Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS154132.roa
File: AS154132.roa (raw, json)
Hash identifier: e+ulR9VLxnnZ/RQtkg0gT/l+XHpUGFlHllElEpB8/DU=
Subject key identifier: 35:C7:04:54:67:DE:F0:51:B1:C9:36:BD:C7:C2:1B:34:B0:D4:9F:BB
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 6B7020F1A75C7DBF0B0ECA93146BB5112FC3FB0B
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS154132.roa
Signing time: Sun 25 Oct 2026 16:09:18 +0000
ROA not before: Sun 25 Oct 2026 16:04:18 +0000
ROA not after: Sun 24 Oct 2027 16:09:18 +0000
asID: 154132
IP address blocks: 90.96.125.0/24 maxlen: 24
90.96.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:70:20:f1:a7:5c:7d:bf:0b:0e:ca:93:14:6b:b5:11:2f:c3:fb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 25 16:04:18 2026 GMT
Not After : Oct 24 16:09:18 2027 GMT
Subject: CN=35C7045467DEF051B1C936BDC7C21B34B0D49FBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:1b:6b:92:1c:b3:ed:42:62:be:f7:8a:99:
35:44:96:d5:b0:a1:71:08:4f:6b:f7:e7:4a:29:7d:
35:6f:20:3f:fd:43:fb:06:27:f7:7d:63:10:c5:f8:
b1:7b:36:0f:f3:8e:c3:32:13:53:80:05:b4:76:ed:
9c:71:7e:82:b7:78:19:5d:5a:d9:a0:2d:a1:1a:a2:
2e:dd:50:42:60:b4:ee:7e:32:67:f0:f5:74:11:e0:
2e:0e:4f:1a:0d:56:ed:e3:da:65:63:9e:77:12:e2:
7d:0a:07:c9:2b:df:46:47:fc:0d:8f:d5:60:3c:3a:
06:01:86:c7:9e:39:00:60:03:52:95:3b:36:22:b2:
55:79:c2:f4:92:f5:ac:3c:e5:3e:99:67:32:32:1c:
32:2a:07:6a:ff:e8:ab:7d:99:e7:24:d0:e8:6d:01:
5d:0d:b6:ca:b1:90:43:ca:1a:43:fe:62:e7:a4:ee:
10:eb:40:c3:ae:92:fd:3a:d6:a2:bc:43:1c:3d:7e:
dd:29:25:02:1a:65:9b:97:74:bd:2c:d8:04:3d:17:
25:f1:e1:60:85:da:bf:d6:0a:68:7c:ff:98:55:76:
26:fc:53:83:de:4e:51:a1:cb:b3:50:bb:66:6b:42:
8a:9f:f5:ae:80:97:e7:cc:4e:4a:c5:58:72:20:f1:
d3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C7:04:54:67:DE:F0:51:B1:C9:36:BD:C7:C2:1B:34:B0:D4:9F:BB
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS154132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.96.125.0-90.96.126.255
Signature Algorithm: sha256WithRSAEncryption
1f:72:d4:02:bd:0d:bb:31:9b:2f:89:1d:ea:01:9e:2f:6b:a0:
ed:7f:24:ac:86:c9:ff:46:9a:e7:19:2d:a3:59:62:29:92:e2:
0a:16:ea:b4:82:4b:9a:b4:2c:c2:0e:0e:dc:6e:5f:75:10:a8:
e9:63:99:4c:7a:45:f8:7b:c0:dc:93:55:b5:d7:c6:45:b5:4b:
c2:2f:ee:2b:41:14:b0:e5:91:a3:88:48:66:2f:b3:67:61:5b:
93:a9:b8:2b:de:ef:b0:53:e5:28:79:ec:de:54:dd:ad:9d:2b:
e4:75:a5:1f:25:1c:51:04:3e:7c:26:c0:be:6c:0e:53:33:9e:
29:b6:62:fc:2b:91:79:f5:f7:e9:b6:59:cb:d6:b5:dc:16:9f:
98:42:63:31:53:19:f1:64:3e:d6:c7:87:e4:83:1f:75:cb:a2:
d6:0d:5e:8c:08:dd:6a:79:35:14:25:9e:7c:2c:58:2e:8b:fd:
32:12:89:ff:c0:ba:06:65:36:7f:a3:f2:44:e4:a6:4b:e9:2e:
a3:93:de:33:61:1f:ca:b5:ac:4a:7e:f7:bf:a8:26:97:5b:2f:
d8:e0:65:97:d9:55:0e:27:03:2d:46:5d:20:2c:e7:a0:74:f9:
9c:cf:b4:ef:c8:40:a8:08:61:13:6c:fe:36:82:13:d0:14:c5:
ef:3b:07:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:18:48 2026 by rpki-client