Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154410.roa
File: AS154410.roa (raw, json)
Hash identifier: BuZTSGK/xKWpPSJmMFBfIhGb9hf5OOpBg/Hfzs3EHho=
Subject key identifier: 04:E2:EF:87:20:37:79:6E:E3:9E:AF:12:A5:87:5D:94:47:6A:70:2F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4D5F9951B95E9DA40D5F93050E8A571D8A108FE8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154410.roa
Signing time: Tue 11 Aug 2026 21:18:43 +0000
ROA not before: Tue 11 Aug 2026 21:13:43 +0000
ROA not after: Tue 10 Aug 2027 21:18:43 +0000
asID: 154410
IP address blocks: 150.241.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:5f:99:51:b9:5e:9d:a4:0d:5f:93:05:0e:8a:57:1d:8a:10:8f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 11 21:13:43 2026 GMT
Not After : Aug 10 21:18:43 2027 GMT
Subject: CN=04E2EF872037796EE39EAF12A5875D94476A702F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:22:3e:0f:5f:96:cf:90:8a:6f:97:50:d7:b6:
46:1d:77:3d:08:8c:fc:bd:f5:d6:59:d7:eb:d8:e3:
08:3c:dd:52:00:a1:d4:6e:b4:33:ee:2b:10:b1:5a:
03:da:27:94:ac:29:2f:b9:49:b0:28:64:f9:a3:ff:
62:d0:7b:bd:5d:3b:d4:86:1c:48:ca:a2:f2:9d:da:
7f:d1:ad:c7:f3:8f:de:3b:f8:29:0d:65:56:46:13:
c6:ef:f7:f5:00:bf:74:fc:b6:40:92:be:07:e2:98:
d5:fb:84:22:b7:2e:3d:a9:ad:0e:70:58:99:b0:dd:
73:ce:1c:98:68:ce:0e:b1:cc:fc:24:bc:66:34:78:
e1:55:28:84:80:0b:3a:7a:1a:d5:f1:cf:a3:73:33:
b4:cd:f5:19:2a:f0:30:61:37:41:9c:75:90:b3:15:
e7:63:b4:d0:10:ca:bc:14:f5:ff:25:f7:6d:d9:d4:
79:37:d8:95:bc:e3:be:89:e1:45:f1:d5:d6:d9:38:
05:fe:cd:63:a9:6a:c8:01:f9:b2:d9:be:12:77:99:
e1:f7:53:bb:7d:14:e1:7b:12:d4:d6:83:fc:06:86:
55:42:82:6d:9d:4a:b5:f2:9e:45:48:18:c8:91:19:
f6:1a:ac:61:d6:46:d9:e6:48:8c:5d:43:a6:05:a7:
f3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E2:EF:87:20:37:79:6E:E3:9E:AF:12:A5:87:5D:94:47:6A:70:2F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154410.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.199.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c3:5e:c6:5b:bc:99:f5:48:0d:5b:ee:9c:c0:aa:84:e5:47:
ac:c5:a6:95:29:4a:80:7c:59:ce:a9:40:16:93:06:26:c7:4b:
6b:b7:f6:6d:0d:6c:12:fd:6e:1b:12:e9:bc:6f:70:77:cb:63:
db:08:37:6f:d6:e3:d7:89:11:0d:ce:4d:28:40:6e:54:ae:e5:
86:12:fb:0e:99:b5:ad:a6:c2:af:28:e1:64:fa:df:6e:00:5e:
b7:36:1e:02:8d:84:79:b1:dc:8f:a8:0d:9d:d1:15:52:2f:8c:
18:8f:55:a0:f1:10:06:ea:4b:06:39:ae:7b:6f:6f:ad:e9:53:
e4:27:f5:d6:07:99:51:f2:2f:80:de:5c:3d:fa:94:cd:82:5e:
a5:82:ea:4a:3c:c0:df:a0:07:7b:3a:1e:95:c6:74:f2:ec:0c:
f2:27:e7:a4:a5:0c:55:e1:e5:f7:95:a4:4a:ca:3f:99:8e:6c:
08:b0:f3:10:65:7e:e8:79:ca:c7:66:a4:98:fd:52:45:9d:5a:
6f:72:74:fe:76:e4:31:99:0a:8c:e8:75:7b:57:95:04:b5:34:
25:34:f4:ff:78:56:d5:8a:77:81:6d:f5:35:94:23:88:3b:3a:
3c:7f:2b:b1:56:19:66:98:33:d9:0b:47:e6:67:b7:24:c9:0f:
cf:3a:cf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:26 2026 by rpki-client