Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS150249.roa
File: AS150249.roa (raw, json)
Hash identifier: uDJtwUCfXu1FfYhe4FgO4TMWDL4Ve4jiqcUQMZzTbKw=
Subject key identifier: B0:D7:F7:B4:05:DD:36:6D:0B:C7:11:AC:9C:39:B9:32:CE:9E:0D:C4
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 54C24A0D1FC51B12CDE3FE64B5CABFE8DF929743
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS150249.roa
Signing time: Tue 28 Apr 2026 03:47:21 +0000
ROA not before: Tue 28 Apr 2026 03:42:21 +0000
ROA not after: Tue 27 Apr 2027 03:47:21 +0000
asID: 150249
IP address blocks: 143.20.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 May 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c2:4a:0d:1f:c5:1b:12:cd:e3:fe:64:b5:ca:bf:e8:df:92:97:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Apr 28 03:42:21 2026 GMT
Not After : Apr 27 03:47:21 2027 GMT
Subject: CN=B0D7F7B405DD366D0BC711AC9C39B932CE9E0DC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:1b:75:50:20:61:1e:3b:70:a4:7d:a3:91:
f0:f3:10:4b:bb:1c:41:b9:ac:5b:19:fc:6f:8d:8f:
1e:d7:f7:fd:29:7a:f1:65:72:4f:56:46:4b:b1:8b:
f1:00:e9:ef:03:80:14:3e:d6:15:70:68:c5:fa:f0:
9f:2c:2a:9e:57:7f:cc:cb:d1:45:e0:b5:a2:4c:0d:
ab:9c:21:4e:f9:08:d1:ef:e6:73:13:05:cf:e4:51:
78:41:11:0c:ca:64:a6:0d:2d:b0:0e:5d:9b:d5:37:
6b:2c:6b:be:c9:92:32:f2:0c:fa:63:86:82:da:62:
55:d8:15:b9:4b:6e:7b:5c:00:59:a5:65:cc:40:f3:
9e:67:38:4e:11:94:c2:c8:47:bf:43:bb:a5:4c:43:
a1:84:0e:24:49:cb:ed:d0:16:d8:7d:3e:1c:7f:5b:
23:2d:7e:6e:17:f6:51:5f:83:75:c7:ee:5d:81:22:
63:cc:38:e3:dc:1a:68:a8:dd:a7:ce:11:52:66:14:
85:15:73:94:9b:86:ab:cf:a0:e0:c3:ae:ec:8c:56:
bf:eb:f6:aa:b4:8d:7e:53:9e:6b:5a:b5:01:ce:8a:
b0:08:01:4f:18:c7:2a:aa:a0:36:6f:48:85:04:ca:
29:73:6b:2c:c9:e4:b4:ca:1f:5a:12:6e:26:c8:09:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D7:F7:B4:05:DD:36:6D:0B:C7:11:AC:9C:39:B9:32:CE:9E:0D:C4
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS150249.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.49.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a4:08:3d:ac:01:fd:97:17:94:e1:63:5c:d7:f4:66:80:13:
90:86:41:f4:71:d3:3c:f9:17:46:13:e1:46:bb:65:15:b4:9b:
a9:60:7d:0f:4b:0b:70:5c:c7:08:35:5a:eb:8c:dd:f4:67:26:
d1:db:0b:e8:2d:64:e4:66:5b:27:0f:3b:23:da:b8:6c:d7:47:
44:7a:85:c7:91:07:ba:6b:f5:8d:cc:df:e7:9c:66:37:96:03:
79:c6:6e:a9:42:32:75:4c:2d:5b:61:9a:de:e8:07:90:05:b5:
00:40:42:f5:bd:f3:ef:8e:82:37:69:4e:31:f8:66:c5:4a:2b:
12:ae:7d:dc:49:11:24:44:61:aa:5f:b2:dd:5b:84:64:fd:06:
9f:55:40:a2:91:fc:90:5b:b1:e8:ba:e4:ed:0d:61:f5:d6:50:
95:e8:10:5d:23:02:c2:c3:fb:45:a5:4d:65:17:6e:ee:9c:52:
36:40:70:b0:fa:78:4b:9e:23:af:99:cc:45:be:4b:c9:a1:8b:
a5:86:64:b1:6f:ac:0f:dd:a1:c4:80:b6:0d:fa:4a:27:0f:c0:
e2:e9:1c:a6:98:3f:3f:ab:68:52:75:96:c4:e5:8a:79:90:44:
15:82:22:df:4c:7d:0f:00:2d:98:43:18:87:17:dd:01:98:f6:
a2:a7:d0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 22:51:35 2026 by rpki-client