Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154049.roa
File: AS154049.roa (raw, json)
Hash identifier: sEXGeUXHYO5eIENSZXGoGilGWt0dZVTIH1SS1B/bPIU=
Subject key identifier: 14:C9:31:49:97:16:FF:46:26:78:BC:32:4E:E1:74:C3:36:B3:29:AE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6CEC31A9A17D3565A774E5818B9E02D0AC9D41AC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154049.roa
Signing time: Sun 05 Jul 2026 00:03:04 +0000
ROA not before: Sat 04 Jul 2026 23:58:04 +0000
ROA not after: Sun 04 Jul 2027 00:03:04 +0000
asID: 154049
IP address blocks: 96.62.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ec:31:a9:a1:7d:35:65:a7:74:e5:81:8b:9e:02:d0:ac:9d:41:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 4 23:58:04 2026 GMT
Not After : Jul 4 00:03:04 2027 GMT
Subject: CN=14C931499716FF462678BC324EE174C336B329AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:3f:50:ea:e5:18:50:a4:a1:0b:62:8a:dd:
91:ff:a9:c1:48:72:68:40:1f:15:0c:11:b4:6f:cf:
4f:6a:a8:1b:c0:02:64:f2:6b:22:f2:d2:b6:d8:99:
f3:dd:63:60:37:33:87:12:3d:e1:bf:5f:f2:9c:00:
3f:06:e5:1c:fb:29:8a:53:02:a9:a3:da:4d:cf:d8:
9b:6a:81:b2:d3:73:e5:fb:cb:4b:7f:bd:88:08:6b:
b6:bd:9d:a4:d9:45:ae:ed:cc:2a:85:50:44:bd:50:
0b:d6:05:7d:5a:88:14:90:85:a8:9d:e7:64:58:86:
0f:aa:93:23:70:77:07:90:88:76:fe:10:82:59:0f:
19:18:48:62:45:67:b3:ac:5c:4b:16:4b:8a:13:36:
d7:8e:54:5a:46:c0:ad:ec:2c:4d:3e:3b:8e:e2:ef:
31:ab:b4:8e:3f:61:67:9b:b3:d3:8a:44:4b:57:af:
89:d8:d3:c1:e3:f4:68:92:c2:f8:fe:80:96:bd:8b:
97:e9:8c:78:74:18:54:72:9c:9f:44:b8:53:8e:8d:
19:ab:8f:1d:7b:fa:5c:c1:8c:6d:3c:c8:e7:b5:1b:
66:fe:1d:52:4d:fc:5d:c0:83:63:68:12:d1:bd:c6:
9a:37:17:db:f4:35:d8:5b:aa:63:af:2d:16:d6:a2:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C9:31:49:97:16:FF:46:26:78:BC:32:4E:E1:74:C3:36:B3:29:AE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.219.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d7:fd:39:ab:9e:dc:a4:be:ae:f6:53:32:96:65:04:78:70:
9f:be:5d:2b:8c:e2:8b:de:e8:a5:23:f1:78:a6:ab:da:38:2a:
75:af:ab:7f:f9:6d:2a:1d:c2:3a:98:32:be:98:b3:1c:06:e2:
28:39:47:f2:39:a9:ad:8b:e0:6b:45:80:be:a2:97:d3:0c:6d:
e0:1c:5b:23:14:22:ce:00:68:5a:cc:41:4f:f3:4e:ac:61:9e:
5f:02:22:f7:b1:a6:d8:26:ae:7c:15:27:5c:04:a3:c5:9b:cf:
60:e2:4d:5c:4b:98:bd:be:12:2f:f2:a5:50:fd:f4:ba:08:a6:
21:5c:db:ea:ee:e9:03:b9:30:7f:5c:81:11:f5:78:05:c4:fc:
ea:37:ef:ee:1a:71:a3:86:19:bf:f4:01:76:db:f3:4b:1b:85:
53:d2:4d:9e:bd:a4:61:09:d9:8e:b2:27:b8:7e:bc:3c:56:ee:
57:61:da:9c:30:55:87:3d:d9:49:cc:5e:7c:30:d1:0b:c1:a6:
ec:60:b0:6c:11:18:44:b0:1f:ab:fe:2b:ff:14:71:9a:39:6a:
e7:3c:e8:5b:2e:6f:ec:f9:50:c4:cb:fc:d1:ef:af:5d:da:2d:
90:e4:d3:75:35:59:91:d1:ff:c5:82:7c:f9:cc:e5:5c:ea:93:
cd:23:ef:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:34:15 2026 by rpki-client