Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154690.roa
File: AS154690.roa (raw, json)
Hash identifier: U+Ldh4FrP2t91i4R8sSWES/6Kg8fA8bh0l/AwTV5w5k=
Subject key identifier: A7:35:4F:09:19:48:55:AA:DD:AC:DE:AD:34:AD:06:54:83:16:AF:81
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6DBCE8D947971326AEE799C2A9C688451ACDD5EB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154690.roa
Signing time: Sun 02 Aug 2026 13:58:16 +0000
ROA not before: Sun 02 Aug 2026 13:53:16 +0000
ROA not after: Sun 01 Aug 2027 13:58:16 +0000
asID: 154690
IP address blocks: 145.223.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:bc:e8:d9:47:97:13:26:ae:e7:99:c2:a9:c6:88:45:1a:cd:d5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 2 13:53:16 2026 GMT
Not After : Aug 1 13:58:16 2027 GMT
Subject: CN=A7354F09194855AADDACDEAD34AD06548316AF81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b1:a2:62:b9:ab:a9:f4:98:b1:34:4a:84:05:
59:3b:bf:06:30:7c:c3:df:5e:73:8d:4d:89:b8:45:
16:29:0a:4a:49:75:b2:17:23:af:c1:7b:9b:d0:1a:
32:fe:b3:3c:f1:22:7b:9a:9c:b0:bd:f0:0e:d6:9f:
a8:e2:e9:11:c8:d7:c2:3c:1a:7a:ef:74:cc:86:b7:
b5:61:c2:54:5d:7a:5f:a3:4a:42:11:63:12:e3:9f:
51:de:23:f2:82:c7:58:2f:21:3d:a2:e3:ff:52:33:
07:43:5a:e1:31:4d:5f:9c:9d:f9:8e:a5:fb:b2:a7:
69:03:35:25:68:d8:6f:46:0e:dd:0f:be:ae:eb:01:
55:71:3b:12:80:48:50:c0:0a:12:d8:78:4f:58:ee:
5d:9f:e0:63:c5:bc:d1:df:3e:11:de:0f:e6:a0:8e:
2d:1e:9b:4c:72:d2:97:3c:42:ec:e4:96:cf:4f:90:
21:b4:94:57:cd:e9:93:7b:10:3c:17:1f:50:25:f8:
59:b9:05:6d:dc:cf:ab:6e:64:70:69:0f:79:42:0b:
60:9d:63:59:25:08:55:71:86:79:81:a2:0c:85:c7:
ea:8d:b0:8c:df:ef:a5:e4:4b:52:fc:9a:d7:bf:69:
3f:f0:3b:e4:ee:16:7c:3c:18:f6:f1:c8:ac:d4:1b:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:35:4F:09:19:48:55:AA:DD:AC:DE:AD:34:AD:06:54:83:16:AF:81
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.0.0/24
Signature Algorithm: sha256WithRSAEncryption
53:53:67:1a:60:c0:f0:d6:57:2f:cc:09:2e:cc:fc:83:b2:57:
d9:e0:86:39:d9:35:1e:e1:c1:0b:91:76:b4:7f:ac:e1:00:94:
ca:9e:01:73:4d:73:e1:4f:f5:33:c3:e3:57:92:94:d3:b7:97:
f0:bb:38:7d:57:61:c9:b7:50:73:00:fe:36:cd:ac:e8:51:b2:
20:da:08:9d:d5:71:f8:b0:27:bc:24:1c:25:e5:85:46:13:bc:
2f:79:f6:c1:be:72:59:c9:a9:dd:6c:5e:bf:9e:21:f4:5a:4d:
6c:1e:92:6f:eb:c3:b3:08:23:b9:9c:de:34:49:3d:db:e7:65:
35:9e:20:14:13:15:21:ea:d8:e0:9c:94:38:c6:5f:a2:b9:8d:
29:d3:35:09:ab:38:73:be:0a:01:be:28:17:c3:ee:8b:43:8d:
59:bb:59:89:1d:a5:7d:0c:2b:d7:fc:19:e8:db:ec:17:9b:58:
1d:18:cc:12:89:7b:c5:b3:5a:80:a6:b4:84:7e:1b:b2:dc:58:
cb:a5:ea:bb:a9:44:3f:be:dc:57:ae:51:61:97:fa:a9:b2:56:
4b:66:1b:9a:70:22:97:ce:08:7d:1e:3b:29:24:6b:30:52:da:
2a:44:44:35:4b:65:63:99:e4:ce:70:bf:b9:b4:68:48:1b:f4:
4d:80:ae:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:37 2026 by rpki-client