Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS150293.roa
File: AS150293.roa (raw, json)
Hash identifier: nJRXjikSU0X2goZMUGU+hP3jDHQvSNI4CMMOYRCP28I=
Subject key identifier: 09:10:A5:D0:C2:53:16:01:32:1D:5B:15:5C:CD:4E:C1:30:ED:3B:FB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0B1C0514297832144215113513648261D80C6253
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS150293.roa
Signing time: Tue 17 Mar 2026 09:59:16 +0000
ROA not before: Tue 17 Mar 2026 09:54:16 +0000
ROA not after: Tue 16 Mar 2027 09:59:16 +0000
asID: 150293
IP address blocks: 146.103.22.0/24 maxlen: 24
147.79.7.0/24 maxlen: 24
155.117.4.0/24 maxlen: 24
167.148.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:1c:05:14:29:78:32:14:42:15:11:35:13:64:82:61:d8:0c:62:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 17 09:54:16 2026 GMT
Not After : Mar 16 09:59:16 2027 GMT
Subject: CN=0910A5D0C2531601321D5B155CCD4EC130ED3BFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:ca:e6:23:44:ea:15:45:5b:aa:42:89:2b:
01:1e:6b:ae:dc:be:f2:b8:7c:3c:de:bf:4f:89:fc:
48:d8:4e:87:db:8d:cf:da:65:2d:4b:72:69:04:6d:
db:f8:e5:2c:1e:3c:d9:de:0d:0f:6b:5d:4c:24:db:
2a:db:b9:42:73:f0:2c:95:02:30:af:31:41:66:69:
f3:2f:53:ac:ad:54:7f:bf:be:44:9f:e3:af:14:e5:
1d:d7:cc:96:99:45:c2:e7:37:67:64:e3:0d:b7:c3:
c2:fc:bd:d2:db:a2:4a:e0:8b:50:4d:22:8d:02:17:
9f:e3:ba:c4:f2:5c:16:86:c1:ce:f0:33:9d:fe:25:
6b:97:6a:01:27:23:9e:52:7e:1b:8f:44:a7:c6:ef:
b9:c5:3d:12:fc:7e:fc:d8:55:31:47:ba:0a:62:bd:
3a:ef:02:15:89:50:c9:b7:3e:d4:6b:7d:46:04:07:
29:8c:ae:17:38:c2:1a:3e:7c:d6:6f:ed:fe:92:f7:
ee:c6:b5:8c:6e:9a:20:fb:c1:99:c1:60:9d:fd:a4:
ef:46:d5:5e:78:46:c9:11:f0:de:77:3a:4d:42:f8:
fe:fe:d6:af:d6:1e:3f:9b:e0:04:99:33:4f:00:57:
69:c7:ae:0e:2a:d0:a2:3a:82:c3:ad:94:18:9a:98:
c3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:10:A5:D0:C2:53:16:01:32:1D:5B:15:5C:CD:4E:C1:30:ED:3B:FB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS150293.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.22.0/24
147.79.7.0/24
155.117.4.0/24
167.148.136.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c8:41:95:bf:c5:03:f7:ef:db:e4:09:b4:cb:be:26:60:0b:
a4:e3:04:26:c1:88:36:e9:63:71:a2:83:76:75:3d:17:24:b0:
d3:ee:c6:e4:01:3c:b8:b4:ce:0e:0b:27:ed:ab:72:11:bc:4c:
37:f6:5a:ac:7f:e9:c6:e5:23:3b:23:27:e8:5e:be:a0:6d:95:
08:1e:f6:7c:6c:2e:84:db:20:a5:c3:7c:94:95:0f:c9:a4:c4:
50:cf:59:76:15:d9:b4:62:93:10:f8:ea:e6:f7:8a:45:2d:30:
a8:fe:5c:81:4b:50:22:4d:40:c7:81:b8:2e:a6:a1:c0:08:22:
10:8b:30:03:51:45:c0:ae:33:25:71:a2:b0:65:c4:9e:e6:0e:
bb:7d:93:29:71:05:86:f3:94:00:30:95:8c:f2:71:74:79:f5:
ad:2a:e9:f2:f6:22:b6:74:c7:3d:e8:45:71:0b:94:0f:c7:3c:
ee:5f:54:fd:bf:df:9f:1e:c8:f2:f1:42:4d:6f:c5:8d:95:e9:
9a:5f:fd:f5:bc:eb:65:82:7f:2f:67:58:ce:15:b5:01:97:71:
c1:ea:0e:b1:38:bc:e6:2b:61:0d:a7:72:e0:f4:f9:0c:22:af:
10:90:f3:67:fb:08:64:59:74:91:ba:d6:e6:74:4e:b9:52:76:
c4:e8:9a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 00:16:02 2026 by rpki-client