Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154261.roa
File: AS154261.roa (raw, json)
Hash identifier: 1n9rSxqHdMtC9zttdlufkXLUJ8nHMXWEK+rssiP2S0o=
Subject key identifier: 3A:E2:AF:8F:88:1C:46:7B:7E:22:13:3A:B4:0B:2B:1E:CE:44:96:D4
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 543FADE4303044345EE6D0919FF3A5C33B5C68FF
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154261.roa
Signing time: Wed 23 Sep 2026 12:59:37 +0000
ROA not before: Wed 23 Sep 2026 12:54:37 +0000
ROA not after: Wed 22 Sep 2027 12:59:37 +0000
asID: 154261
IP address blocks: 178.93.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:3f:ad:e4:30:30:44:34:5e:e6:d0:91:9f:f3:a5:c3:3b:5c:68:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 23 12:54:37 2026 GMT
Not After : Sep 22 12:59:37 2027 GMT
Subject: CN=3AE2AF8F881C467B7E22133AB40B2B1ECE4496D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:ad:c4:c2:6a:5f:e0:02:e5:47:08:89:d6:
5d:14:66:59:66:a2:99:36:85:d9:85:d0:d1:6d:1f:
91:ca:28:08:29:73:62:7c:83:29:a0:0f:1a:32:db:
35:35:fc:48:ca:ad:53:7a:94:3c:d8:03:ab:30:1a:
be:72:9f:7d:8f:f3:40:ac:22:90:bc:d5:16:a8:2d:
8d:09:e4:3d:c7:90:ba:a7:f4:b5:57:8a:4e:6f:b5:
bc:82:f6:84:d0:b2:1e:d3:57:bf:95:05:f5:4e:28:
c0:f0:c6:06:45:50:be:31:a0:11:66:47:28:d4:0c:
11:49:4d:dc:1f:ca:81:8d:5d:19:78:f9:96:46:c0:
c0:1a:97:a2:73:a6:03:fb:7b:34:a3:5b:a1:24:bb:
af:43:f1:21:d4:6a:a3:89:2e:03:1f:c3:2b:13:2e:
32:8c:01:77:ac:ab:40:13:4e:5a:e0:6b:e0:9c:6f:
ac:cc:af:df:59:c2:7a:80:f2:88:58:e6:96:6c:7b:
7b:01:7f:22:9d:d0:6a:3a:2e:5a:df:16:57:3b:57:
ab:fa:48:a7:fb:f2:79:47:a3:51:ba:b5:0c:b4:7f:
dc:d9:93:34:ac:22:95:55:fa:c0:b2:84:f0:57:c6:
50:06:0a:33:95:6c:fe:24:14:95:b7:c9:1a:2a:ba:
29:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E2:AF:8F:88:1C:46:7B:7E:22:13:3A:B4:0B:2B:1E:CE:44:96:D4
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154261.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.93.164.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:dc:00:e2:65:54:7c:e4:bc:af:f4:03:7b:8a:b2:0d:1d:17:
bc:a2:07:96:d2:ab:e4:7c:de:9d:35:a6:cf:ea:2b:20:b5:62:
76:d2:a4:43:48:59:fa:fe:e7:28:64:11:79:19:16:ec:67:7f:
c7:00:c4:a8:49:03:03:75:01:3a:58:55:83:f9:50:7f:55:48:
51:bc:99:a2:c2:38:70:63:13:dc:fc:23:be:fa:a5:fd:06:36:
7e:87:e0:14:2e:27:fa:54:34:2f:7b:8b:67:11:d3:35:01:4b:
ba:51:d4:73:6b:1d:25:03:3a:3b:2e:7a:6b:66:2f:a7:0b:96:
30:5f:56:69:7a:87:7b:76:7e:0a:1e:f1:ae:ba:90:79:0a:7e:
b0:0b:b4:15:12:aa:5c:f8:0d:80:ba:38:21:3e:29:35:fd:6c:
82:24:02:58:7f:40:54:2f:61:43:21:e9:a9:2f:8b:3e:e4:a0:
69:be:4c:78:a7:8a:84:cc:ab:ef:f4:c1:93:76:f4:03:97:fe:
12:14:3a:9a:b8:45:ce:05:19:85:11:d6:a8:54:7c:98:d0:39:
6f:e4:55:05:cf:eb:9e:64:a7:b2:dc:c6:55:fd:24:73:67:0b:
97:1b:39:b1:ac:cf:de:f5:bc:fe:bb:4b:1d:45:80:86:59:bf:
36:14:76:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:23:45 2026 by rpki-client