Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151687.roa
File: AS151687.roa (raw, json)
Hash identifier: FW7nmFSbZgj7xCuk8tGqlEVYfQCSg7+TyCfm1PGBo8g=
Subject key identifier: 46:93:81:7F:18:15:1E:E1:45:A6:B7:AC:77:E2:8E:D8:F1:A8:DF:9B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2E3EF72B584A8263FDD95D9FAB9394004448C783
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151687.roa
Signing time: Tue 14 Jul 2026 06:10:43 +0000
ROA not before: Tue 14 Jul 2026 06:05:43 +0000
ROA not after: Tue 13 Jul 2027 06:10:43 +0000
asID: 151687
IP address blocks: 145.223.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:3e:f7:2b:58:4a:82:63:fd:d9:5d:9f:ab:93:94:00:44:48:c7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 14 06:05:43 2026 GMT
Not After : Jul 13 06:10:43 2027 GMT
Subject: CN=4693817F18151EE145A6B7AC77E28ED8F1A8DF9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f3:3b:03:e5:f7:69:e7:dc:31:1e:73:7d:75:
36:91:da:a6:5a:71:7b:a1:d9:73:d7:b6:d5:b8:15:
de:f8:a1:2d:72:49:e9:69:8d:d2:d7:76:dd:b3:17:
22:3b:ea:5c:c9:2f:bc:2f:f1:c1:7d:f9:72:0f:1e:
e6:a9:fc:9a:86:26:94:e2:f7:d5:76:34:b0:6a:ea:
8f:22:a2:b4:55:c2:e1:bc:3c:34:23:01:e5:ff:cc:
21:59:0f:b3:50:50:74:05:60:97:55:5f:5c:9b:81:
1a:e2:50:4b:70:dc:0a:c6:6f:e4:fe:fe:91:37:9b:
92:33:a5:dc:2b:71:07:57:14:e9:e2:0a:a5:aa:59:
3a:32:08:b7:0b:98:40:52:c1:86:11:37:91:14:54:
81:5d:28:c5:4c:65:a6:3b:47:f9:12:de:b7:12:d9:
05:66:11:62:01:e6:53:e3:bb:af:f5:bd:1e:a4:67:
94:86:23:7f:5c:ca:c6:f4:50:ec:e5:4e:5c:38:4b:
ee:38:2d:77:d8:b3:42:27:38:1b:cd:1d:f2:2b:72:
92:ed:e2:7d:90:7f:89:88:99:7d:49:b4:82:48:19:
6c:bb:67:00:fe:11:f6:8b:36:83:19:22:73:e1:27:
42:69:38:83:45:ba:1e:b0:dd:79:1f:c6:a5:8e:0e:
bc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:93:81:7F:18:15:1E:E1:45:A6:B7:AC:77:E2:8E:D8:F1:A8:DF:9B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151687.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.4.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:20:b8:3e:a9:5f:78:98:84:32:c9:37:2e:a5:c7:af:7c:03:
7b:e0:4f:cd:9e:fa:70:f9:4b:63:26:3f:e9:ff:9f:0a:e9:4d:
15:64:54:93:28:89:a3:04:91:81:c4:16:ff:4b:5f:0e:84:81:
c4:6b:97:cc:24:d2:44:c8:cd:fb:d8:2a:22:da:93:45:fd:8d:
b3:20:c6:88:38:1e:46:21:fc:3c:51:f1:9f:c8:3f:e5:08:93:
42:2c:ef:3b:cf:87:74:d0:06:d7:94:c5:73:24:5e:1f:aa:ac:
a1:bf:c6:12:cd:f7:67:d9:0c:f6:e6:86:88:d9:49:2c:16:cc:
17:de:a3:c2:52:80:3c:3d:1a:0c:56:18:9d:3f:8a:6b:50:0f:
23:18:97:17:55:93:55:36:46:23:44:14:b9:27:2e:3a:96:97:
0a:46:55:00:14:fb:a9:b9:74:11:b4:22:e3:32:1f:29:f4:73:
7b:b5:3b:54:5c:c3:92:d5:0b:f8:75:2c:fc:a7:9b:b5:9f:30:
9f:5c:36:f2:cc:81:24:a7:e0:c9:a5:36:5b:27:93:26:5a:e7:
14:e8:00:e4:56:91:1f:98:bf:1f:c0:ba:96:bd:37:af:03:ee:
38:6b:f0:84:a2:76:de:f0:f7:f5:59:2f:08:39:7f:1d:e6:da:
28:7f:19:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:30 2026 by rpki-client