Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153568.roa
File: AS153568.roa (raw, json)
Hash identifier: W1cDA1f9SZpyA+CjpdgJ6+prRw0uXZ4GlUcg4cx5xdI=
Subject key identifier: 48:74:9E:44:29:0B:D8:F3:8F:33:01:DC:D6:29:62:A6:C2:F4:75:D9
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0F5956B7037E1611C7AD361C5029D8D0701919F3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153568.roa
Signing time: Sat 20 Jun 2026 11:14:46 +0000
ROA not before: Sat 20 Jun 2026 11:09:46 +0000
ROA not after: Sat 19 Jun 2027 11:14:46 +0000
asID: 153568
IP address blocks: 155.117.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 03:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:59:56:b7:03:7e:16:11:c7:ad:36:1c:50:29:d8:d0:70:19:19:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 20 11:09:46 2026 GMT
Not After : Jun 19 11:14:46 2027 GMT
Subject: CN=48749E44290BD8F38F3301DCD62962A6C2F475D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:02:db:d0:82:bf:42:14:6a:4a:f9:c0:8a:
22:92:3a:9c:ca:c6:35:42:d3:35:5a:fe:c9:c0:5f:
f7:da:02:12:4f:88:e8:4f:06:0d:2f:76:38:83:b7:
7e:95:33:7e:ed:10:76:a5:9b:43:39:e4:5e:5f:6c:
de:07:c3:e1:ba:0d:72:5c:be:9c:e0:6b:58:d4:26:
f2:a7:31:56:7d:06:d7:1f:31:d1:c6:69:e4:36:a0:
40:cb:b5:c2:f8:49:65:17:d4:66:f8:38:e2:93:15:
67:9e:04:45:de:c5:3f:fb:82:55:cf:b7:a3:e4:0a:
c4:84:a4:06:33:ee:e0:0d:70:f3:cc:1e:09:60:74:
3d:71:fc:32:46:1a:75:24:cc:14:66:94:6a:03:5f:
96:00:f9:72:dc:43:72:08:ff:69:61:19:02:f0:4c:
d7:75:f0:9d:81:d5:b1:37:ec:f9:6f:66:77:31:db:
0a:45:4a:d9:b6:32:22:e9:d0:bc:f4:c0:4b:ee:30:
6f:ee:0c:ec:a5:66:a4:cf:ce:9c:69:b4:67:df:12:
02:0a:49:af:bf:2a:ba:96:45:cc:47:18:dc:d8:34:
d8:5d:67:e7:59:7e:f3:86:4d:28:d2:97:52:f5:58:
ac:fc:74:db:2e:3f:12:0a:ca:e8:83:26:ee:d1:c1:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:74:9E:44:29:0B:D8:F3:8F:33:01:DC:D6:29:62:A6:C2:F4:75:D9
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153568.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.105.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:4f:56:8c:d9:db:35:e0:59:72:ba:c6:5f:5c:c4:01:ca:1b:
02:fa:02:f0:83:90:58:13:6c:26:a3:12:8f:e8:c8:27:1a:36:
e5:7c:4a:83:ac:c7:af:64:6a:0f:ea:13:de:e6:7b:9b:cf:51:
e1:c2:7f:c2:6b:4b:56:67:90:74:07:20:02:61:e3:b8:5a:78:
be:37:b5:bb:e6:a5:28:13:f0:1f:75:ed:54:da:3e:d4:b8:12:
cc:39:67:f2:c4:42:ae:ec:0c:d5:de:2e:bf:1b:75:a6:60:7d:
ff:90:91:12:6b:dd:82:bf:e1:e3:ba:8d:a2:2d:6d:99:1c:2d:
d7:f0:29:58:05:b8:b5:4f:91:02:c5:49:d7:61:c4:e3:c7:0f:
0e:28:06:96:bd:cf:fc:52:21:9f:e7:5d:10:6c:9c:65:fd:da:
6a:80:dd:5d:5b:06:e8:8e:0f:bf:ec:6c:d8:94:9a:78:ae:9b:
22:12:7a:02:ee:13:cf:9c:35:5a:e6:bd:76:83:6f:4e:4e:3b:
72:4c:3c:ec:65:4c:5a:59:71:1d:a3:d5:f4:e1:ef:47:aa:55:
76:56:b1:ca:9f:45:2b:58:32:b4:b9:6d:d7:01:ee:87:62:c7:
b0:5a:79:92:08:52:bd:32:b7:87:40:f9:40:53:43:03:ca:96:
44:cb:b9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 10:50:50 2026 by rpki-client