Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS151704.roa
File: AS151704.roa (raw, json)
Hash identifier: ivj9HYv3yO8Ve0jD4E0+qx4nqR8kQgqxCsLMkB8O9bI=
Subject key identifier: 64:C4:7B:C3:6A:81:5F:AE:A4:0F:57:3E:8F:25:06:05:24:4F:FB:8D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 17A7AB20A559E3E77BD12AE71DFD1FA890020653
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS151704.roa
Signing time: Tue 10 Nov 2026 00:01:23 +0000
ROA not before: Mon 09 Nov 2026 23:56:23 +0000
ROA not after: Tue 09 Nov 2027 00:01:23 +0000
asID: 151704
IP address blocks: 178.92.122.0/24 maxlen: 24
178.94.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a7:ab:20:a5:59:e3:e7:7b:d1:2a:e7:1d:fd:1f:a8:90:02:06:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 9 23:56:23 2026 GMT
Not After : Nov 9 00:01:23 2027 GMT
Subject: CN=64C47BC36A815FAEA40F573E8F250605244FFB8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:4a:db:41:6c:1d:55:8f:7b:cf:c1:d4:87:
7e:55:28:63:88:e7:a2:f3:42:aa:68:ed:f9:ae:24:
06:e9:31:93:be:d6:eb:da:ef:0a:0f:e9:4c:6c:e3:
ee:d2:7f:e2:74:cb:1e:4b:0b:29:54:c6:d0:a4:07:
32:89:b2:50:0b:c6:99:ba:b7:0a:b4:33:a9:07:cc:
02:32:57:56:9d:40:bd:2f:73:fd:11:2d:0a:37:2f:
12:0e:b7:76:29:a1:17:6a:d3:65:52:dc:84:4e:d0:
15:2d:1a:b9:d0:b9:4d:29:39:7d:76:4c:18:e9:a8:
69:71:e2:e7:98:94:02:5f:bc:13:a1:a1:f9:15:62:
1b:27:8c:34:66:d3:b6:75:b1:b5:62:9b:38:28:86:
44:58:a9:0c:43:67:ec:b4:73:73:0e:1b:5f:53:3f:
3c:9c:93:ce:39:eb:77:1e:dd:5e:63:67:a3:2d:f3:
b5:5e:56:4e:e9:68:54:c1:ce:3d:42:b0:9e:25:3b:
ec:72:e9:8f:4e:a8:3f:dd:c6:61:68:15:64:87:23:
04:4d:42:55:7c:06:d8:67:c3:90:8e:55:31:8c:06:
ba:3f:c4:94:c7:de:fa:a4:b0:37:55:19:57:dc:94:
b3:cb:be:27:2a:e1:4f:40:4f:c0:df:16:dd:fb:02:
b0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C4:7B:C3:6A:81:5F:AE:A4:0F:57:3E:8F:25:06:05:24:4F:FB:8D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS151704.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.122.0/24
178.94.176.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f8:87:70:b3:9c:3f:ca:ef:3f:da:2e:bc:b8:0b:64:3d:2a:
5d:6e:f5:5f:5b:41:0e:23:78:c4:96:35:72:5b:15:bc:a3:c4:
67:57:ab:f8:b9:d4:2d:4d:45:35:f6:00:fa:b9:4a:21:33:da:
43:48:2e:12:ad:0e:14:63:c7:8f:07:ab:08:3f:30:bc:cb:80:
59:2f:9e:d9:58:c8:0d:15:bb:de:12:e3:9e:f6:1d:5d:34:3c:
fb:db:ef:90:7b:14:f4:d2:2d:fd:2e:c0:77:1b:79:53:2d:6f:
e3:c7:07:e5:e4:87:7d:56:eb:cd:02:00:81:dd:41:cc:10:3c:
47:8d:6a:87:82:dd:a0:bf:1e:70:89:ad:2e:ce:83:3f:1f:bc:
69:3b:36:93:f4:dd:d8:37:5f:36:e4:35:38:c5:6a:3d:08:55:
5e:f3:f3:19:93:ba:b8:0c:a3:2a:9a:57:cd:e7:f4:3a:eb:07:
9f:f5:af:c8:d2:f4:f9:16:45:82:8c:47:97:aa:5f:82:7d:16:
2b:cf:05:e6:7b:7b:f4:1f:b5:ca:5c:3f:5d:6b:e8:39:ca:98:
68:94:33:23:62:dd:f1:75:7b:50:ac:b8:a0:2e:fc:f8:33:c7:
13:d2:3b:8a:6a:b3:42:37:b1:f9:b3:31:d5:27:6b:70:26:83:
fc:03:eb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 09:12:25 2026 by rpki-client