Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154685.roa
File: AS154685.roa (raw, json)
Hash identifier: JyQwaYB/LoqsbAjgPn8cdH36L20ON9RZCEmlDzuNSVg=
Subject key identifier: B5:78:79:A3:62:FB:97:FA:8F:3E:3B:7E:6D:08:95:D0:0D:28:E3:31
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 35D0A2A514BF35920352AF8419DEE30DE2752B46
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154685.roa
Signing time: Sat 13 Jun 2026 07:13:08 +0000
ROA not before: Sat 13 Jun 2026 07:08:08 +0000
ROA not after: Sat 12 Jun 2027 07:13:08 +0000
asID: 154685
IP address blocks: 143.14.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 16:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d0:a2:a5:14:bf:35:92:03:52:af:84:19:de:e3:0d:e2:75:2b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 13 07:08:08 2026 GMT
Not After : Jun 12 07:13:08 2027 GMT
Subject: CN=B57879A362FB97FA8F3E3B7E6D0895D00D28E331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:db:e1:55:c4:b1:a2:19:0d:24:2f:f5:c8:
26:e5:50:de:f2:5d:a7:2c:73:10:80:36:2e:ee:a4:
9f:56:56:a6:5e:c7:fe:6e:fc:81:09:3a:07:2d:cb:
df:e9:fd:90:e6:e9:bf:46:08:a9:9c:bf:c2:ce:21:
c9:47:f6:5c:e5:d6:5f:33:8d:0f:b6:7f:04:e2:51:
6b:f7:34:20:76:26:26:d5:88:90:0b:88:cd:a8:f6:
96:29:2c:41:9b:7a:43:87:50:34:62:d5:d2:0e:ff:
ce:14:7e:ed:30:52:80:71:f7:dc:fc:b4:90:17:95:
cf:1b:4f:06:f6:f7:6a:7d:72:9c:c7:3f:a3:0d:ba:
ac:10:cc:bc:5f:30:20:4e:74:4a:29:29:cc:8d:13:
99:1d:ff:b5:e0:0f:ee:70:7a:28:9f:01:38:a7:3a:
74:ee:b5:31:3a:a4:92:67:85:ae:2e:7f:73:22:e9:
87:7a:86:86:2c:38:8e:31:a9:f2:54:0d:ce:c3:cb:
ba:91:98:96:fc:22:9e:26:01:d7:33:26:c1:34:54:
d8:fa:eb:9f:48:ce:8b:c8:d8:01:e0:98:ee:9d:2f:
44:3e:60:3d:f8:21:0e:8c:58:e4:ae:3d:1b:fe:f7:
21:dc:be:56:8e:d7:4f:a0:19:a1:b3:6c:ed:0e:55:
a0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:78:79:A3:62:FB:97:FA:8F:3E:3B:7E:6D:08:95:D0:0D:28:E3:31
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154685.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.186.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:84:a8:45:68:22:d6:c0:11:ce:ef:bf:c8:35:8f:3f:9b:33:
ae:17:b3:9b:99:58:66:0e:0c:ea:f6:c3:e1:31:a1:bd:7d:10:
70:de:f9:64:2d:71:5c:98:1d:67:84:67:89:70:51:33:9e:92:
17:e8:71:fc:f2:65:07:62:33:65:9b:2d:40:5e:00:a3:c1:68:
8e:a0:62:56:3b:c1:6b:67:17:cd:52:12:d8:06:95:19:72:f4:
03:87:7d:41:9d:45:16:0b:99:f0:1e:18:ba:74:d5:83:ab:2a:
ee:a3:16:3c:20:d3:fd:13:0c:e1:7a:98:2d:d2:78:5a:61:44:
84:57:eb:11:fe:45:fe:e2:79:12:54:49:ef:c7:bc:63:dc:ad:
d7:f0:98:a6:24:ca:4a:29:cd:8a:2c:f5:d7:fb:49:77:72:b0:
3d:dd:22:45:8a:87:42:aa:2c:54:3d:f8:cd:06:16:b4:e3:78:
5a:6e:31:4d:5c:93:fa:d9:f7:7e:ec:4b:44:1d:6f:7b:73:31:
d6:2e:65:3d:8e:7d:50:de:3d:86:c1:28:35:ef:20:75:e2:d2:
9c:0f:95:c2:3c:e2:58:99:8f:3d:9e:44:ee:d1:47:96:ed:16:
21:2e:7c:ea:78:1b:67:5d:7c:fd:ca:8f:a3:c5:43:30:30:b0:
b2:07:43:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 02:14:30 2026 by rpki-client