Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154408.roa
File: AS154408.roa (raw, json)
Hash identifier: N/AdURXcPB/DEfAvnEDSp0yUQtFAO34H7STSeqG4QHs=
Subject key identifier: A9:02:85:DC:CA:C3:10:78:52:0C:0E:73:6D:E7:DD:08:74:E6:17:29
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 61F4A8F1D85E7B483D5635963C57F48FC60DBDEC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154408.roa
Signing time: Thu 23 Jul 2026 13:15:26 +0000
ROA not before: Thu 23 Jul 2026 13:10:26 +0000
ROA not after: Thu 22 Jul 2027 13:15:26 +0000
asID: 154408
IP address blocks: 178.92.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:f4:a8:f1:d8:5e:7b:48:3d:56:35:96:3c:57:f4:8f:c6:0d:bd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 23 13:10:26 2026 GMT
Not After : Jul 22 13:15:26 2027 GMT
Subject: CN=A90285DCCAC31078520C0E736DE7DD0874E61729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:d9:2d:f0:f6:40:88:bc:c6:ba:55:2a:a8:
68:88:f3:a6:7b:be:b1:33:95:76:40:c6:ec:d0:ab:
6c:3f:90:70:19:d9:09:8c:52:a4:67:4e:a0:5d:b3:
6c:ac:f4:d6:0e:93:83:c1:3d:9a:76:63:ee:9e:9d:
07:a0:f0:c8:30:37:a8:8c:92:58:fe:10:55:d9:5c:
f2:cc:c9:9b:c1:f3:59:f2:72:7f:50:a1:39:1f:d1:
8f:80:dc:66:22:df:4d:75:5f:1c:e4:a1:5a:30:96:
bd:f2:d8:95:19:c7:c4:d6:db:73:b1:5b:c2:7c:54:
61:4e:64:b9:5a:73:cc:93:2e:e7:e5:13:87:cb:51:
be:0d:9d:95:71:74:15:0e:54:b2:04:64:d7:bc:81:
21:e5:6e:fa:87:1c:52:e7:52:6e:44:6e:a4:5c:9a:
cd:77:40:5d:8e:74:27:9a:08:e4:d7:f0:c6:f9:fb:
a4:01:95:12:34:62:cb:29:43:ab:ef:8d:c0:8c:69:
5d:85:bd:7a:f5:55:46:f5:2d:dd:22:71:6a:3f:87:
fa:1f:50:58:5d:aa:62:e3:20:06:bd:94:f9:92:ee:
4c:a4:5f:90:0a:aa:ad:a6:c6:63:73:ac:3b:a8:6e:
6e:31:72:12:53:70:32:8c:8f:ab:00:f6:49:8c:6c:
2b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:02:85:DC:CA:C3:10:78:52:0C:0E:73:6D:E7:DD:08:74:E6:17:29
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154408.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.121.0/24
Signature Algorithm: sha256WithRSAEncryption
19:1d:5a:24:c7:29:7b:56:28:45:4d:50:c3:57:27:ab:54:2e:
33:20:02:d4:c5:11:2b:9e:ba:4c:04:8e:5e:84:40:3a:a7:4d:
e8:67:05:5c:af:55:69:d0:ab:7f:bd:8d:c3:bc:7b:61:ce:4a:
d4:da:c9:87:99:4d:5b:d4:32:69:1d:44:8e:56:08:c3:fd:9e:
eb:f8:d2:e6:ff:87:53:4c:52:87:8b:3a:fa:e3:16:6d:0c:cf:
c2:9a:ee:82:24:24:a0:ab:2d:b1:fc:d1:b8:c5:d8:d7:1c:d7:
6e:09:ac:3b:d3:3c:f1:06:a9:f8:c2:d0:22:98:4c:2d:13:7e:
b5:5a:14:fb:ba:04:c1:be:a7:36:4a:bf:e1:d3:1f:9a:68:cd:
34:4c:ed:5b:b9:00:7d:0b:6f:b3:8d:9c:c5:b5:4c:8b:35:2c:
63:63:9a:22:92:0d:c2:32:ca:20:c4:fc:fd:ad:8d:f8:eb:8a:
0e:27:e7:c3:18:5b:48:7e:48:d1:09:8c:c1:a3:f5:32:f6:49:
ae:0b:fe:35:36:de:39:bf:80:dc:8a:18:68:46:e5:be:3d:37:
dc:1b:f9:f1:1f:00:c0:af:b9:d0:ca:ad:5e:47:e2:40:ae:3a:
e3:97:95:62:17:09:fb:21:a4:04:4c:57:80:d4:15:fa:68:e8:
0d:e1:67:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:59 2026 by rpki-client