Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS153568.roa
File: AS153568.roa (raw, json)
Hash identifier: iAX8L+cjiMgmy/cQwiZZul99nT3mRndI+ZDqJA9CeGA=
Subject key identifier: C8:38:79:33:16:07:E5:F3:C1:6A:C6:DB:14:A8:72:49:10:9C:50:9E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0EAF90E0588CB0CC197BD3A3B42F08E9EA4DBFEE
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS153568.roa
Signing time: Fri 22 May 2026 02:06:16 +0000
ROA not before: Fri 22 May 2026 02:01:16 +0000
ROA not after: Fri 21 May 2027 02:06:16 +0000
asID: 153568
IP address blocks: 46.202.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:af:90:e0:58:8c:b0:cc:19:7b:d3:a3:b4:2f:08:e9:ea:4d:bf:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 22 02:01:16 2026 GMT
Not After : May 21 02:06:16 2027 GMT
Subject: CN=C83879331607E5F3C16AC6DB14A87249109C509E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:46:52:58:96:70:b1:c0:12:a2:77:e0:de:1d:
ab:8e:50:2f:fe:7f:5e:f1:de:44:ff:bd:ff:d3:d2:
5e:ca:94:73:e0:3e:c6:7e:77:78:4c:78:c1:b4:29:
ee:50:1a:af:2c:6b:3c:18:15:33:be:86:c3:16:3b:
fc:cc:c1:f5:6f:b9:6e:3f:0b:93:65:9c:71:f4:98:
a1:b9:49:67:f9:af:31:d5:fc:f3:5d:d0:6b:1e:33:
d3:9e:41:33:35:d5:1e:ab:62:8b:e9:e3:8e:62:41:
d0:1f:b4:6a:a6:76:c4:a8:44:4e:10:f1:86:fb:1d:
ea:79:63:db:a3:f0:0f:d4:89:43:25:fd:51:ed:ea:
39:e5:a5:a2:6a:71:04:e2:d1:24:84:e2:dd:1d:b4:
7e:d6:97:e2:fe:27:9e:4e:36:0f:49:70:13:7e:5d:
ba:2a:8f:1c:b4:b4:ff:4e:6c:0c:67:78:af:ba:e8:
8f:62:34:20:84:a7:b5:00:15:ab:cc:30:bc:96:1d:
ef:05:98:b9:41:c3:3d:05:70:fb:62:35:ec:fa:43:
36:29:67:1c:c0:22:15:46:65:05:9a:2b:19:15:90:
55:fc:1e:bb:b1:13:21:a2:d1:94:36:67:d2:71:26:
42:31:fb:81:fd:36:2c:1d:ca:03:77:0c:5b:05:bf:
fd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:38:79:33:16:07:E5:F3:C1:6A:C6:DB:14:A8:72:49:10:9C:50:9E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS153568.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.61.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:31:7b:de:3e:3f:48:54:ec:0e:99:b4:ec:95:e1:b2:99:0e:
99:fc:8b:23:0c:33:98:62:ff:79:37:30:29:0c:8a:0e:48:6a:
d5:ad:f5:31:e5:af:2a:91:c3:73:28:14:d8:3b:ce:57:91:f2:
84:b8:c6:a3:93:b0:22:79:96:a5:9f:ad:19:31:70:8f:f2:8d:
bb:5a:10:a7:19:ab:18:d0:25:32:93:d9:88:9a:13:65:15:2c:
5c:d4:a5:dc:06:e9:ad:c5:5f:a3:a2:cb:28:d7:53:70:00:2d:
34:1b:63:04:3c:4d:f1:a2:f4:0d:aa:c0:50:13:b7:c5:01:6b:
48:c9:02:f9:a8:33:0d:19:b2:6d:3d:ef:f0:4b:5c:8b:2a:c9:
82:0a:04:4b:35:f8:ee:d0:85:6e:9a:e0:a8:a0:87:82:4e:5f:
63:4b:89:c4:1a:0f:0c:18:f6:01:56:80:d0:29:2b:63:f6:97:
8e:d1:f6:b3:49:37:a5:e4:f8:59:4d:26:b3:c8:a2:09:f0:27:
f5:03:72:0c:67:4b:6c:56:b0:bb:3c:1f:04:95:9f:38:be:36:
a5:52:63:39:bc:e6:c9:a3:87:1c:a2:a2:50:85:5c:60:bc:16:
07:fe:d3:35:ba:01:bd:f5:f9:c8:48:07:1c:d8:38:7d:d3:a6:
1d:4b:6f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 07:13:11 2026 by rpki-client