Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS153033.roa
File: AS153033.roa (raw, json)
Hash identifier: o9t0CwX4LUTpF6vOAZu+bMhw5rztGroKucWtcOBB9/0=
Subject key identifier: 20:4E:E3:CF:CB:1E:C3:98:B1:C9:3C:EC:D0:95:AF:5D:DD:CE:B8:EF
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 59CF4F2C1E785BB1E1C580A828A7824CC8E2F12E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS153033.roa
Signing time: Tue 23 Jun 2026 05:59:55 +0000
ROA not before: Tue 23 Jun 2026 05:54:55 +0000
ROA not after: Tue 22 Jun 2027 05:59:55 +0000
asID: 153033
IP address blocks: 181.41.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 07:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:cf:4f:2c:1e:78:5b:b1:e1:c5:80:a8:28:a7:82:4c:c8:e2:f1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 23 05:54:55 2026 GMT
Not After : Jun 22 05:59:55 2027 GMT
Subject: CN=204EE3CFCB1EC398B1C93CECD095AF5DDDCEB8EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:70:5c:ce:25:3e:60:99:15:bc:5b:82:9f:1b:
a5:cb:30:03:c6:2e:77:76:d6:a0:84:1d:5c:29:82:
ca:92:bd:99:9a:ca:96:20:15:8a:63:af:45:0f:1d:
e4:08:9a:ab:6d:2b:42:17:25:84:16:28:b8:64:b9:
08:07:db:d1:e5:34:80:86:81:d2:a6:d8:dc:03:6b:
f2:e6:81:b3:e4:4d:93:20:22:dd:02:c2:58:e6:29:
86:82:d4:c8:2d:89:94:2f:89:f6:6f:c1:a7:16:d8:
7f:49:d4:e6:f6:bf:93:ac:0d:0d:df:dc:71:07:d3:
21:be:4d:43:31:1d:b0:38:9e:2c:d0:d4:50:9a:22:
38:21:e8:ff:2a:e6:05:9d:47:6b:51:45:d0:fb:b6:
26:6b:13:fc:4c:3d:cb:29:9d:c3:4a:0c:77:de:16:
fb:93:71:d6:58:2d:96:1d:9a:eb:aa:13:81:ba:33:
34:93:a6:ee:6f:f2:6d:bc:a9:d3:1f:9b:c7:12:87:
1f:83:c4:d1:8c:38:18:1c:c2:0b:af:95:c2:3d:c7:
aa:f7:71:9d:9d:b0:f2:aa:e4:06:86:8b:65:4a:17:
f5:ca:e7:f7:2a:69:c3:07:e1:05:e1:b5:c6:9a:2b:
f2:be:79:f4:e7:e7:bc:f4:7a:a6:f6:37:ba:50:8a:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4E:E3:CF:CB:1E:C3:98:B1:C9:3C:EC:D0:95:AF:5D:DD:CE:B8:EF
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS153033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.212.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4a:bd:7a:90:5a:54:8f:aa:6b:2e:c3:90:2f:51:c3:3c:fe:
a7:85:30:64:e2:5e:c5:f7:4e:31:47:a3:bd:99:52:d4:cf:22:
66:e8:cb:2b:e2:50:fe:4c:71:0c:2f:66:7a:04:d9:b5:0e:44:
64:f5:6d:c8:bc:34:46:f3:04:39:57:2c:cb:02:0c:39:93:fe:
c6:60:b2:e7:9e:98:73:d6:d1:af:aa:8c:0f:e1:a6:c5:c3:b3:
eb:d5:a0:78:6b:60:9c:89:f3:00:09:48:40:b3:a8:93:f7:c0:
96:46:aa:88:96:fa:1a:e1:76:75:28:7e:3a:22:03:3f:20:8c:
82:dc:e6:b9:b1:30:29:96:f5:63:1a:ee:8f:26:2d:55:7b:da:
d9:89:6a:6a:4e:0e:a0:fe:bc:2f:b1:45:7f:89:f2:89:5d:43:
29:e6:53:38:6a:d7:16:6a:0b:7d:cf:ec:5b:e1:87:71:4f:ac:
ed:38:22:34:12:f1:41:1a:d5:7d:6d:77:20:3c:d0:23:f2:af:
fe:a6:0c:13:3a:50:00:d4:50:66:1c:e5:15:ee:2a:fa:fe:74:
f3:b7:9e:88:be:90:fb:e3:66:b0:c5:1b:57:41:a4:5b:bc:db:
5f:f4:08:4b:0c:14:65:97:43:b5:a4:b9:cd:34:72:d4:29:81:
3d:06:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:38:00 2026 by rpki-client