Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154383.roa
File: AS154383.roa (raw, json)
Hash identifier: ZefnqkU43xQUTyv16wIHdCjc6yC4dfdvUU/m+HVVf6M=
Subject key identifier: 35:CF:4F:98:33:D3:F0:AC:26:1B:36:08:D5:26:5A:8C:57:29:48:D4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 63FB684E1AC364077C45EE17971A95D733BA72EC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154383.roa
Signing time: Mon 25 May 2026 13:45:18 +0000
ROA not before: Mon 25 May 2026 13:40:18 +0000
ROA not after: Mon 24 May 2027 13:45:18 +0000
asID: 154383
IP address blocks: 96.62.217.0/24 maxlen: 24
150.241.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:fb:68:4e:1a:c3:64:07:7c:45:ee:17:97:1a:95:d7:33:ba:72:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 25 13:40:18 2026 GMT
Not After : May 24 13:45:18 2027 GMT
Subject: CN=35CF4F9833D3F0AC261B3608D5265A8C572948D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:5c:d8:eb:d8:c5:6c:8e:8e:50:7b:e5:6d:
46:74:1e:5c:1b:af:73:95:cf:f0:4b:18:37:30:ba:
c9:3e:fd:a4:94:5e:c5:23:23:74:0e:a8:3e:54:e7:
5c:a0:a8:53:6a:1b:8a:85:92:68:8d:88:d8:07:d6:
90:85:b8:a3:d1:be:38:8e:ec:70:f7:69:72:fb:13:
48:2c:12:18:12:74:15:9b:d6:00:ea:c1:d6:53:56:
45:3b:c6:04:8d:ca:59:d6:4f:86:1d:30:b3:02:70:
56:47:51:82:1c:10:79:f0:dd:6f:30:d7:61:aa:71:
57:c2:1d:d8:a1:a8:9c:e8:b4:de:9d:aa:b3:00:3f:
58:4b:df:1e:41:61:66:00:53:68:65:72:53:16:90:
93:2d:9a:36:2f:16:51:ca:37:29:93:2a:7e:c8:b3:
ad:fb:99:6d:c9:89:d7:52:eb:fa:f8:51:9b:66:f1:
af:10:ee:9e:33:f9:71:73:f1:6b:72:73:89:0c:04:
9d:c4:62:11:e7:55:ad:12:1e:a5:01:27:9d:57:f5:
0d:ea:82:59:a0:5b:e2:77:17:68:1f:61:3a:71:50:
d8:ee:e3:ed:cd:64:51:e3:6d:20:85:62:2d:99:9e:
0e:8c:40:3a:79:14:4e:9d:cb:4f:60:44:7e:a8:29:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CF:4F:98:33:D3:F0:AC:26:1B:36:08:D5:26:5A:8C:57:29:48:D4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154383.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.217.0/24
150.241.143.0/24
Signature Algorithm: sha256WithRSAEncryption
58:88:9e:c3:09:3f:45:6e:7d:90:a4:c1:11:6f:ee:f2:70:1e:
65:af:cf:fe:56:6a:7e:07:51:84:49:b7:7c:4d:56:be:bd:fd:
66:18:15:39:20:1a:cf:50:2b:0f:d2:04:92:97:46:62:3b:8d:
1c:6a:fa:2e:2d:aa:ae:1c:94:38:b3:f4:ad:ad:2c:c7:8e:83:
be:18:29:39:8c:37:b8:5e:44:18:51:04:6c:01:fd:c3:90:1a:
61:b1:97:a3:30:14:22:a6:d8:d1:48:c1:91:f6:a8:30:78:4f:
6b:af:94:c9:5d:c7:c4:89:24:6b:3b:93:4b:d7:7c:1d:13:d1:
35:ef:26:46:ff:b9:29:7b:00:0c:4a:92:f4:6d:46:ac:69:a9:
a0:68:d2:11:15:52:97:02:76:cb:53:49:db:cc:ce:f5:32:83:
3e:ae:9e:c2:39:2e:eb:07:a5:49:ad:07:6f:24:27:d3:91:03:
72:92:cf:ca:09:ef:4d:3e:1d:61:f1:1f:02:a0:e7:50:2f:f9:
6c:ba:35:d6:75:46:7c:2b:6a:2d:7d:39:17:b8:be:98:cc:03:
ad:c9:31:88:4c:b3:84:ac:0e:64:c7:d8:28:a3:04:57:10:68:
28:13:38:89:04:5d:03:42:05:b3:6d:c6:0a:64:b3:1d:3e:95:
e9:e7:97:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:17 2026 by rpki-client