Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS150659.roa
File: AS150659.roa (raw, json)
Hash identifier: uhIe783xWkbMLc7vaF47s8OIlL+Zp35zXskAOYt18qw=
Subject key identifier: 2A:C3:39:F5:45:45:78:C6:AA:9B:80:09:9F:40:F6:A3:07:4D:7A:40
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6BCA173F990474C6B47B296507663B30D75B0927
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS150659.roa
Signing time: Sat 13 Jun 2026 05:10:44 +0000
ROA not before: Sat 13 Jun 2026 05:05:44 +0000
ROA not after: Sat 12 Jun 2027 05:10:44 +0000
asID: 150659
IP address blocks: 181.214.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ca:17:3f:99:04:74:c6:b4:7b:29:65:07:66:3b:30:d7:5b:09:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 13 05:05:44 2026 GMT
Not After : Jun 12 05:10:44 2027 GMT
Subject: CN=2AC339F5454578C6AA9B80099F40F6A3074D7A40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:90:2a:70:8c:4a:3e:5c:38:a0:44:5a:1b:ed:
62:7f:b9:05:ec:27:a3:bf:a1:f5:ea:3a:f3:df:a1:
73:39:2f:dc:27:9b:8f:d7:11:76:b6:b5:46:36:5b:
39:80:37:f8:84:93:10:48:34:b1:24:31:69:76:0f:
b2:66:c2:d8:4b:3a:14:e2:42:1c:e4:fa:da:f4:17:
8e:11:57:0a:b0:d8:a2:2f:4c:51:9a:93:08:e5:45:
8e:d4:eb:43:2f:c5:4b:41:0e:36:12:2d:b0:fd:36:
ee:8e:61:43:c1:51:e1:f8:63:d8:c0:bb:90:52:d3:
a0:57:89:5d:f3:66:36:bb:09:31:65:09:f5:be:83:
9e:b3:36:e2:c4:bd:7d:26:9d:68:ec:a7:a7:6e:76:
bc:12:47:03:17:e3:4b:8d:f9:1d:c3:74:5a:2f:42:
9b:e3:a0:c3:70:85:69:de:ac:15:30:67:ed:d3:77:
11:c0:4e:7b:59:0d:e3:04:5f:a9:5a:a2:2d:3b:1a:
39:60:df:4e:62:01:72:a5:1a:3f:52:a8:26:7a:31:
f2:2f:3e:a1:fb:8d:40:99:71:ab:55:6f:75:aa:47:
44:a8:aa:44:09:61:de:e1:45:f1:dc:47:ad:4f:4d:
bf:92:7a:76:ad:3e:f2:b6:a6:56:70:36:95:3f:6a:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C3:39:F5:45:45:78:C6:AA:9B:80:09:9F:40:F6:A3:07:4D:7A:40
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS150659.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.240.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:73:bd:0c:d9:f0:14:5b:ff:f1:a2:ef:d2:f1:30:80:06:92:
85:07:0c:39:22:3f:d1:e0:2b:24:e5:b3:66:73:c4:16:73:78:
c6:5d:6f:85:3a:3e:06:05:b4:06:8e:35:c2:fc:cf:c8:bd:46:
b7:1d:4b:30:36:8d:cf:cc:f8:e0:4f:42:9e:23:20:ff:74:f7:
3f:48:1a:14:a0:aa:70:aa:1f:3d:c9:b8:87:b8:90:42:0a:5c:
2b:64:42:e0:cc:6c:57:2f:67:69:a4:fd:bc:22:67:82:94:e2:
f2:97:46:9c:c0:13:9b:f4:7c:a1:2b:7b:d1:22:c6:d6:75:d3:
03:ce:84:e3:d4:62:b6:54:4f:ff:b4:f4:32:a9:35:4a:42:a4:
75:7b:d0:66:19:aa:c3:41:70:8e:3c:ed:1d:d6:3d:84:0a:76:
c2:90:a8:18:f3:5b:73:05:b9:20:00:de:3a:6a:eb:2c:a0:db:
3f:eb:63:bb:83:4a:e8:d1:74:dc:31:99:22:9d:84:dd:cc:c7:
8a:d8:11:da:bc:f5:93:7e:84:69:b8:d1:16:fd:a6:57:94:5c:
08:af:44:aa:00:88:d7:22:f2:1d:e6:73:f6:3e:16:14:02:ed:
58:0b:7e:10:6d:b6:03:f0:f4:47:8e:00:e3:9e:8b:5d:48:6e:
2a:02:de:1d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUa8oXP5kEdMa0eyllB2Y7MNdbCScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA2MTMwNTA1NDRaFw0yNzA2MTIwNTEwNDRaMDMxMTAvBgNV
BAMTKDJBQzMzOUY1NDU0NTc4QzZBQTlCODAwOTlGNDBGNkEzMDc0RDdBNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEkCpwjEo+XDigRFob7WJ/uQXs
J6O/ofXqOvPfoXM5L9wnm4/XEXa2tUY2WzmAN/iEkxBINLEkMWl2D7JmwthLOhTi
Qhzk+tr0F44RVwqw2KIvTFGakwjlRY7U60MvxUtBDjYSLbD9Nu6OYUPBUeH4Y9jA
u5BS06BXiV3zZja7CTFlCfW+g56zNuLEvX0mnWjsp6dudrwSRwMX40uN+R3DdFov
QpvjoMNwhWnerBUwZ+3TdxHATntZDeMEX6laoi07Gjlg305iAXKlGj9SqCZ6MfIv
PqH7jUCZcatVb3WqR0SoqkQJYd7hRfHcR61PTb+SenatPvK2plZwNpU/asCDAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUKsM59UVFeMaqm4AJn0D2owdNekAwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTUwNjU5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtdbw
MA0GCSqGSIb3DQEBCwUAA4IBAQA/c70M2fAUW//xou/S8TCABpKFBww5Ij/R4Csk
5bNmc8QWc3jGXW+FOj4GBbQGjjXC/M/IvUa3HUswNo3PzPjgT0KeIyD/dPc/SBoU
oKpwqh89ybiHuJBCClwrZELgzGxXL2dppP28ImeClOLyl0acwBOb9HyhK3vRIsbW
ddMDzoTj1GK2VE//tPQyqTVKQqR1e9BmGarDQXCOPO0d1j2ECnbCkKgY81tzBbkg
AN46aussoNs/62O7g0ro0XTcMZkinYTdzMeK2BHavPWTfoRpuNEW/aZXlFwIr0Sq
AIjXIvId5nP2PhYUAu1YC34QbbYD8PRHjgDjnotdSG4qAt4d
-----END CERTIFICATE-----
Generated at Mon Jun 15 02:18:07 2026 by rpki-client