Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154346.roa
File: AS154346.roa (raw, json)
Hash identifier: KS3m5wrLeESQVrzaYVDfdRnUm2GYwMSMdKcE+XtycHQ=
Subject key identifier: 06:F0:3B:9F:8E:82:72:B1:BB:39:65:BD:DB:72:74:4A:92:48:D3:CD
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 57EC59B9E31E17DF521DDCD1965EBEEB86122A1F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154346.roa
Signing time: Thu 16 Apr 2026 07:55:20 +0000
ROA not before: Thu 16 Apr 2026 07:50:20 +0000
ROA not after: Thu 15 Apr 2027 07:55:20 +0000
asID: 154346
IP address blocks: 178.94.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ec:59:b9:e3:1e:17:df:52:1d:dc:d1:96:5e:be:eb:86:12:2a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 16 07:50:20 2026 GMT
Not After : Apr 15 07:55:20 2027 GMT
Subject: CN=06F03B9F8E8272B1BB3965BDDB72744A9248D3CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:81:f0:43:2d:86:40:78:b5:17:58:20:1e:54:
35:b8:b2:a6:16:22:76:fa:a6:5c:99:d4:4a:c3:33:
4e:95:dd:26:9f:e2:15:e5:a6:b5:75:5e:a8:0a:ad:
60:f2:47:34:94:5e:e7:61:48:bc:20:9f:9e:11:b6:
a5:ec:f7:fd:67:14:88:15:2c:55:2f:0f:50:0b:7b:
4e:09:27:9b:0f:be:8c:58:65:80:cd:7d:0f:c0:50:
ff:2c:32:bb:00:03:0e:c9:73:59:03:65:eb:c7:cc:
36:f9:a6:97:84:86:3b:ab:95:5e:ce:17:b0:a8:7c:
5f:f2:96:05:b2:a7:54:a9:5d:e9:d0:b0:ba:d7:00:
2c:87:a6:a6:60:c6:d5:96:f3:f9:10:6e:42:91:2a:
47:9e:41:d4:d0:d7:3f:0c:1a:e1:04:ff:7c:bb:5a:
99:0c:ce:d4:2f:86:72:51:21:76:4e:83:1c:bf:c2:
ff:10:55:97:0f:80:9f:09:87:fa:4b:d9:31:5e:78:
a6:6f:85:1f:84:90:16:c5:84:fc:dc:74:71:a9:b6:
2d:7d:b7:de:12:39:55:c3:a2:61:34:4b:ab:ec:2a:
07:2e:ac:eb:bb:c7:ed:0a:56:db:05:5b:64:ac:a4:
49:81:c7:89:a4:75:4a:db:47:a1:ba:0d:d9:d7:50:
9a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F0:3B:9F:8E:82:72:B1:BB:39:65:BD:DB:72:74:4A:92:48:D3:CD
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154346.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.94.10.0/24
Signature Algorithm: sha256WithRSAEncryption
42:3f:3d:e5:13:a8:d3:7d:37:53:ae:1a:10:bd:e8:d0:69:ce:
db:64:54:27:ab:65:a4:f5:07:03:97:3b:42:5a:a4:5e:6a:a5:
c0:ed:60:50:6a:af:bf:b7:24:0e:b4:a4:c8:e6:3f:11:54:c2:
fa:84:5b:d6:40:12:7e:db:3f:26:3e:d2:4b:d0:3e:40:ca:07:
84:0f:bd:96:c2:89:d5:b5:c1:2c:25:70:b2:69:17:f2:b0:70:
ed:8a:c3:62:cb:e2:f2:f9:47:e9:36:26:0e:50:24:d9:21:17:
0f:48:3c:3c:25:9e:cd:3c:fb:49:67:e9:9f:43:d5:88:d5:5c:
41:33:01:4c:38:21:fe:33:6b:fb:5f:56:48:7b:eb:06:ed:82:
f5:dd:a3:fb:29:a5:02:88:26:ea:bf:d7:e7:fa:5c:00:63:ff:
5e:89:ed:a4:03:7a:fa:5b:e8:4c:0e:52:d4:4e:62:90:76:ab:
bd:69:f4:cc:80:f5:bc:51:4f:b8:c9:3a:30:36:dc:53:17:3c:
5b:c3:8f:f9:25:a4:7c:f0:fd:bd:1d:33:7b:8e:4d:26:3f:a0:
97:09:6f:68:d4:49:1b:ca:44:ec:30:a6:f7:bd:10:c4:21:ca:
0b:a2:3c:17:5a:07:49:7e:90:89:ae:ba:35:75:af:96:8a:d8:
06:e6:18:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:25:24 2026 by rpki-client