Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154612.roa
File: AS154612.roa (raw, json)
Hash identifier: AsnK7jRHAeMhfsjIQdIcW/7I83raF+8IayMPIzhd3JE=
Subject key identifier: 10:C9:CC:90:1A:D3:51:B3:7D:1E:8E:17:41:74:F8:84:BC:64:E3:E5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 40AA76EB5DFC9DEE55CB151D51BE655B57D822FE
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154612.roa
Signing time: Fri 12 Jun 2026 07:21:09 +0000
ROA not before: Fri 12 Jun 2026 07:16:09 +0000
ROA not after: Fri 11 Jun 2027 07:21:09 +0000
asID: 154612
IP address blocks: 95.135.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:aa:76:eb:5d:fc:9d:ee:55:cb:15:1d:51:be:65:5b:57:d8:22:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 12 07:16:09 2026 GMT
Not After : Jun 11 07:21:09 2027 GMT
Subject: CN=10C9CC901AD351B37D1E8E174174F884BC64E3E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:e5:9c:dd:5b:a1:a8:75:b8:0e:b0:7e:1a:
4e:fa:4a:84:7f:c1:88:97:08:9d:77:96:52:90:c6:
26:38:24:4b:8b:8e:02:a9:7e:d5:64:a2:f3:cf:7e:
b8:45:48:06:6f:d8:de:99:26:eb:84:ef:bc:cb:f7:
81:bb:72:58:03:96:18:dc:ec:46:4d:50:e8:1e:cb:
c5:47:5b:b7:c4:63:35:53:99:5a:ea:8e:55:90:d7:
d8:6f:ec:2a:87:0e:be:12:96:2a:b3:d5:7c:b2:69:
7c:bb:9d:9e:dc:a0:29:99:5e:0f:82:4d:0f:09:a4:
79:13:5e:dc:3b:8f:fe:98:91:11:22:7b:43:67:1c:
a1:d4:5e:cc:ab:91:a1:a0:e6:0c:d8:5a:33:9e:55:
46:fe:05:0e:d4:17:81:80:74:cd:ae:3d:e1:1b:f7:
89:7a:b3:b9:71:03:84:c7:6e:f2:e4:9e:bf:52:f4:
1e:96:5e:5f:1c:b7:9b:de:ba:d6:8e:e5:85:a3:c4:
c7:17:41:15:97:96:f9:7b:98:41:d2:11:61:2d:b2:
e1:16:22:ff:4f:a9:4e:bb:a0:1d:f8:e6:0f:3f:67:
77:be:3c:57:34:13:c3:eb:a1:c1:6e:c1:43:43:4b:
99:01:cd:6c:30:7b:18:56:46:dc:60:a4:d9:59:fd:
bb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C9:CC:90:1A:D3:51:B3:7D:1E:8E:17:41:74:F8:84:BC:64:E3:E5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154612.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.193.0/24
Signature Algorithm: sha256WithRSAEncryption
44:38:bd:b9:c2:6e:56:a4:23:11:24:98:e3:a1:d8:b7:09:db:
09:6b:d1:c9:fc:ef:f5:f8:10:3d:d9:6f:c4:c4:f2:13:2d:52:
00:9a:b9:4e:57:d9:d5:82:86:16:63:58:94:e0:d9:a8:55:59:
2c:cb:fd:e0:a0:43:b8:74:59:e4:7e:71:91:d0:b2:c4:a5:1f:
3d:c8:e3:0b:f3:ec:63:d6:ad:60:23:4a:83:ab:69:42:b0:d7:
85:95:47:39:99:d5:e2:06:fc:89:84:a6:ec:24:ed:09:00:52:
ca:2b:47:0c:b3:5f:e6:31:84:99:e6:60:8c:34:5a:17:1a:28:
6d:f5:f7:91:4a:e2:c5:80:ed:f6:8b:f2:d8:4e:60:a3:1c:2d:
26:5f:51:68:ca:56:2e:5d:2e:7e:30:61:10:b5:24:b7:cb:a7:
21:98:6e:ee:56:1a:04:15:1d:ff:3a:13:07:f5:98:d4:3c:11:
90:18:8c:63:15:9b:9c:e2:3e:7b:e8:f4:f9:39:b1:75:f4:83:
81:fb:09:5f:c5:72:ae:99:11:07:0a:de:9b:d6:95:8f:5e:8e:
a1:bf:fb:92:45:73:90:b8:52:45:63:9d:c5:92:a6:b9:13:55:
85:10:a5:e3:e9:93:7f:b3:ba:39:a3:c6:5f:d4:e8:0d:d6:cd:
25:08:f4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 00:05:19 2026 by rpki-client