Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154890.roa
File: AS154890.roa (raw, json)
Hash identifier: bk4tspMX4K2XBhBALPQftIR5V7qSsxO/jt6OPjx5PaY=
Subject key identifier: 96:3B:74:0B:D3:36:4E:85:E6:96:CB:0F:D7:D2:75:12:89:A6:7F:68
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 51D6B72B7BF7E66C966C1DDDD22841B3D53238E3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154890.roa
Signing time: Wed 07 Oct 2026 02:19:01 +0000
ROA not before: Wed 07 Oct 2026 02:14:01 +0000
ROA not after: Wed 06 Oct 2027 02:19:01 +0000
asID: 154890
IP address blocks: 168.222.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d6:b7:2b:7b:f7:e6:6c:96:6c:1d:dd:d2:28:41:b3:d5:32:38:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 7 02:14:01 2026 GMT
Not After : Oct 6 02:19:01 2027 GMT
Subject: CN=963B740BD3364E85E696CB0FD7D2751289A67F68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:d5:5f:8b:86:3e:70:db:0b:98:1f:e0:cb:
f2:7b:45:c2:50:ef:e0:75:fc:b8:cc:c5:c0:5f:02:
42:90:2d:68:e2:a8:ff:4f:41:f7:19:91:ab:a2:60:
60:5f:53:81:6d:26:e7:47:66:5a:01:4b:c6:df:4e:
c9:8d:aa:c9:54:28:bc:72:ed:f9:24:bb:d1:dc:36:
8d:fb:52:88:b9:e8:67:aa:34:84:9d:03:68:1c:e3:
36:b0:e7:a7:de:cb:cc:87:45:2c:b2:9d:33:10:33:
59:3a:c7:e3:fb:f1:c0:de:2d:a5:13:dd:1d:82:4e:
02:7a:86:3e:41:a3:4b:78:2e:98:61:ce:14:ad:ee:
b3:87:f4:41:1e:fc:86:8e:e8:87:68:c7:8e:30:e4:
e3:a0:62:fe:a1:31:94:04:56:6d:a5:08:15:76:35:
fe:bb:4b:6c:f2:4c:b3:74:26:23:45:ed:b2:a0:11:
fc:3f:a4:46:74:10:4c:2e:e7:c8:d6:fe:3e:9f:c1:
22:4f:3b:ec:c2:29:3f:aa:2c:e8:64:06:28:48:a8:
34:9a:c4:24:48:75:e1:2f:05:87:51:f7:72:00:9a:
da:c2:0e:37:01:62:80:25:d1:7c:07:40:82:ea:10:
ef:a5:16:17:93:8e:9c:cf:36:b9:ec:fe:c0:04:6e:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3B:74:0B:D3:36:4E:85:E6:96:CB:0F:D7:D2:75:12:89:A6:7F:68
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS154890.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.54.0/24
Signature Algorithm: sha256WithRSAEncryption
38:9c:be:2a:81:3d:3d:46:e3:6a:27:c1:f6:0e:19:97:83:91:
54:84:e4:e7:cc:99:fe:fd:53:b5:7a:74:2a:f3:27:31:b6:2c:
86:46:15:43:d3:bb:a8:4c:05:e1:7c:fc:ba:ce:dd:6c:09:49:
e1:50:24:80:da:57:16:a2:dc:ff:bd:bf:64:c4:d0:5f:e2:79:
b4:03:da:12:9e:24:b6:0d:d4:dc:39:30:e8:29:3b:df:12:47:
d0:80:c3:f8:68:84:b2:00:90:31:24:a4:3e:14:c8:fa:97:d2:
48:24:61:ac:94:2a:68:10:e4:f1:07:44:bb:1a:57:d6:8e:c0:
9b:67:7c:76:17:ad:28:5b:b7:b3:36:e6:5b:f4:3b:35:c4:e6:
31:59:cf:53:20:51:e2:f0:c1:53:1e:6a:c0:f1:f3:5b:97:0f:
05:c7:70:f0:76:d9:24:8d:f5:5f:a7:1e:c3:da:4d:1e:71:4b:
e4:25:cb:af:34:2f:c5:c9:38:74:05:0f:26:4b:94:c9:fe:82:
99:05:d7:8a:99:86:95:e3:19:27:f4:46:a6:fe:bf:1c:bc:ec:
45:c9:e5:36:53:09:00:6b:47:f1:25:ed:f6:ed:1a:ff:5b:36:
51:63:02:c5:72:ab:df:7b:40:77:30:c5:06:99:0b:50:08:88:
fd:e8:4f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:25:18 2026 by rpki-client