Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS151119.roa
File: AS151119.roa (raw, json)
Hash identifier: yWV7xPq7/tSbHu/bvGkvPYc82SilMNrRKNPWMHpAxEs=
Subject key identifier: 09:3A:3A:41:E2:FF:CC:F6:C5:5B:0C:57:D6:20:D7:E7:6E:F6:F6:71
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4A9A3D31447A8A0B56836CC2F9937E5F23D198DC
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS151119.roa
Signing time: Tue 23 Jun 2026 08:00:35 +0000
ROA not before: Tue 23 Jun 2026 07:55:35 +0000
ROA not after: Tue 22 Jun 2027 08:00:35 +0000
asID: 151119
IP address blocks: 188.220.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:9a:3d:31:44:7a:8a:0b:56:83:6c:c2:f9:93:7e:5f:23:d1:98:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 23 07:55:35 2026 GMT
Not After : Jun 22 08:00:35 2027 GMT
Subject: CN=093A3A41E2FFCCF6C55B0C57D620D7E76EF6F671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:e1:70:e9:00:94:37:ec:e0:c1:a9:e6:dd:
82:1d:5e:25:c6:16:10:ad:70:fb:2e:b7:7e:06:d4:
5a:99:68:15:bd:78:d9:3c:a4:e0:52:5d:50:cf:8a:
af:17:dc:0f:0c:98:6c:75:e6:82:3d:48:3f:08:b2:
1f:2d:da:78:18:2d:9c:f2:e6:a4:01:a2:95:13:3d:
3f:e4:d8:2e:36:2c:ed:ba:8b:3b:61:6a:91:28:5f:
fa:66:a4:6c:d7:94:24:0f:de:85:ac:c7:f9:6d:d1:
c8:05:a3:f5:40:2d:b7:06:2e:85:9a:c8:a3:93:8e:
ea:a1:eb:f4:62:94:98:29:2a:d7:1d:26:25:04:60:
19:d8:a5:ca:3d:04:42:db:c7:6e:1f:60:15:d5:85:
a2:92:01:d3:4c:e2:ce:f6:ba:b8:cf:19:fc:94:df:
e1:ed:19:dc:54:0d:44:fb:0c:a7:b5:94:18:06:e5:
8e:8b:8e:b0:64:8c:40:9e:79:88:3f:fb:ef:36:15:
69:ec:17:41:04:95:84:d5:37:d4:65:37:bd:0d:58:
2f:a0:79:f6:cf:84:7d:90:a6:ab:71:2b:4a:95:b8:
c9:d8:19:d5:24:74:5c:4e:26:34:7a:71:04:59:05:
02:66:76:82:2f:48:f1:ff:72:90:19:54:99:a2:cb:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3A:3A:41:E2:FF:CC:F6:C5:5B:0C:57:D6:20:D7:E7:6E:F6:F6:71
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS151119.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.137.0/24
Signature Algorithm: sha256WithRSAEncryption
29:eb:ef:3b:ff:86:af:07:70:49:a9:66:f4:93:df:83:95:09:
93:04:20:58:dc:e0:de:2d:a9:32:e1:0e:5c:ec:9a:08:9d:d6:
71:b0:2a:ed:e7:0b:0b:b8:c4:4e:fc:62:9b:b7:e0:14:0b:37:
23:37:b9:27:28:3b:09:ba:cc:83:99:28:38:cd:ad:9c:90:c3:
39:8d:4f:bc:41:85:06:87:1c:69:05:63:c6:1f:e6:e3:db:e6:
91:b0:7b:1c:f9:5a:1c:58:a4:be:83:21:2a:c4:db:51:2b:d3:
ee:fc:e2:d7:f8:c2:ee:93:61:0c:ee:0e:5a:d4:b4:92:86:89:
01:97:60:39:f2:30:c9:ff:35:45:43:5f:c5:e1:ef:5d:d5:10:
6b:21:3e:2b:22:4a:4d:04:2c:8d:89:36:a8:05:8e:43:8c:5d:
38:93:bc:16:ad:ce:ce:92:02:d8:d3:ff:4c:1e:a0:18:39:74:
88:a3:47:2c:12:1d:cb:15:83:b2:9e:8a:86:c5:19:9e:16:2f:
3b:68:af:21:b5:f5:c0:48:bd:ce:61:0b:c6:c1:5e:e5:b0:11:
48:29:1a:b1:a2:7f:4f:15:e6:d4:1e:86:6d:af:c0:8e:7d:03:
9b:74:02:f9:20:91:69:30:9b:16:f0:f5:58:36:68:80:3d:ff:
47:86:fc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:39 2026 by rpki-client