Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS151119.roa
File: AS151119.roa (raw, json)
Hash identifier: AvJ+sswFW6w8NW8ftayvskNv+P31nWqwH+xPXkLb6Rg=
Subject key identifier: 01:B8:AB:B0:42:06:1D:76:86:BE:2C:64:74:E1:BF:31:53:5C:0A:51
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2D9ADB83937E52A295A8A21C3AB83637353FD204
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS151119.roa
Signing time: Tue 23 Jun 2026 06:06:02 +0000
ROA not before: Tue 23 Jun 2026 06:01:02 +0000
ROA not after: Tue 22 Jun 2027 06:06:02 +0000
asID: 151119
IP address blocks: 181.215.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 07:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:9a:db:83:93:7e:52:a2:95:a8:a2:1c:3a:b8:36:37:35:3f:d2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 23 06:01:02 2026 GMT
Not After : Jun 22 06:06:02 2027 GMT
Subject: CN=01B8ABB042061D7686BE2C6474E1BF31535C0A51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:17:f5:83:72:a0:19:be:c7:bc:91:e4:b3:38:
13:59:d7:13:ec:4d:3d:77:15:40:84:3c:57:a7:10:
8e:7c:58:b4:90:6e:0f:a2:63:a8:90:f8:2e:05:e1:
33:3d:57:b4:d1:3a:16:4e:df:b3:02:7a:10:3d:9b:
2c:df:44:69:8d:e9:57:ea:ea:6f:56:73:65:0f:ef:
4a:63:c1:86:4a:65:27:1a:1b:16:e6:ea:a1:9f:03:
7f:61:29:06:dc:65:98:f0:bf:d9:f9:8d:ac:81:f3:
5b:b8:ea:21:33:b6:4f:f6:57:9e:f6:86:5c:d4:22:
dc:e7:d3:c3:8a:f1:51:f3:02:b2:4c:d1:4f:f4:06:
86:17:0e:3c:29:46:0c:23:1b:38:f7:d6:b3:49:97:
0a:22:84:9f:ff:c4:5c:85:a1:e7:d4:a6:59:9a:33:
9a:6e:6f:01:14:19:8f:65:25:d8:77:00:bf:cc:4b:
cd:c0:bc:1e:eb:80:00:f3:7c:a8:84:48:cc:1e:2d:
f5:3c:44:57:6d:62:d4:e8:ca:59:47:be:81:60:fc:
99:92:1d:1c:68:c4:d2:9f:f6:9f:c3:71:4d:b9:10:
9b:a9:bf:78:a0:7a:9c:d9:90:3d:67:39:06:53:4e:
50:97:a4:06:ba:c0:af:63:4a:1a:8c:49:66:f0:80:
c1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B8:AB:B0:42:06:1D:76:86:BE:2C:64:74:E1:BF:31:53:5C:0A:51
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS151119.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.88.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:58:f8:31:70:3c:f4:75:22:b2:c6:1d:3c:41:08:71:e4:5e:
e7:41:60:f5:cc:e3:d8:18:e9:4a:3a:1e:2e:fe:66:79:12:d7:
4e:a1:a0:c0:1b:ad:8b:b9:83:ee:af:7d:6f:9c:98:39:ca:90:
7c:8e:f5:18:5a:71:0e:56:43:f6:e2:cc:ba:07:04:fc:7d:b7:
8c:df:20:15:c2:d7:dd:93:0b:b1:bf:98:7b:fa:3b:33:ab:9e:
ac:ee:2b:04:fd:6f:34:b4:07:13:ab:49:46:ec:5b:7f:d3:f1:
09:5a:ca:6a:7f:cf:5a:be:05:c6:12:7c:65:4f:fd:2b:a4:46:
64:e9:9e:65:07:4a:e7:ac:53:0f:68:c6:41:b0:84:f0:8a:7b:
cd:ee:c2:d8:a2:c0:4f:38:68:a9:9b:40:06:7c:b1:d9:9d:7d:
6c:f5:1f:39:97:a8:bb:fb:1f:41:96:60:91:99:ec:b2:4b:d9:
d6:36:52:1b:ce:54:68:14:5b:21:29:8b:6e:f6:16:0f:00:69:
0c:6d:04:b5:30:e5:ca:6f:12:42:e4:d8:bb:0d:23:40:82:bf:
eb:66:a0:96:39:09:cb:e3:b8:b1:03:e1:b7:55:99:0d:da:62:
3a:6e:f9:ec:55:91:30:05:e7:48:58:c0:22:e0:13:ce:0c:f9:
11:6f:52:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:37:59 2026 by rpki-client