Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154410.roa
File: AS154410.roa (raw, json)
Hash identifier: mq95Lpo8HcGwR3RGRpSsoOqhrY66BzB3bY6iiqhJm4Y=
Subject key identifier: 60:54:05:00:45:B1:4D:C8:C5:93:FA:6D:5B:C6:75:EB:DE:65:3B:C3
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6139F17FF8F9CB3826A839295BB75428F12DD9BF
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154410.roa
Signing time: Wed 09 Sep 2026 12:16:19 +0000
ROA not before: Wed 09 Sep 2026 12:11:19 +0000
ROA not after: Wed 08 Sep 2027 12:16:19 +0000
asID: 154410
IP address blocks: 178.93.117.0/24 maxlen: 24
178.95.52.0/24 maxlen: 24
178.95.53.0/24 maxlen: 24
178.95.54.0/24 maxlen: 24
178.95.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:39:f1:7f:f8:f9:cb:38:26:a8:39:29:5b:b7:54:28:f1:2d:d9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 9 12:11:19 2026 GMT
Not After : Sep 8 12:16:19 2027 GMT
Subject: CN=6054050045B14DC8C593FA6D5BC675EBDE653BC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:d2:68:7c:6b:c5:ab:e9:81:8d:dd:68:c8:
f8:03:26:39:d6:13:13:b0:4b:a4:2f:1a:dc:e6:c6:
1f:b0:69:3e:f7:33:5c:3f:5e:fd:1c:07:27:d2:6f:
dd:6b:78:7d:83:01:42:69:6f:2c:08:2a:34:2f:b2:
a3:1d:c3:c5:a6:79:bd:c1:a9:eb:3f:41:c9:f7:af:
4d:20:42:9a:bf:c9:31:86:e6:c1:d0:66:ff:36:76:
d6:75:1c:95:6b:12:a1:95:43:80:ac:d9:56:d8:08:
a0:d9:25:d1:c0:f6:42:fc:08:1b:89:01:31:a3:f7:
bf:29:a5:ff:ac:45:38:af:97:bc:5c:3c:f3:c0:bf:
70:ce:9a:1a:01:ce:94:f2:c6:15:44:dc:6a:09:2e:
13:dc:18:d0:38:89:e3:da:08:5f:c0:59:94:7f:70:
de:b6:83:ca:99:df:4e:df:8c:21:fb:fe:cb:e2:8b:
79:c9:3e:e7:f4:72:f9:d4:8a:df:ae:d3:6b:16:51:
72:db:2e:a7:4f:71:d9:2c:82:f6:65:c8:a8:4b:37:
45:ab:cf:d8:d9:01:70:e0:e1:54:b9:79:c9:2d:31:
61:fe:61:68:4f:7b:6b:58:18:4b:c5:43:c1:07:9b:
1f:92:29:9e:5a:79:46:77:84:b2:bf:1f:cf:20:ba:
b8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:54:05:00:45:B1:4D:C8:C5:93:FA:6D:5B:C6:75:EB:DE:65:3B:C3
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154410.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.93.117.0/24
178.95.52.0-178.95.54.255
178.95.56.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d9:d7:ad:75:86:80:a3:7e:bc:14:3c:0f:35:43:02:3a:1d:
f4:55:6a:bd:d6:34:c1:18:96:89:62:1e:19:f8:60:a1:30:b6:
61:42:98:7b:3c:f1:86:b3:bf:61:ca:88:1f:3c:fa:50:59:6a:
c1:df:1a:22:f1:b5:b7:d6:b0:d1:80:1d:1b:b8:3f:d9:8a:4a:
49:c7:8c:e2:70:c8:b8:49:4f:23:0a:0e:5c:78:80:0b:5c:ad:
5f:05:da:8f:02:e3:f1:55:02:22:9f:0a:55:2b:ef:13:44:3a:
42:7c:2c:2e:18:90:d1:e6:69:72:09:91:9f:a7:d2:cc:92:d5:
71:6c:85:8f:7c:65:e7:92:b7:58:0e:5e:2f:25:9a:2c:f9:53:
f7:6e:c1:10:21:7d:d0:18:e2:39:c5:17:26:4c:d8:79:4f:74:
42:ac:87:3a:8b:9e:f2:f9:37:93:bd:db:a0:85:ad:ae:08:fd:
05:ff:60:54:82:3e:b4:84:04:f1:96:f2:37:25:93:9c:2d:66:
38:55:e7:f8:dd:12:0a:ca:06:a3:ef:32:bd:b7:e4:88:0e:03:
ab:b4:dd:af:91:b7:71:aa:2e:61:53:e3:84:6d:6d:f9:ed:f1:
1a:d6:84:cb:b9:f8:aa:d2:29:25:a6:1b:93:84:65:b5:12:f4:
df:d1:2c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:51:56 2026 by rpki-client