Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS154132.roa
File: AS154132.roa (raw, json)
Hash identifier: F4y95Jvv79hev20MJ3+XlALVjNYThUpUPKKNWa04Ivk=
Subject key identifier: 44:E0:1B:79:A1:55:A5:34:56:55:82:85:35:EE:5C:48:F4:D0:45:34
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 383232B2CEEB209D2EB76EF9A968247DB3F5A431
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS154132.roa
Signing time: Fri 30 Oct 2026 19:29:36 +0000
ROA not before: Fri 30 Oct 2026 19:24:36 +0000
ROA not after: Fri 29 Oct 2027 19:29:36 +0000
asID: 154132
IP address blocks: 94.118.200.0/24 maxlen: 24
94.118.212.0/24 maxlen: 24
94.118.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:32:32:b2:ce:eb:20:9d:2e:b7:6e:f9:a9:68:24:7d:b3:f5:a4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 30 19:24:36 2026 GMT
Not After : Oct 29 19:29:36 2027 GMT
Subject: CN=44E01B79A155A5345655828535EE5C48F4D04534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:4c:cb:02:2b:0c:f5:b1:78:91:39:64:5c:
76:31:9a:93:a9:5e:b2:ab:cc:1d:f3:88:cf:b8:3c:
18:44:32:89:04:1e:00:e6:19:db:f9:d4:1f:ec:e7:
10:3f:c7:7a:ea:c1:f8:aa:f2:28:a0:db:65:b2:61:
c8:75:b9:02:12:e6:90:28:b9:ab:44:b8:a8:8d:f3:
b4:3d:05:cf:05:9b:0c:0e:00:37:62:82:4a:5e:44:
09:2c:93:b7:9b:75:9b:79:ce:02:8b:82:db:5b:b1:
a0:2d:d3:64:fc:90:55:21:09:8c:d3:85:30:2e:e5:
d2:64:94:9b:52:59:78:f1:92:a9:c2:c2:bf:e6:7a:
54:17:a4:de:4d:97:6a:25:a3:a7:4b:5d:84:21:4d:
95:1d:06:0d:bc:51:c9:ef:1c:22:aa:83:fe:47:e2:
9a:01:8c:fa:0b:3e:32:7c:c9:95:c4:e7:ea:d0:99:
e7:8c:3f:c0:62:ad:f3:83:66:ae:a5:fa:1f:80:d8:
ee:01:8f:66:84:fb:94:de:9b:44:23:5a:17:7c:89:
78:e4:bb:2d:32:4c:cc:c6:72:11:4a:d6:1b:b8:37:
9a:a5:0f:f7:e9:57:67:bf:f1:cc:f7:bd:f8:1f:0c:
60:66:83:fc:1e:44:ca:92:27:6e:0c:ff:92:14:00:
41:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E0:1B:79:A1:55:A5:34:56:55:82:85:35:EE:5C:48:F4:D0:45:34
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS154132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.200.0/24
94.118.212.0/24
94.118.232.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:01:c4:ec:c8:d1:ac:bd:49:9c:49:24:36:82:b8:2f:09:de:
9a:4e:ef:fe:93:6b:d8:5b:1c:c4:07:59:92:bf:d3:da:15:76:
60:87:02:01:c3:cd:96:94:07:4f:ac:f1:ff:09:93:d0:f1:78:
c2:9c:52:8c:b1:2b:5c:ff:5b:65:e4:55:5e:45:c1:aa:bc:54:
cd:85:e9:b5:46:f3:3e:68:51:2a:83:0c:de:0f:90:01:54:bf:
ac:01:49:52:d7:ab:d7:4d:82:98:e4:e7:5c:64:64:a8:97:76:
0f:b4:51:61:16:60:b2:65:f2:ff:9a:34:94:3d:ed:43:db:37:
89:66:68:42:d0:22:9c:aa:78:c1:86:37:0e:f5:f4:4c:4d:1e:
d3:46:4f:c8:b2:3c:42:56:df:08:6d:af:45:d6:f8:57:e6:4b:
98:cb:96:2f:ac:e0:26:6e:f2:7e:53:22:49:68:30:d5:b1:9e:
88:ee:0a:35:42:51:93:54:12:71:f6:86:46:66:1b:be:7d:62:
57:6d:2d:31:ba:38:3d:4c:60:d5:a1:e0:65:5f:69:dd:9d:fe:
38:21:40:24:34:f0:99:11:e7:c9:e4:99:9b:b0:0c:b2:eb:36:
fd:a0:83:2e:6b:46:99:db:cb:2e:a4:9f:aa:7e:bb:4b:da:5b:
59:b5:6d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:41:34 2026 by rpki-client