Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS151104.roa
File: AS151104.roa (raw, json)
Hash identifier: +8OG+CxxQ2nwhoMnsSSx+lbSAo5A5mqMlRXqcffBwKQ=
Subject key identifier: 1F:9C:DB:38:C0:4C:A0:8D:9D:68:CF:4A:02:A0:86:59:8F:F7:A2:D8
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 741F22C38FF7A1BBB959C535B1F18CB4A3D46843
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS151104.roa
Signing time: Tue 23 Jun 2026 07:58:04 +0000
ROA not before: Tue 23 Jun 2026 07:53:04 +0000
ROA not after: Tue 22 Jun 2027 07:58:04 +0000
asID: 151104
IP address blocks: 188.220.119.0/24 maxlen: 24
188.221.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:1f:22:c3:8f:f7:a1:bb:b9:59:c5:35:b1:f1:8c:b4:a3:d4:68:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 23 07:53:04 2026 GMT
Not After : Jun 22 07:58:04 2027 GMT
Subject: CN=1F9CDB38C04CA08D9D68CF4A02A086598FF7A2D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2e:02:a9:ef:c5:ff:48:de:7d:e4:fd:76:fb:
0e:18:da:91:1c:98:3f:9a:8d:d7:e6:2c:11:01:bb:
f9:6f:82:0c:22:d8:0b:94:00:0b:32:7c:5f:d1:a7:
02:f9:fe:e8:be:8f:b3:e4:66:28:ae:2d:66:b8:72:
be:73:41:fe:79:69:f9:e4:ed:76:e4:cb:d4:59:0a:
79:62:36:5d:4f:23:81:40:33:1e:10:36:f6:e1:23:
5b:03:9a:cb:fb:46:3b:e5:84:da:a9:c3:b3:22:e0:
e4:52:6b:67:99:32:9d:67:21:6f:28:3d:98:f1:75:
89:b1:cd:0d:cb:6f:2f:c8:8e:79:56:d0:c7:a4:fe:
df:e6:52:ab:80:3b:85:89:27:d0:49:e2:6c:c0:12:
ff:2e:aa:b1:b1:da:78:1f:56:ae:1a:6e:12:e7:2e:
f9:ef:35:a6:dc:dd:52:2d:6c:3c:af:72:a1:7e:60:
7d:4c:37:15:48:81:56:70:bc:f0:64:61:1f:a2:48:
6b:0f:d4:5d:dc:b7:08:ee:d9:21:5f:9d:5b:ea:9d:
66:47:64:1e:36:e1:8d:43:a7:18:b8:c7:13:3e:78:
5f:05:89:e8:10:6f:ff:86:0f:c5:fa:e9:81:97:37:
39:02:2a:45:66:7b:da:97:99:10:f2:e3:9b:fa:24:
81:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9C:DB:38:C0:4C:A0:8D:9D:68:CF:4A:02:A0:86:59:8F:F7:A2:D8
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS151104.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.119.0/24
188.221.164.0/24
Signature Algorithm: sha256WithRSAEncryption
35:7c:79:e5:6c:be:7b:6e:7e:fe:01:7d:06:9c:fa:13:f1:f9:
d6:45:54:00:d7:6d:7d:a2:ac:87:de:68:1b:ea:e2:74:03:92:
b4:45:78:f9:e8:1a:da:12:70:05:19:30:5e:60:65:bc:6f:cc:
59:d2:56:5e:09:7a:35:a1:c8:6b:2f:68:45:73:9d:a6:5e:42:
7e:c8:28:f0:6e:62:93:3f:d8:79:12:87:e1:ab:69:96:36:13:
1a:60:d2:3b:29:ec:66:34:2f:8a:85:30:25:77:6d:36:a3:cf:
a8:79:af:50:14:c0:46:d6:30:dd:66:1f:9e:b4:e6:16:ba:61:
96:a7:7e:fc:05:cf:fb:13:84:8b:7f:11:be:43:80:fa:a0:0c:
ff:7f:de:e2:5e:3a:05:55:67:3b:e5:dc:7a:17:24:8a:9e:ba:
c7:23:5a:98:c5:11:3e:f9:44:6a:cd:59:09:39:ff:6b:91:8c:
c2:ff:8d:c8:fe:01:3a:e7:84:41:90:b4:f9:9b:09:83:2f:17:
f4:bb:bc:2d:43:6f:e5:87:13:aa:3f:95:d4:17:21:2a:b6:7c:
2d:92:59:2c:4a:22:7f:14:27:10:06:7a:7d:26:3d:88:86:6a:
86:ce:83:ca:8c:94:95:b6:50:b1:33:c6:d4:40:f3:14:1e:0b:
b9:fe:b3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 22:57:42 2026 by rpki-client