Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS154132.roa
File: AS154132.roa (raw, json)
Hash identifier: IK9ys7laXH9IHaA5dPb4rDiT1VJwl5Xd5xxa+9z16go=
Subject key identifier: CE:74:A9:BC:07:18:78:78:12:99:B7:37:2B:05:93:78:03:41:C2:17
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 5A1604560C283FECB0BC7D6D9184E35722276BC5
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS154132.roa
Signing time: Sun 19 Jul 2026 10:29:31 +0000
ROA not before: Sun 19 Jul 2026 10:24:31 +0000
ROA not after: Sun 18 Jul 2027 10:29:31 +0000
asID: 154132
IP address blocks: 212.60.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:16:04:56:0c:28:3f:ec:b0:bc:7d:6d:91:84:e3:57:22:27:6b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 19 10:24:31 2026 GMT
Not After : Jul 18 10:29:31 2027 GMT
Subject: CN=CE74A9BC071878781299B7372B0593780341C217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:c0:67:75:29:6a:32:37:6d:da:fc:f7:39:08:
4a:9a:88:2a:27:dd:d5:fd:56:99:58:b2:6d:3e:62:
c2:c9:96:ac:b9:66:90:f3:d7:61:a9:46:1a:25:54:
b1:b3:2e:e4:a8:2e:ac:78:cb:6b:51:d8:d7:55:00:
34:e5:34:3c:76:4a:56:bc:2d:1a:03:2a:dc:26:ba:
99:b2:92:fb:14:a0:55:90:fb:5a:2d:11:92:fc:80:
6a:d4:85:ae:c4:3b:b1:ad:64:03:49:94:a8:a6:be:
06:7a:5b:03:eb:2b:70:ce:2f:80:56:10:e8:dc:cb:
35:1c:e2:22:7a:c1:18:6d:75:05:7e:e3:98:ad:39:
4e:87:70:a4:1b:9a:ef:5b:de:91:a4:ec:ae:8f:50:
34:7a:bd:56:99:58:0c:23:cb:eb:c5:eb:05:7b:7b:
ec:86:9c:37:76:6e:cf:fc:37:cf:5b:56:66:bc:79:
6f:5b:9c:a9:af:1b:43:9c:49:bd:a4:8e:6d:23:c0:
f5:5e:b9:66:45:c7:94:3b:83:85:8c:65:0a:16:36:
cb:9d:9b:f1:2c:55:ec:46:39:72:64:7f:28:1d:18:
29:09:6f:1a:89:68:d7:81:6c:0c:47:b2:37:56:6d:
ca:98:39:13:99:82:4f:46:83:a6:0e:5b:7c:2d:b4:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:74:A9:BC:07:18:78:78:12:99:B7:37:2B:05:93:78:03:41:C2:17
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS154132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.156.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d5:24:a2:9c:b6:1c:03:cd:3b:30:a6:71:5d:fb:31:89:89:
9c:0a:eb:75:d9:55:8c:4c:8f:fa:ee:c3:8e:b7:9a:e3:90:6c:
db:28:7d:d2:56:a2:a5:0e:ca:91:66:32:30:93:58:f5:2e:b2:
4d:5e:e7:c0:d5:3f:1a:8b:e7:66:58:99:f1:8e:0c:a5:e6:c6:
d2:3e:96:5f:9f:ee:2b:46:c1:69:1c:42:a5:60:ff:26:16:91:
13:96:03:7c:16:cc:24:84:b5:88:d5:77:83:2a:96:16:8c:85:
19:29:20:e0:96:93:19:49:8e:ce:31:d9:92:b7:06:a1:04:5a:
dd:44:43:1d:e3:4d:5f:08:8c:a6:97:51:56:7c:59:89:1f:5a:
40:71:b8:71:c8:ce:5a:f8:98:83:62:22:51:98:61:ad:0e:ed:
5c:ca:da:dd:75:a7:d0:1a:e5:a5:84:fc:97:e7:28:7f:ba:30:
f2:b4:11:3f:90:12:07:09:b3:0a:8b:30:48:52:ec:2b:cc:63:
ca:4c:31:48:89:44:19:88:cb:ca:24:31:74:24:55:3a:22:52:
da:fe:be:30:38:f1:9f:6f:0a:8b:da:1b:a6:02:71:18:12:35:
75:12:d6:3e:92:a3:87:6d:aa:99:71:a0:cc:61:c1:c7:50:07:
1c:c8:66:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:21 2026 by rpki-client