Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153656.roa
File: AS153656.roa (raw, json)
Hash identifier: 93pYlyRGL7xIL2pFeisHYq3EBtmtcTk2m3xPT0P8jC0=
Subject key identifier: 9D:6C:3F:91:B3:FB:BD:25:22:6B:4E:65:74:11:73:BC:85:26:04:4D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6F0C6C40630C73087B9835C892BA2DD66BB8B309
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153656.roa
Signing time: Tue 26 May 2026 00:57:34 +0000
ROA not before: Tue 26 May 2026 00:52:34 +0000
ROA not after: Tue 25 May 2027 00:57:34 +0000
asID: 153656
IP address blocks: 155.117.12.0/24 maxlen: 24
155.117.98.0/24 maxlen: 24
168.222.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:0c:6c:40:63:0c:73:08:7b:98:35:c8:92:ba:2d:d6:6b:b8:b3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 26 00:52:34 2026 GMT
Not After : May 25 00:57:34 2027 GMT
Subject: CN=9D6C3F91B3FBBD25226B4E65741173BC8526044D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:aa:23:4d:e8:2b:13:1d:d4:82:4a:82:25:be:
ae:41:ce:7a:e9:5a:83:7e:9e:ca:f0:b9:80:19:c5:
cb:c8:cd:b6:be:35:1a:8f:ea:0d:12:1c:e3:41:39:
ba:12:7c:0c:01:be:77:ff:f0:56:36:cc:a9:f3:e5:
e5:b0:c1:8a:06:9e:b7:9d:c9:64:e4:1b:44:bf:d8:
ce:6c:2b:95:c5:5d:42:ff:64:70:cd:00:f2:e3:af:
4d:4b:f5:75:fe:03:98:05:2e:38:a9:e8:c8:74:59:
87:5e:79:a4:62:0c:d8:5a:22:b2:cf:8f:9a:9b:57:
7c:0d:a6:97:1f:b1:87:59:d2:79:80:40:da:cc:65:
57:31:21:4c:d9:7c:8d:e9:6a:ac:9c:70:a3:04:18:
be:94:70:05:b7:df:1e:77:b5:01:db:90:de:88:8b:
3c:af:32:bf:64:38:31:8b:b1:da:d7:6e:7c:02:b1:
d2:aa:9b:80:a7:91:5c:fb:0d:41:35:00:33:c4:78:
7f:64:c4:e9:eb:89:4d:85:83:05:f2:69:49:6d:5e:
68:09:3e:95:86:d7:19:f1:8c:d9:84:8d:b8:1d:5f:
18:b8:bd:de:ae:b9:2b:a5:08:0d:78:d1:4c:c9:8d:
50:a2:45:fe:fe:65:bc:49:af:25:56:7d:b9:db:35:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6C:3F:91:B3:FB:BD:25:22:6B:4E:65:74:11:73:BC:85:26:04:4D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153656.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.12.0/24
155.117.98.0/24
168.222.65.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:21:e0:b6:62:c7:e0:1b:49:be:d9:a7:82:0d:7e:45:cd:09:
2c:d0:33:a6:9b:86:93:8e:20:5e:5c:62:57:a0:34:ef:c4:5d:
1c:a8:be:33:7c:83:5d:a9:6c:49:06:08:00:73:ce:82:d1:5f:
4b:d6:51:04:b6:90:53:c1:b0:c8:82:a5:b1:da:c7:ca:82:c7:
98:76:0e:36:07:db:0e:c4:df:4b:75:16:23:2b:68:59:3c:56:
b4:ed:89:fe:35:d2:f1:46:44:33:29:ac:e2:f9:1a:52:ee:ec:
56:60:d7:ac:d1:e5:1d:91:8b:f2:5a:6f:53:d9:c7:77:67:ea:
b7:9b:64:9a:3f:4c:ab:d3:ac:e2:6e:bb:a0:a3:a6:6e:24:e3:
c2:11:a4:9e:fd:9a:0a:fe:a7:f9:34:18:41:a3:ca:0f:21:da:
34:1c:bb:18:ab:70:e0:6f:22:be:d5:94:a9:08:0a:61:fd:4c:
4b:06:71:db:8f:63:ae:b4:4b:08:73:5f:3f:de:81:3d:59:fb:
e7:81:f8:bf:20:42:b7:73:98:97:cd:66:17:c7:2d:13:8c:96:
a7:3e:1b:97:e6:eb:a5:8a:18:59:27:b7:5a:4f:8f:6e:24:a0:
d2:cd:f0:b0:34:6b:34:d0:74:8b:e3:63:ba:33:1f:45:34:bf:
be:50:a3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:20:36 2026 by rpki-client