Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS154408.roa
File: AS154408.roa (raw, json)
Hash identifier: 49HEFlrkcOl0IBOLR43cLOgGgSGEZC3DHKCP0TRQMQc=
Subject key identifier: 3D:7F:4C:7A:68:1A:7E:BA:DA:E8:E5:BD:C7:2A:64:DB:AC:EA:2E:70
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 24E9EADA783797B4A5AEF3393A5240A54014BB4C
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS154408.roa
Signing time: Sat 23 May 2026 09:24:28 +0000
ROA not before: Sat 23 May 2026 09:19:28 +0000
ROA not after: Sat 22 May 2027 09:24:28 +0000
asID: 154408
IP address blocks: 141.11.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 21:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e9:ea:da:78:37:97:b4:a5:ae:f3:39:3a:52:40:a5:40:14:bb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 23 09:19:28 2026 GMT
Not After : May 22 09:24:28 2027 GMT
Subject: CN=3D7F4C7A681A7EBADAE8E5BDC72A64DBACEA2E70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:81:a5:b9:12:2e:16:15:5e:92:ca:90:a9:
d0:e6:ed:c3:2f:d8:61:d8:54:27:89:43:68:19:09:
b3:f2:fe:11:92:50:ba:b6:c4:45:97:71:1e:b7:b6:
5d:36:c5:56:7a:2f:32:33:fb:8b:ba:7f:8d:10:b1:
29:3e:18:24:71:b6:de:5c:48:13:29:9d:11:b1:83:
4f:8b:50:46:be:2e:29:27:0c:8e:67:87:10:43:76:
a7:56:cd:69:d7:f3:d5:1d:75:56:a8:b8:85:52:61:
a0:82:cd:32:09:47:35:00:fc:6f:b7:10:c2:9d:bb:
ab:26:24:55:0f:92:66:e1:d1:98:2c:aa:0f:e8:58:
3c:ae:6f:3e:77:bc:92:1f:15:77:f2:e9:4b:b9:79:
29:be:4c:bd:55:ef:b6:0d:b0:d9:bb:14:c2:e1:28:
95:a9:bd:23:3c:87:44:fc:6d:90:35:f2:2f:d1:f9:
ae:af:20:38:fd:09:c1:54:4d:11:fd:04:82:4e:08:
19:d2:07:44:c1:f9:69:d0:6e:2c:fa:65:17:a0:82:
f0:d5:a2:73:34:f3:31:0d:a3:eb:98:85:5b:19:ae:
5f:9a:37:e6:d5:37:0f:fb:56:a8:4c:47:f2:dd:46:
f6:9a:5f:75:bc:04:1d:b0:53:9b:42:91:ea:a0:69:
b5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7F:4C:7A:68:1A:7E:BA:DA:E8:E5:BD:C7:2A:64:DB:AC:EA:2E:70
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS154408.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.96.0/24
Signature Algorithm: sha256WithRSAEncryption
af:f6:6a:09:e8:15:2c:ea:e1:ee:45:85:5a:c4:24:86:4b:b9:
e6:08:2e:0f:83:74:ca:6a:58:a0:3d:35:7f:92:ce:fd:20:e2:
aa:e7:ca:0e:6b:8c:2f:d2:43:2a:c4:fc:4a:6f:50:33:63:e2:
33:2e:0f:38:eb:a3:9f:e6:c0:95:b2:71:16:3f:d7:fd:de:f6:
ff:ed:28:a8:b5:bd:eb:91:53:c1:f4:0f:22:91:70:1b:9d:f5:
44:9f:83:91:0e:99:b7:2e:46:d7:d1:7d:c5:b8:b3:a0:d5:da:
fb:65:8d:93:27:96:2d:64:76:9d:c7:eb:62:7e:0e:71:21:83:
0d:92:50:8f:24:f2:4e:1b:bc:b2:22:8a:22:fa:6a:b6:e4:9c:
7d:6c:29:85:3d:40:46:a5:b8:59:74:e9:2f:89:d1:92:6c:d3:
5e:3c:51:50:8b:da:19:67:2c:81:a7:af:e6:1f:2e:6b:4c:37:
b2:c2:bb:2f:de:02:3a:0c:d8:d0:d5:a4:f3:be:c2:6b:31:10:
22:77:1d:3a:b8:59:82:6b:1e:a9:c4:52:5b:1b:54:0e:d0:e4:
0b:f4:b6:83:88:fe:2b:ed:85:da:ea:a0:0b:13:78:74:ce:1a:
4c:a5:d7:e4:a8:84:92:c2:e9:73:64:69:05:0f:42:d1:c6:16:
46:e0:6b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 03:58:46 2026 by rpki-client