Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS153671.roa
File: AS153671.roa (raw, json)
Hash identifier: jczH2ykCC9y6GquASCcH6ElO+47+5s7EKMOYqlEptgQ=
Subject key identifier: 32:FF:4D:EB:DA:4A:1D:20:A2:97:F8:80:DB:10:1E:72:32:72:22:3D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 54F2BAEA5915D68F7D64A162C57685974F2FACF8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS153671.roa
Signing time: Wed 22 Apr 2026 09:12:10 +0000
ROA not before: Wed 22 Apr 2026 09:07:10 +0000
ROA not after: Wed 21 Apr 2027 09:12:10 +0000
asID: 153671
IP address blocks: 46.203.125.0/24 maxlen: 24
92.113.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:f2:ba:ea:59:15:d6:8f:7d:64:a1:62:c5:76:85:97:4f:2f:ac:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 22 09:07:10 2026 GMT
Not After : Apr 21 09:12:10 2027 GMT
Subject: CN=32FF4DEBDA4A1D20A297F880DB101E723272223D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:b3:e9:24:9a:bb:fa:fc:c5:db:c5:8d:50:
47:da:c3:dc:0b:7a:12:44:33:c0:49:39:21:7d:d8:
85:9d:b7:da:0e:7c:3f:1c:64:18:e9:fa:21:38:b4:
84:af:f2:34:28:a4:06:84:87:dc:81:2a:0a:04:48:
e2:e5:a9:81:b5:a1:8a:94:d5:ee:91:45:ac:21:67:
c8:30:fb:0b:7c:c8:82:dd:90:70:9b:bf:e0:51:28:
b5:0b:e8:e7:06:7a:8b:e9:47:b8:6a:07:24:fc:02:
d2:71:61:7a:49:8d:0b:3a:b0:94:d5:e0:0e:d6:ef:
fb:a0:ba:ae:5d:49:48:76:04:f4:e9:cb:ee:70:37:
b4:84:9d:b1:93:41:b9:41:9d:74:b5:2c:ef:80:49:
65:ab:55:d9:54:2e:f9:f8:20:20:03:c9:ea:d8:70:
49:c3:37:4c:09:ca:ae:5a:7b:33:c1:0a:66:b6:a6:
50:57:a6:bb:21:5a:7e:70:13:c8:18:13:5a:a8:8b:
cb:bc:f1:5d:58:95:62:50:38:fb:95:fd:fd:50:d6:
68:6a:3b:b9:bd:5a:8d:8f:0a:c3:18:93:7f:93:ec:
88:ed:5d:44:5f:70:77:92:dc:41:f3:d1:b8:04:26:
bd:2a:35:05:37:dc:24:36:34:e8:2e:1d:32:dd:1c:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FF:4D:EB:DA:4A:1D:20:A2:97:F8:80:DB:10:1E:72:32:72:22:3D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS153671.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.125.0/24
92.113.14.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a0:ff:7a:35:12:1e:68:f4:3d:bd:70:09:f1:91:de:5b:25:
ad:02:b8:05:60:62:5f:ac:4c:72:83:8a:95:a9:d3:30:19:5e:
d0:c3:fb:2f:aa:ca:39:3f:09:6d:c9:3a:dd:e3:d3:43:c5:13:
16:32:5f:a2:9a:03:c8:89:aa:b2:e6:09:81:98:86:d0:91:7b:
98:7b:f7:ce:ef:df:de:1e:65:37:5a:9c:09:13:a2:bc:af:9f:
2a:37:b7:d3:a7:50:17:5e:00:f8:9d:bd:85:d2:09:46:ba:2b:
55:d0:f2:e8:e5:26:a6:20:e5:93:a0:f5:fd:3a:c4:79:76:00:
1a:b5:bf:20:26:a8:06:e3:ed:59:dd:e7:d8:d6:07:ac:1c:7f:
9c:fb:70:e2:c6:28:44:fb:e9:1c:75:38:1a:38:aa:c8:1e:c7:
a8:48:41:7f:3f:47:f9:f5:57:90:3a:d2:66:7a:03:55:58:a6:
5b:37:5b:5e:09:c6:8a:fb:0f:d0:e5:a3:52:f3:de:f6:32:9a:
5f:69:da:d3:e4:94:80:99:0e:0f:58:94:2f:ad:4a:e2:1b:73:
7e:96:ea:12:38:d9:da:f5:b2:1e:d0:72:21:e3:4f:fb:74:59:
96:37:ef:49:82:2d:76:bb:1a:b8:7c:d8:92:4b:13:57:5d:6c:
fc:51:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 13:04:38 2026 by rpki-client