Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS15924.roa
File: AS15924.roa (raw, json)
Hash identifier: MZcmWTgqz0egtVTDtjCH7KdhOwJp/d+Vtwq9ZPoIvew=
Subject key identifier: A5:E2:4B:F6:C7:C6:FC:F3:35:7B:18:3B:DD:CA:A0:30:C3:34:11:22
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 31AD495BDA7F2B503FA2AD713CEEB560017B8B4F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS15924.roa
Signing time: Sun 19 Jul 2026 05:48:27 +0000
ROA not before: Sun 19 Jul 2026 05:43:27 +0000
ROA not after: Sun 18 Jul 2027 05:48:27 +0000
asID: 15924
IP address blocks: 185.158.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 07:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ad:49:5b:da:7f:2b:50:3f:a2:ad:71:3c:ee:b5:60:01:7b:8b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 19 05:43:27 2026 GMT
Not After : Jul 18 05:48:27 2027 GMT
Subject: CN=A5E24BF6C7C6FCF3357B183BDDCAA030C3341122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:36:89:f2:32:61:a2:03:b2:70:50:6e:3b:
64:50:78:32:d1:11:bc:f4:87:db:91:21:b3:58:bb:
3d:68:bc:b5:93:0b:68:8c:dd:18:c0:59:b3:3b:d8:
55:dc:df:69:93:89:4c:0f:02:60:ac:2f:a3:49:54:
b4:5f:fc:5a:5b:b6:82:cc:fb:ee:a6:7d:b7:19:2e:
cc:c8:28:6f:22:b1:41:8e:16:2d:31:01:45:06:3d:
1f:44:8d:2c:33:3b:b4:c6:cc:a3:b8:3c:1c:ec:0a:
12:41:b3:97:6b:54:ee:02:be:12:2d:dd:c2:d4:95:
a3:e0:0a:a9:d7:0f:b6:37:2d:97:e2:9d:70:a0:39:
c8:49:9b:cc:d5:9e:e1:ae:a5:cc:66:2d:bb:1a:a8:
cd:28:d6:cd:0e:42:7e:bc:f7:d0:88:94:6d:96:e7:
f5:9f:09:77:5e:99:aa:88:5b:90:a7:42:92:3c:ba:
80:20:0e:3a:69:e6:b4:38:78:ef:50:4c:50:98:d5:
e4:85:ff:9c:4b:c0:7a:aa:e6:ad:91:12:01:2f:4e:
9c:dd:1b:56:a4:81:fd:d0:40:b0:ac:bd:dc:08:79:
bf:ac:1c:24:23:89:75:98:77:e1:a2:22:51:27:5c:
01:d4:18:dd:47:0e:f1:34:5b:03:d9:85:46:3b:de:
07:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E2:4B:F6:C7:C6:FC:F3:35:7B:18:3B:DD:CA:A0:30:C3:34:11:22
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS15924.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.151.0/24
Signature Algorithm: sha256WithRSAEncryption
67:cd:4e:03:df:6f:15:ef:0c:6e:ea:84:61:52:df:87:cf:3b:
3d:97:2b:bc:03:ce:21:32:b8:d6:83:a0:81:d6:7a:16:2d:2b:
50:99:ba:df:d6:c4:9b:f3:37:0d:f6:7a:04:fd:b4:61:35:f9:
9a:76:28:2f:9a:d4:23:6e:7a:0f:17:76:29:bd:18:5e:e8:cb:
5e:7c:c5:e3:23:d4:1a:42:83:a5:55:16:81:5e:b5:d2:2b:1a:
ef:2e:af:45:2f:72:8c:58:65:8e:14:5d:44:85:fc:16:0f:ff:
de:96:10:d5:b4:18:fd:18:d9:4d:3f:62:32:99:88:7e:ff:4f:
39:a6:be:97:2f:d9:f7:1e:39:1a:a2:28:f7:cc:6a:77:0f:a6:
1a:d6:d9:40:9b:ff:90:57:3d:84:6e:a2:27:12:7b:d5:d5:f1:
79:2b:5e:af:87:5b:f8:0b:47:2b:b9:a3:9b:9c:1f:04:4d:3b:
10:48:04:5f:6a:82:db:cf:00:8e:6d:71:52:2d:c7:37:33:ad:
de:61:ff:94:08:f4:a9:79:56:34:8e:89:fe:d1:3d:19:0a:d4:
46:ec:ac:f7:47:9c:7e:a5:52:b3:e6:0a:8c:92:68:f9:62:63:
1d:35:99:71:43:e6:a0:81:72:94:d2:fc:8b:83:4f:c8:c6:f3:
dd:bf:bd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:37:58 2026 by rpki-client