Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS153928.roa
File: AS153928.roa (raw, json)
Hash identifier: FodY/UUQgv2CqVv4m63HTkF+0ggkRdPwEQAntxwUrNg=
Subject key identifier: 5E:14:7B:A8:AA:BB:C4:EB:9A:C8:BF:7C:47:E2:24:07:3E:14:0A:64
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0E461618890040A447FD58339B7BFC3E2EC08664
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS153928.roa
Signing time: Fri 22 May 2026 08:19:44 +0000
ROA not before: Fri 22 May 2026 08:14:44 +0000
ROA not after: Fri 21 May 2027 08:19:44 +0000
asID: 153928
IP address blocks: 178.95.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 17:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:46:16:18:89:00:40:a4:47:fd:58:33:9b:7b:fc:3e:2e:c0:86:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 22 08:14:44 2026 GMT
Not After : May 21 08:19:44 2027 GMT
Subject: CN=5E147BA8AABBC4EB9AC8BF7C47E224073E140A64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:f4:59:1e:41:ea:60:d2:8a:6e:92:e7:0d:
9d:95:c9:ef:37:4e:69:19:da:4c:84:61:af:33:0d:
cd:5b:c2:0b:b5:fb:18:d5:42:0f:f3:eb:96:12:dd:
86:1b:50:c4:12:52:3d:fb:90:78:f4:de:8a:f6:cd:
ed:33:14:8d:6e:da:ee:77:32:d2:b0:f6:d4:98:e2:
cd:34:64:e3:9c:ee:36:1e:31:1e:2e:e4:28:c4:90:
4f:ed:4c:10:d6:b8:7e:d6:38:11:b1:3d:92:2a:ba:
04:f8:c8:86:d3:0f:ad:ef:a2:af:69:70:86:ea:69:
1a:87:4a:cc:26:a6:08:8c:d2:f5:41:39:7b:58:d5:
0d:d0:f8:64:6b:84:91:74:b4:01:5b:0c:80:f7:78:
84:78:e4:52:03:32:9b:2e:17:93:df:27:8f:9b:4d:
b8:aa:d1:f0:1a:62:8d:3e:8c:2c:41:7c:03:b9:6c:
f7:56:20:45:b6:73:f4:7a:7c:e9:17:06:83:77:10:
65:84:72:24:b8:d3:89:a5:ff:ac:6f:7c:48:e4:19:
e1:77:1e:19:42:11:10:34:60:7e:a6:34:c9:d3:91:
15:35:66:df:50:ee:fc:3b:c7:32:d5:4e:bc:7f:d5:
92:72:57:93:22:e7:e5:4c:6d:e7:28:07:eb:ab:06:
23:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:14:7B:A8:AA:BB:C4:EB:9A:C8:BF:7C:47:E2:24:07:3E:14:0A:64
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS153928.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.10.0/24
Signature Algorithm: sha256WithRSAEncryption
40:21:0f:b4:f5:c5:16:93:b5:27:40:83:e0:57:ae:db:0a:4c:
f4:73:64:fd:b3:c6:8a:ff:95:a1:3e:9a:73:18:4d:02:b5:68:
54:9a:dd:90:26:f6:3a:55:f2:5b:01:28:f2:5b:d7:4f:8a:da:
f6:ef:cb:2a:ae:99:24:8f:7c:cb:b9:5f:76:6b:d3:e9:b6:10:
5f:5b:2c:87:78:58:04:e7:6a:e5:da:c0:c8:27:54:85:ba:16:
48:86:e6:53:6b:5d:82:44:0b:dc:43:1a:c7:c4:61:0a:60:5c:
b2:3e:e0:13:6f:85:2b:5a:9c:97:fd:96:2a:1c:77:5a:fc:2a:
2f:d9:c6:da:c1:27:a0:7d:9c:ad:31:af:14:8f:7b:b8:9e:e5:
1f:d8:01:29:2b:17:7d:42:f6:0b:fc:25:39:cf:49:21:06:4d:
02:ec:1e:88:45:e1:c3:28:4d:26:b9:b3:6b:dc:2a:69:33:8f:
81:c6:f7:ff:ab:a0:17:06:b8:5c:01:5c:56:7c:3e:7f:98:4a:
84:2d:ae:aa:5c:b5:47:9a:64:59:e0:f4:e8:71:9f:41:8c:d1:
48:87:30:71:52:24:8a:48:42:12:17:b7:d1:42:1b:75:93:b8:
e9:0b:e7:7c:79:8c:50:5a:05:77:ca:7c:a8:3f:68:11:8b:d0:
0a:2b:79:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:45:06 2026 by rpki-client