Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS150501.roa
File: AS150501.roa (raw, json)
Hash identifier: 6GyVNCM6robjm1JWerzEslA/VCt0Wzd3gpAracVAEIA=
Subject key identifier: 2C:07:D1:F5:74:C0:04:94:C5:B6:A6:E1:6F:15:DD:05:40:4F:4C:64
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 5A6EDFA9FE9419D578339C8139818BF5B83C6B00
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS150501.roa
Signing time: Tue 23 Jun 2026 03:40:29 +0000
ROA not before: Tue 23 Jun 2026 03:35:29 +0000
ROA not after: Tue 22 Jun 2027 03:40:29 +0000
asID: 150501
IP address blocks: 45.157.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 04:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:6e:df:a9:fe:94:19:d5:78:33:9c:81:39:81:8b:f5:b8:3c:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 23 03:35:29 2026 GMT
Not After : Jun 22 03:40:29 2027 GMT
Subject: CN=2C07D1F574C00494C5B6A6E16F15DD05404F4C64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:ac:02:99:38:e2:9e:00:37:22:9a:cc:27:
e5:1b:62:85:d9:74:d5:55:cd:8a:c8:80:05:61:f5:
2b:b6:e3:50:19:cf:af:d9:42:23:e1:1b:7a:6b:5f:
92:ba:e3:b6:ea:15:fa:90:ef:09:0e:e0:49:22:e5:
16:9e:9d:7e:d9:78:02:42:44:34:6f:ab:c1:9a:b5:
d5:79:60:ef:78:98:08:51:87:02:17:5e:d3:41:a1:
96:e7:7e:10:71:ba:1c:5d:5a:ab:98:00:16:a1:23:
90:cc:9f:5a:60:5f:f9:03:31:2a:07:58:3b:82:f3:
0c:2e:f2:de:69:ae:4f:09:5a:e1:30:2e:fb:14:7b:
ea:31:30:54:b3:51:70:7c:d7:10:12:c9:e9:bc:2e:
5b:51:a1:03:df:a5:39:66:00:7b:66:59:ad:9c:94:
67:67:30:4f:1e:b9:b6:89:1f:18:92:cb:8b:fe:61:
fd:c6:65:cc:38:5d:db:75:c5:d5:b0:32:bf:e7:0f:
c2:bd:67:4a:5f:1d:ee:43:2b:ec:22:a1:4d:ff:42:
97:90:9e:f1:94:39:9e:f9:10:ac:a5:e4:1c:67:21:
9c:d3:03:29:20:df:99:11:5c:04:9f:b7:eb:a0:c6:
0d:8e:89:2e:df:4a:cc:fb:34:e1:ae:79:7d:16:b3:
62:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:07:D1:F5:74:C0:04:94:C5:B6:A6:E1:6F:15:DD:05:40:4F:4C:64
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS150501.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.18.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:45:56:09:72:dd:65:5f:84:cc:3d:1a:e9:5b:08:89:f1:01:
82:58:91:e7:f3:01:8b:f0:ac:c3:9a:d9:09:e3:e4:12:e2:47:
1e:fd:5c:a6:ea:59:4e:35:d5:9e:48:79:87:1b:a0:73:0d:e0:
ba:d1:20:37:57:d0:db:20:2c:ec:d5:39:bd:f5:77:19:0a:10:
53:ea:36:b9:cb:02:a2:00:4d:55:b1:0e:d7:21:3e:a9:7c:48:
aa:96:28:b0:e0:a5:c0:ef:56:49:55:d1:2b:ad:86:6e:6a:82:
e9:cd:3e:d5:aa:43:36:37:01:82:06:f5:07:ca:fa:3c:7e:53:
c2:07:de:fd:f9:d3:b5:63:07:6f:38:47:00:27:7e:f2:40:13:
c3:8c:c6:fc:57:d7:34:31:88:44:ba:7c:27:d8:e6:22:95:7e:
6b:d7:c9:91:9c:77:36:6f:27:4b:bb:0b:d9:40:b4:3d:27:9e:
8b:fd:22:a7:12:c1:03:bb:57:f0:0f:dd:f0:74:cd:3d:09:83:
f9:3d:32:1f:1c:74:94:cd:55:d9:22:ed:c5:83:c2:75:cb:87:
3a:50:80:ea:2b:02:95:92:6d:6a:8a:ad:74:5f:f9:75:64:6d:
72:4c:a4:61:d1:cc:67:99:f6:85:5e:48:aa:67:66:a2:c7:77:
26:e8:e7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 18:39:38 2026 by rpki-client