Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154132.roa
File: AS154132.roa (raw, json)
Hash identifier: crFlCGANNXpWlyG2Hlr9dsmKKgr7kpVHNMP7tgurL5A=
Subject key identifier: 4B:CB:D9:85:67:0F:A6:E5:A0:2E:C2:81:49:E4:1C:8C:52:8F:35:E6
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0AB2FA34C7FD7CF4AE050918E4572B7751E9AD43
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154132.roa
Signing time: Tue 02 Jun 2026 11:25:39 +0000
ROA not before: Tue 02 Jun 2026 11:20:39 +0000
ROA not after: Tue 01 Jun 2027 11:25:39 +0000
asID: 154132
IP address blocks: 147.79.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:b2:fa:34:c7:fd:7c:f4:ae:05:09:18:e4:57:2b:77:51:e9:ad:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 2 11:20:39 2026 GMT
Not After : Jun 1 11:25:39 2027 GMT
Subject: CN=4BCBD985670FA6E5A02EC28149E41C8C528F35E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:87:9f:6b:9c:1c:fc:2d:7c:0f:5a:7e:9d:
de:fe:0b:c1:eb:14:65:9c:b9:2b:26:bc:40:fc:56:
9e:4b:86:6b:8a:8c:f1:83:5c:02:aa:2d:38:04:13:
2c:e5:64:24:16:6a:11:fb:12:76:0d:b2:2a:a4:75:
82:45:2c:89:55:6c:09:f8:b1:ae:04:b7:93:d7:30:
e7:7e:73:67:24:f2:52:9b:0f:78:eb:2d:76:97:2d:
66:f9:f2:4c:a5:02:70:df:f5:b3:3b:cf:9b:19:d2:
26:28:d7:0e:f3:6b:32:b6:d1:66:50:81:24:e5:aa:
1f:78:4b:8d:9d:e9:a9:18:8d:e4:8b:85:8f:ef:f2:
ee:0c:56:91:57:73:01:54:20:db:af:09:10:a3:f6:
a5:25:d6:fc:0a:4f:c7:09:35:02:7b:73:8b:a0:8c:
a0:88:c6:b2:74:73:33:45:f2:b8:3b:25:b0:9f:11:
0f:29:a1:a8:bc:9e:1c:b2:cd:45:a7:f9:b7:f8:f8:
4e:1d:2a:d2:a9:de:33:c6:c3:5d:4b:db:40:45:b8:
5f:33:34:19:d9:3b:bb:5f:9f:35:45:24:93:f1:d6:
4d:b0:14:a6:fa:88:f4:61:dc:32:9d:4c:3a:5c:e8:
25:49:40:91:8a:20:9c:c7:63:d9:46:db:65:96:d4:
f8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CB:D9:85:67:0F:A6:E5:A0:2E:C2:81:49:E4:1C:8C:52:8F:35:E6
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.56.0/24
Signature Algorithm: sha256WithRSAEncryption
43:0f:a8:6e:b0:c1:78:47:49:eb:91:e0:a8:fd:1f:fc:b9:50:
bc:b9:31:f4:fa:75:df:a6:13:ce:04:ad:f1:e2:f9:93:2a:fe:
65:c1:97:91:71:39:82:26:c9:cd:41:e7:45:84:d0:70:20:ae:
66:3e:ce:25:7b:f8:54:6b:38:40:41:21:b6:11:0f:ed:f4:d5:
06:46:bc:f3:a2:be:e3:55:07:fc:ee:6f:a5:e9:eb:b4:ba:19:
ed:d4:c3:83:db:a5:bc:6a:06:2a:1f:d5:43:3e:99:69:12:eb:
93:9e:e1:51:6e:67:76:f2:19:7f:86:dc:c0:88:6d:50:62:06:
60:f9:64:32:28:2a:3d:6a:75:42:f6:a3:a1:dd:04:b1:82:96:
7a:cd:10:8d:29:f0:db:b2:39:e5:42:fa:98:a2:7f:5f:b6:7b:
43:c9:a1:23:e9:71:98:07:f7:f6:6d:3c:fb:98:59:f6:02:46:
ef:43:ba:c3:05:34:8e:05:6f:b1:ce:29:2e:18:67:c0:a6:69:
e7:93:61:68:e2:4d:8d:88:ff:88:e5:94:03:75:d7:01:47:2c:
82:08:e9:fe:c8:c7:28:ba:a0:7a:15:1b:00:fd:6c:c7:de:11:
a4:4f:23:28:7f:a7:62:d8:c3:21:af:94:b5:4f:54:00:6e:5a:
62:ed:ff:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 19:37:30 2026 by rpki-client