Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS151704.roa
File: AS151704.roa (raw, json)
Hash identifier: F15e29sK8NuTRGtArYHIjpkaBpt2CDqXJolPXkJtAB4=
Subject key identifier: 64:CB:D4:D2:8B:C6:BF:39:EE:9B:B4:1F:D5:00:B5:81:13:81:AF:D4
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1584C2FE29F97A42338C2AC793B8B52146746F46
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS151704.roa
Signing time: Mon 20 Jul 2026 10:41:34 +0000
ROA not before: Mon 20 Jul 2026 10:36:34 +0000
ROA not after: Mon 19 Jul 2027 10:41:34 +0000
asID: 151704
IP address blocks: 95.135.161.0/24 maxlen: 24
178.92.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:84:c2:fe:29:f9:7a:42:33:8c:2a:c7:93:b8:b5:21:46:74:6f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 20 10:36:34 2026 GMT
Not After : Jul 19 10:41:34 2027 GMT
Subject: CN=64CBD4D28BC6BF39EE9BB41FD500B5811381AFD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:69:fa:75:80:8e:14:23:a1:f3:7c:d5:76:f7:
c1:9b:a0:87:12:fc:1f:be:e4:45:58:93:2c:f3:5d:
68:ce:64:70:37:66:25:16:d3:7f:77:db:36:6b:cc:
9c:5b:1d:a9:60:11:5d:91:60:8d:f4:79:c3:d5:0f:
c9:5e:3f:91:26:bd:66:34:42:bd:83:57:6f:39:92:
a1:ec:c2:2e:53:bd:05:d1:60:19:77:57:58:b1:61:
eb:4d:2a:33:2a:3a:d4:e1:ec:cd:4a:37:1c:64:ef:
ab:df:6f:6d:80:e1:76:bc:c9:72:c4:47:48:8d:d7:
3c:e4:4a:4a:37:c4:43:f7:3c:ad:d9:68:97:21:62:
66:17:23:d8:3e:c9:fc:f2:a8:86:4b:15:89:d9:34:
1f:bd:8c:f2:9f:bf:9e:3e:93:a1:46:e2:20:6c:2a:
71:40:3b:96:3d:c6:0a:b8:3a:d5:29:89:be:b4:19:
2c:1a:bc:bf:11:57:3c:23:c9:75:b5:7f:d5:a0:ac:
8a:f5:62:a8:a7:bc:37:6a:18:94:9f:ba:04:79:77:
8d:65:a5:97:c9:74:d2:07:e8:d6:66:32:54:39:b2:
cd:cc:28:be:a6:b8:d9:b5:c6:ab:8a:cd:73:2d:e6:
4e:a0:79:d3:0e:3f:3b:5c:2e:e4:7b:a2:53:85:66:
b2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CB:D4:D2:8B:C6:BF:39:EE:9B:B4:1F:D5:00:B5:81:13:81:AF:D4
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS151704.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.161.0/24
178.92.73.0/24
Signature Algorithm: sha256WithRSAEncryption
01:dc:29:0d:5f:0a:b4:ff:3b:c0:15:84:93:da:2f:6b:70:b4:
88:1d:fb:f5:66:43:47:3e:09:2b:94:c0:b7:fe:3b:8a:b9:a5:
87:28:88:d0:eb:6b:72:45:c3:d0:cd:f6:53:67:9f:37:d9:f5:
87:e4:70:db:56:e4:ad:42:8f:6f:61:9e:87:16:68:26:17:a8:
a4:a0:5e:bd:18:15:ef:96:6a:90:bb:d3:05:62:ff:13:e1:57:
4e:66:af:7e:33:28:bc:21:c0:d9:c8:d1:f0:eb:f0:d7:65:5d:
65:28:c1:2b:20:cd:02:2f:58:70:f7:c3:9f:6c:19:d5:68:b8:
06:b0:bb:9f:e4:44:cb:d2:41:22:b2:0f:6f:48:1e:05:af:79:
eb:b0:a6:83:d0:bb:89:d9:7f:4e:00:a6:6e:5a:e1:36:30:67:
56:36:62:2d:7b:0c:da:b0:1f:dc:bb:21:21:d2:23:e9:e1:9f:
9f:d5:fb:da:16:66:86:64:28:0b:1d:75:a9:67:87:dc:c8:0e:
c9:ee:c2:7f:8a:e7:d3:5f:0d:10:7a:69:19:65:1d:03:9e:8a:
e2:e1:96:cc:41:57:df:3e:e6:f9:3b:0a:60:0d:5b:eb:80:7a:
80:2c:70:e1:82:79:d4:84:d9:33:b2:ad:26:10:dc:d8:e0:b5:
cb:2a:0c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:04:01 2026 by rpki-client