Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154383.roa
File:                     AS154383.roa (raw, json)
Hash identifier:          sCxOiqQMaChjfvIC75/62QffF9zFsUES34HY6CQTC+A=
Subject key identifier:   6E:61:12:9C:E6:86:91:27:6A:09:03:E4:09:C9:D0:DA:46:7B:81:6D
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       1D7FAF31F118416C5E63D81A51FF4E028D9EDC44
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154383.roa
Signing time:             Fri 29 May 2026 13:49:06 +0000
ROA not before:           Fri 29 May 2026 13:44:06 +0000
ROA not after:            Fri 28 May 2027 13:49:06 +0000
asID:                     154383
IP address blocks:        178.94.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 May 2026 15:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7f:af:31:f1:18:41:6c:5e:63:d8:1a:51:ff:4e:02:8d:9e:dc:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: May 29 13:44:06 2026 GMT
            Not After : May 28 13:49:06 2027 GMT
        Subject: CN=6E61129CE68691276A0903E409C9D0DA467B816D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:33:86:df:0a:2d:b9:1c:54:ff:44:54:7b:9b:
                    58:19:b6:d0:ec:b4:d3:01:fa:22:be:e8:a3:5b:3c:
                    e1:7c:ae:4b:9a:4c:39:63:59:08:48:c3:3c:d8:44:
                    8b:74:49:42:e1:53:cc:34:90:82:57:ba:56:45:5a:
                    c4:b6:f1:18:40:71:c8:24:e2:74:f0:74:eb:a1:de:
                    26:49:28:63:fd:af:f5:a5:79:98:38:44:5f:9e:d8:
                    67:db:5f:04:90:d0:bc:6a:db:9a:27:49:78:5b:56:
                    2c:d1:27:bf:1e:b0:97:0b:b0:79:25:9a:ed:5f:8d:
                    83:01:67:36:19:8a:a5:97:0f:f2:47:7f:fc:ae:04:
                    53:37:d5:ab:4d:b1:fd:62:62:09:bc:5b:d8:03:ef:
                    c7:49:d9:1e:a2:8f:30:eb:a6:30:f6:07:22:d0:84:
                    10:f4:c9:85:ad:f2:1c:85:67:67:d7:70:ca:d6:f5:
                    e8:fa:c0:80:26:3d:f8:ca:88:ed:9b:a2:09:80:4c:
                    fa:fb:40:9a:71:79:69:48:e9:1d:fb:44:d9:28:1f:
                    7a:d3:4a:f9:4e:04:52:b5:e5:48:47:d7:11:fd:2e:
                    55:ed:b8:3a:0e:4b:32:3a:75:6f:51:22:e2:83:54:
                    f4:9f:d1:33:2c:62:32:41:93:7c:17:5d:91:ad:59:
                    8e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:61:12:9C:E6:86:91:27:6A:09:03:E4:09:C9:D0:DA:46:7B:81:6D
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154383.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.94.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:f5:dc:61:e1:36:f6:70:f7:7b:bd:af:80:ab:c7:bd:fe:2a:
         93:06:2a:5e:24:e3:ac:6f:8e:48:02:1f:a5:ca:60:71:1b:17:
         a4:12:f3:55:04:b3:55:2b:ef:94:21:83:a9:a5:2c:86:88:62:
         4b:45:dc:29:ef:b0:ee:2e:c4:7a:b5:34:b7:3e:00:c5:67:73:
         04:68:f7:ab:00:8f:2a:6a:96:bb:bf:8c:75:c0:26:17:38:e9:
         81:f5:42:46:17:6b:7d:b3:38:9e:b8:79:dc:90:a1:56:16:3d:
         24:ef:2a:79:a9:6a:6d:8b:5c:1e:3e:7f:b5:e4:43:bf:16:70:
         de:d3:67:d9:8c:81:5a:98:92:aa:db:b7:52:2a:bb:b7:07:b2:
         6f:7b:a1:d3:ad:88:93:42:c4:1e:b1:c3:b1:51:54:8e:0b:43:
         61:2e:84:d7:81:9a:ff:3b:48:43:18:e4:8f:77:9e:94:93:4d:
         ab:18:40:9f:2e:d0:f5:80:aa:44:4e:2f:f5:90:7f:48:e1:bd:
         c1:de:71:f0:93:47:ff:04:6f:54:d7:38:72:39:0c:26:e2:f5:
         16:16:eb:2d:6b:9a:3d:1a:c6:6d:9e:e0:ca:8d:f1:4e:85:1e:
         15:78:59:3f:6e:dc:42:eb:99:fd:fa:9f:4e:40:9f:a1:ab:7d:
         93:24:d4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:26:43 2026 by rpki-client