Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154408.roa
File: AS154408.roa (raw, json)
Hash identifier: BWxZK1az6koLAJZpUJTWaONTH/ul+2jUcOSlK9x2ZHc=
Subject key identifier: D3:BC:97:EB:BC:6B:5A:E9:FD:6A:11:DD:D5:65:B4:88:6A:5F:C4:70
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 56C2369D7ABD1235907AB61C796BAA85DC6A0D5D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154408.roa
Signing time: Wed 14 Oct 2026 12:05:33 +0000
ROA not before: Wed 14 Oct 2026 12:00:33 +0000
ROA not after: Wed 13 Oct 2027 12:05:33 +0000
asID: 154408
IP address blocks: 178.94.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:c2:36:9d:7a:bd:12:35:90:7a:b6:1c:79:6b:aa:85:dc:6a:0d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 14 12:00:33 2026 GMT
Not After : Oct 13 12:05:33 2027 GMT
Subject: CN=D3BC97EBBC6B5AE9FD6A11DDD565B4886A5FC470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ba:a2:d7:08:a3:83:c1:ca:17:f2:74:99:dd:
75:27:6e:05:27:b0:cc:ea:2b:d6:76:32:b6:15:78:
13:62:47:7a:83:4c:47:1b:13:d0:f2:f3:b5:dd:04:
28:28:e7:c8:73:a9:f0:a4:59:24:92:1a:31:e2:97:
ec:7c:26:98:4f:98:dc:f0:ff:a1:7c:86:b6:c8:d9:
e7:c5:ae:8f:d0:e7:ed:e3:66:e9:f3:12:f8:81:43:
1b:b1:96:b8:6c:ad:62:28:f1:2c:7a:84:82:68:dd:
b4:fe:18:93:2e:a9:67:2b:0f:74:82:4e:5d:39:2d:
2c:4c:e1:3b:52:75:1d:b8:74:c1:b6:50:91:e9:28:
2e:2d:29:8d:fe:58:1e:e4:d3:ae:7d:54:f7:fc:38:
73:33:24:4a:ec:78:7a:1c:25:74:9e:d7:6b:87:d1:
f4:88:4e:9f:04:59:62:91:1b:81:94:91:db:09:60:
c4:02:16:67:a3:63:5d:ec:0d:60:3a:08:d1:2c:07:
c6:c4:68:a5:ae:25:c5:f4:78:e6:a4:7e:57:12:48:
1e:ca:9f:f0:41:34:2c:6a:5a:53:11:ff:2e:ce:b4:
31:93:07:de:cc:fc:74:39:9d:14:89:8d:b3:2d:64:
3c:e7:7b:f6:51:d1:ac:97:a0:00:cf:75:b0:35:c9:
a2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BC:97:EB:BC:6B:5A:E9:FD:6A:11:DD:D5:65:B4:88:6A:5F:C4:70
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154408.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.94.183.0/24
Signature Algorithm: sha256WithRSAEncryption
80:40:8b:fd:db:04:06:9b:55:c0:4a:78:8c:ae:8d:ab:e8:87:
2e:d5:ea:28:08:3b:ef:eb:4e:f7:f3:2e:aa:c5:b1:b9:03:0b:
58:a6:19:dc:24:e9:85:a6:9a:f4:b1:10:4f:42:43:4b:3c:1d:
91:bc:a4:90:d8:39:69:76:03:c5:94:d2:27:42:76:8f:ae:07:
ee:11:a3:a7:70:4c:e3:e6:d6:0e:a2:88:b4:c1:ca:d7:19:68:
5d:62:52:4d:02:f6:7c:7c:d7:72:10:1b:69:b7:63:1f:40:fa:
bb:e8:73:1c:cd:24:81:2a:fa:5f:60:9b:59:5d:9b:a7:57:36:
bb:5c:73:76:b7:07:ff:6a:d3:c9:07:7f:9b:17:45:96:e1:96:
17:f6:ba:46:73:57:59:08:8e:86:68:ba:ce:d5:99:06:87:f5:
69:45:fe:0c:5a:29:ea:eb:ff:1a:29:96:63:6a:a0:96:ab:1b:
63:1f:4a:60:f9:ab:18:9c:be:29:38:90:e5:fb:71:07:4a:49:
6e:77:5e:52:e9:3e:d2:41:62:db:e5:15:43:08:d6:f8:df:ca:
c2:0d:a9:f4:98:b9:83:ce:6b:d8:65:77:44:71:ff:83:08:2e:
06:e7:59:ab:bc:11:e7:77:ed:e6:c2:94:9c:43:23:7e:c4:2e:
5c:a1:b7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:59:53 2026 by rpki-client