Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153786.roa
File: AS153786.roa (raw, json)
Hash identifier: JKKe4tmnrE5TjpEbIPCnKdkooe0rybQ4z/O8raXhUac=
Subject key identifier: 20:C4:56:3E:5E:A7:5F:46:4A:F2:BD:D8:A6:8C:11:51:AA:64:A3:F2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 154E01CAC36ACEE03332D85DA97DB09E9375C304
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153786.roa
Signing time: Sun 23 Aug 2026 15:27:10 +0000
ROA not before: Sun 23 Aug 2026 15:22:10 +0000
ROA not after: Sun 22 Aug 2027 15:27:10 +0000
asID: 153786
IP address blocks: 162.141.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:4e:01:ca:c3:6a:ce:e0:33:32:d8:5d:a9:7d:b0:9e:93:75:c3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 23 15:22:10 2026 GMT
Not After : Aug 22 15:27:10 2027 GMT
Subject: CN=20C4563E5EA75F464AF2BDD8A68C1151AA64A3F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:aa:b8:3b:b3:c2:77:ac:cc:cb:6d:9a:2e:
0f:6c:35:04:01:51:31:dd:58:4c:36:5b:91:13:d6:
e9:9f:59:ef:4f:72:d6:26:8f:59:02:bf:81:d6:34:
5f:fe:a1:0c:b7:5d:13:b6:44:83:8d:51:88:bb:62:
f2:46:26:f9:1d:e1:2b:e0:36:85:d8:81:36:ae:67:
9f:90:9e:d5:55:64:b8:f3:b7:31:a6:fe:11:c1:2d:
fe:d7:e6:88:fc:e9:ed:d5:aa:4a:61:7b:5a:c5:6f:
d2:44:d8:07:b5:ed:c0:b4:b1:44:69:f8:c6:51:24:
f8:72:4d:27:cd:29:60:89:fc:0c:ef:64:4d:94:1b:
a7:dc:f6:3a:0f:0a:81:24:e2:d3:66:8c:06:f8:a8:
fd:5f:bc:19:53:7d:f9:7b:dc:72:08:f0:c7:19:b9:
ae:b3:ab:10:30:10:79:fe:96:96:82:78:49:02:34:
f4:49:0c:8b:2b:e2:e1:3e:ef:ba:01:cd:2d:d8:1a:
67:d4:77:e9:80:63:d3:01:14:13:60:8b:34:78:e2:
1a:c7:be:ee:e5:33:ac:8b:ed:0d:fc:0c:dd:f1:00:
c7:a5:3d:bd:49:e8:46:bd:39:de:67:e9:b4:ac:ec:
08:cd:e4:94:fa:f3:98:e2:78:73:40:6d:97:8e:59:
fe:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C4:56:3E:5E:A7:5F:46:4A:F2:BD:D8:A6:8C:11:51:AA:64:A3:F2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153786.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:fd:4a:d1:c3:5a:41:cb:ab:42:bc:5a:47:91:62:58:40:55:
b4:fd:3d:5f:52:8d:03:e7:c3:cc:93:61:3f:fe:3c:c8:62:05:
6b:d4:b5:f8:b9:52:c0:05:b0:40:10:06:e7:24:38:0c:85:10:
96:a2:e7:e7:6f:0d:6c:83:fd:76:6a:05:b3:bb:99:48:6a:cf:
53:6d:7e:9f:66:d8:46:73:3e:66:6e:64:2b:41:f8:21:cc:a7:
24:d3:f4:b4:98:b2:8f:71:31:4c:ea:ed:88:d3:ad:34:05:70:
a3:fb:79:77:3a:70:0b:6e:36:d9:ef:9c:2d:d7:97:d3:13:d3:
93:d9:46:c6:6b:c1:99:13:0c:81:a9:b7:5d:ac:31:b3:67:82:
a1:8b:25:39:17:69:c5:11:bd:55:6d:81:9b:34:dd:e0:e9:4d:
83:41:a2:65:f2:5b:7c:ab:02:98:33:58:02:e5:4b:af:01:92:
62:78:e6:a8:bf:91:50:ea:74:58:c9:ef:f2:13:ac:a4:ee:b5:
f9:75:8a:27:80:03:fb:dd:e5:06:9b:d3:a2:26:62:1a:3c:8e:
0a:71:0a:17:01:19:2c:8b:7b:8f:2b:0e:35:b7:97:c9:33:13:
3e:20:9a:31:8a:a4:e9:7b:a4:d7:5d:84:84:8b:5b:9f:c5:63:
b7:a5:53:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:31 2026 by rpki-client