44:2a:7f:f7:07:
4b:c5:fd:80:5c:a1:45:59:5e:0f:0e:85:17:61:d8:5e:3f:28:
c6:f1:92:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:33:26 2026 by rpki-client