Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154718.roa
File: AS154718.roa (raw, json)
Hash identifier: wMoVTtS8ozvBTnY2F+wa9tEJp3Yb3Cnv8SjA4XFibic=
Subject key identifier: 4B:5A:B2:12:4B:93:8B:D7:EE:ED:61:BE:97:8B:3E:0D:0C:D4:EB:1B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 083A62A0B6CBA96F10E8F32204DBC2A19FB6DF9F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154718.roa
Signing time: Thu 13 Aug 2026 12:37:43 +0000
ROA not before: Thu 13 Aug 2026 12:32:43 +0000
ROA not after: Thu 12 Aug 2027 12:37:43 +0000
asID: 154718
IP address blocks: 168.222.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:3a:62:a0:b6:cb:a9:6f:10:e8:f3:22:04:db:c2:a1:9f:b6:df:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 13 12:32:43 2026 GMT
Not After : Aug 12 12:37:43 2027 GMT
Subject: CN=4B5AB2124B938BD7EEED61BE978B3E0D0CD4EB1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:94:8d:55:43:2f:4f:81:98:28:29:7c:48:
4b:14:b5:77:e5:10:8b:c7:0f:54:20:ca:15:7f:d1:
e0:d0:70:ea:3b:6c:1c:d9:41:c5:d3:89:6f:78:ef:
e2:c6:c0:3d:21:1d:48:ad:a8:25:9c:d4:46:46:77:
a9:eb:17:90:a0:4b:fe:65:91:d6:2e:e9:b5:87:26:
ce:61:ee:bf:b4:1a:f9:79:26:ab:e4:4e:a7:bd:2d:
b7:63:6a:e1:41:eb:54:81:99:ae:2b:29:65:bb:38:
d9:c7:53:1b:48:ef:e2:53:83:36:a3:91:f2:a8:b1:
91:b9:98:b3:05:c6:72:de:05:20:17:28:be:d0:9e:
63:5d:44:76:c7:22:66:0d:c9:c0:c6:16:c5:ad:aa:
fd:de:96:99:fc:12:7a:d7:2c:e9:b0:66:3c:43:7c:
2e:70:48:7c:90:a5:6b:68:a6:a6:71:f6:76:20:6b:
41:04:af:6a:cc:e4:2e:7d:03:05:41:5a:b8:66:a3:
00:56:7f:07:22:5a:95:84:50:2b:05:4b:fc:29:1b:
57:4e:da:3e:67:48:09:51:a1:ec:b8:f8:d4:50:e6:
48:36:13:65:4b:f5:ff:cc:4d:1e:22:bf:55:ef:f9:
fb:ad:76:bd:6d:16:be:ba:ef:55:16:08:1b:9f:52:
24:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5A:B2:12:4B:93:8B:D7:EE:ED:61:BE:97:8B:3E:0D:0C:D4:EB:1B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154718.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.31.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d6:7d:f6:44:46:6e:a4:9d:22:66:38:e3:b4:0c:86:31:40:
f2:62:f2:f1:76:ce:e4:42:f6:ee:86:45:8c:18:bb:71:e1:eb:
a8:2e:19:21:e0:ec:b9:6b:4f:4d:51:d5:aa:a9:a7:06:e4:2f:
6b:54:17:cb:30:1d:3e:b4:d5:84:3f:4a:a2:5a:b0:4b:53:b8:
67:e5:ab:15:bd:b3:b6:ca:2d:a6:0a:50:dd:30:c2:7e:f9:a3:
6a:8a:bf:9c:a1:ad:3b:47:a8:32:e3:db:d0:db:2a:58:17:a0:
b8:a1:c1:2b:23:d2:35:5a:f0:3b:78:b0:68:58:45:ea:45:ec:
51:f5:b2:1e:e5:6f:a5:b6:0e:5b:c9:62:13:94:c7:a3:3b:49:
48:b1:1e:83:ab:31:ea:e1:d7:73:fc:2a:c7:97:b3:33:b9:a1:
4c:dd:1f:4e:db:3d:a6:d7:41:7b:c7:1d:5a:df:5d:c5:c6:e7:
19:eb:42:21:be:f2:2f:e9:8f:4d:89:28:ce:5f:7a:a5:27:dd:
77:89:62:1e:2f:5b:05:36:78:cc:4b:bb:af:f3:ae:b9:ef:38:
cb:d2:ba:e2:76:43:7b:b5:e3:70:d8:a9:d6:e7:ec:79:c4:97:
43:5e:b2:0b:87:ef:fc:49:0c:28:49:d9:60:6f:96:b5:bd:38:
b5:3f:30:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:32 2026 by rpki-client