Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS150315.roa
File: AS150315.roa (raw, json)
Hash identifier: 1rxEU+E7o+Px9vynvZnGNcSM/p2Ie9ksD3+Fu17FncI=
Subject key identifier: 4E:6E:5F:ED:78:DD:D3:D3:23:2B:A7:22:FB:81:F1:D2:0B:26:CD:EF
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 01A02D75DED5BDE3EBB8C91E04E538B90A84EC72
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS150315.roa
Signing time: Wed 15 Jul 2026 13:49:12 +0000
ROA not before: Wed 15 Jul 2026 13:44:12 +0000
ROA not after: Wed 14 Jul 2027 13:49:12 +0000
asID: 150315
IP address blocks: 46.203.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2d:75:de:d5:bd:e3:eb:b8:c9:1e:04:e5:38:b9:0a:84:ec:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 15 13:44:12 2026 GMT
Not After : Jul 14 13:49:12 2027 GMT
Subject: CN=4E6E5FED78DDD3D3232BA722FB81F1D20B26CDEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a3:38:b4:f5:22:7c:53:b4:56:d4:ca:a3:ff:
6d:d6:e3:2d:46:ab:2a:19:8f:bd:7a:67:0d:d0:f2:
f2:15:87:34:86:30:6e:f9:72:dd:d8:71:d4:48:ff:
e4:fa:de:2c:5e:3e:41:f1:e9:40:48:6a:f4:b8:4f:
ff:25:e9:4e:5d:01:46:85:92:9d:73:85:c1:70:c1:
08:d6:5e:70:1e:f2:74:b7:e3:e8:6c:bc:bf:7c:36:
b3:5f:85:f1:cf:82:0c:f5:ea:ee:99:5c:74:99:e2:
d0:3d:50:6b:78:e0:dd:1c:65:e2:c0:77:2c:82:2e:
1b:74:12:41:1f:0c:53:c7:a5:f7:6e:75:bc:6b:08:
d1:41:35:25:d2:e6:69:66:49:7d:d9:08:c3:d0:03:
4f:8d:ca:3d:19:b9:69:29:85:53:c1:a7:9f:66:e3:
42:f3:ba:8f:f6:28:f7:29:b1:b6:6a:e1:0d:de:43:
d0:be:42:b9:6e:50:82:cf:12:23:cd:a1:e0:b7:f4:
a0:42:c2:0f:ad:5d:98:6d:8f:99:22:26:17:6d:99:
59:c9:28:f9:d7:0d:af:08:bd:1d:de:4a:65:5f:40:
96:70:86:88:a1:1e:dd:87:3b:f9:96:75:b5:ae:81:
c7:e5:72:f4:80:f5:07:5d:d4:5b:39:07:9d:a7:e7:
10:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6E:5F:ED:78:DD:D3:D3:23:2B:A7:22:FB:81:F1:D2:0B:26:CD:EF
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS150315.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.234.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c2:69:bd:6f:a9:c2:04:65:24:3a:a9:fe:d5:a8:a0:a5:9e:
10:0f:a9:04:4b:7d:76:87:1a:71:4f:44:a0:e8:10:c6:e4:73:
f5:97:22:6f:91:20:e4:9f:52:8e:01:ec:86:d6:06:35:af:54:
a7:e3:de:fb:9b:4a:57:52:2b:2f:8c:97:ea:22:96:22:bd:a4:
a1:10:c0:25:bb:4e:23:cd:ea:5d:98:2a:ee:d3:f8:fb:32:dc:
e5:c0:6b:f7:ee:db:56:a7:01:72:87:36:e6:a1:b4:d6:f6:72:
44:6a:cf:a9:30:2d:df:e6:b6:2f:b4:74:86:b7:5a:6f:c3:3e:
4f:08:ce:4c:05:7e:92:01:50:06:72:0f:0b:9f:c4:24:15:11:
3a:96:42:6e:aa:60:a6:9e:c6:2b:a0:d6:7e:ea:4c:e7:56:52:
f3:52:23:0b:52:d6:2a:2c:21:9f:5f:e6:e8:5e:ee:cb:d4:10:
38:b3:bc:6c:03:66:42:47:bc:ac:03:7f:a4:54:94:8a:37:7c:
d5:1f:21:bb:d4:b9:55:ce:fa:c8:cb:32:2a:de:86:3e:e4:a0:
dc:3d:0a:fb:d2:e2:6a:35:d8:fd:06:b3:85:74:96:49:99:90:
84:c2:3f:fa:b6:cf:9b:c8:94:6a:4a:7f:1f:d4:b8:fb:05:21:
ff:af:e3:1e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUAaAtdd7VvePruMkeBOU4uQqE7HIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA3MTUxMzQ0MTJaFw0yNzA3MTQxMzQ5MTJaMDMxMTAvBgNV
BAMTKDRFNkU1RkVENzhEREQzRDMyMzJCQTcyMkZCODFGMUQyMEIyNkNERUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUozi09SJ8U7RW1Mqj/23W4y1G
qyoZj716Zw3Q8vIVhzSGMG75ct3YcdRI/+T63ixePkHx6UBIavS4T/8l6U5dAUaF
kp1zhcFwwQjWXnAe8nS34+hsvL98NrNfhfHPggz16u6ZXHSZ4tA9UGt44N0cZeLA
dyyCLht0EkEfDFPHpfdudbxrCNFBNSXS5mlmSX3ZCMPQA0+Nyj0ZuWkphVPBp59m
40Lzuo/2KPcpsbZq4Q3eQ9C+QrluUILPEiPNoeC39KBCwg+tXZhtj5kiJhdtmVnJ
KPnXDa8IvR3eSmVfQJZwhoihHt2HO/mWdbWugcflcvSA9Qdd1Fs5B52n5xADAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUTm5f7Xjd09MjK6ci+4Hx0gsmze8wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTUwMzE1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALsvq
MA0GCSqGSIb3DQEBCwUAA4IBAQB2wmm9b6nCBGUkOqn+1aigpZ4QD6kES312hxpx
T0Sg6BDG5HP1lyJvkSDkn1KOAeyG1gY1r1Sn4977m0pXUisvjJfqIpYivaShEMAl
u04jzepdmCru0/j7MtzlwGv37ttWpwFyhzbmobTW9nJEas+pMC3f5rYvtHSGt1pv
wz5PCM5MBX6SAVAGcg8Ln8QkFRE6lkJuqmCmnsYroNZ+6kznVlLzUiMLUtYqLCGf
X+boXu7L1BA4s7xsA2ZCR7ysA3+kVJSKN3zVHyG71LlVzvrIyzIq3oY+5KDcPQr7
0uJqNdj9BrOFdJZJmZCEwj/6ts+byJRqSn8f1Lj7BSH/r+Me
-----END CERTIFICATE-----
Generated at Fri Jul 17 06:50:51 2026 by rpki-client