Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154642.roa
File: AS154642.roa (raw, json)
Hash identifier: jY6G+arv2m8aD+nYw9Cowbwb27TKd9h/HOii/K+lca4=
Subject key identifier: CE:4C:89:C5:57:FB:6E:6D:2C:47:42:EC:3A:91:5B:BA:7C:63:2C:4E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7E1E44AEDCEAC28A9E1D1E1D2C3CDADBA8808AEB
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154642.roa
Signing time: Thu 11 Jun 2026 12:06:17 +0000
ROA not before: Thu 11 Jun 2026 12:01:17 +0000
ROA not after: Thu 10 Jun 2027 12:06:17 +0000
asID: 154642
IP address blocks: 46.203.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:1e:44:ae:dc:ea:c2:8a:9e:1d:1e:1d:2c:3c:da:db:a8:80:8a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 11 12:01:17 2026 GMT
Not After : Jun 10 12:06:17 2027 GMT
Subject: CN=CE4C89C557FB6E6D2C4742EC3A915BBA7C632C4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9f:6e:ec:88:c1:19:e9:10:a1:6d:a2:06:e2:
d2:23:fd:e4:e5:76:9e:2c:c9:49:ce:da:66:8d:5c:
7a:34:1b:8f:e9:86:0a:36:0e:1d:ad:46:b3:4b:a3:
75:4b:61:20:59:6d:a8:7e:aa:a4:cf:55:fd:71:24:
0b:9a:94:9e:1f:7b:3f:38:24:48:b9:42:21:9a:c1:
5f:49:a3:18:23:89:1d:be:39:63:c5:44:aa:98:84:
eb:81:08:b1:d9:1c:60:ca:be:d3:a0:13:83:df:19:
da:59:8a:c8:37:64:16:45:86:5f:94:9a:93:94:ae:
22:df:21:bd:b3:1a:c2:70:9e:2e:c9:d8:ef:e3:c7:
b6:0b:4d:91:57:98:59:81:db:62:dc:63:a8:05:ec:
6e:cb:24:d5:d5:0e:ba:16:c0:79:28:41:55:02:ce:
75:7f:32:df:7e:13:02:cb:b7:4f:8d:0f:b9:52:93:
cc:be:a2:0c:72:3a:5c:42:dc:f4:7f:32:34:a2:42:
89:dd:f9:7b:46:08:ba:33:40:66:38:e1:15:4d:0b:
4c:a5:2c:9d:fb:e5:70:0d:29:d9:59:5f:fd:f2:cd:
4c:ff:f0:b9:e7:06:5b:9e:5f:b1:4f:c8:c0:ff:36:
8f:5a:84:73:70:5d:94:1d:30:bf:23:fd:9e:f2:36:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4C:89:C5:57:FB:6E:6D:2C:47:42:EC:3A:91:5B:BA:7C:63:2C:4E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154642.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.5.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a4:f0:55:41:83:cf:31:f3:6e:9e:3a:43:e3:b7:74:df:97:
80:73:bf:4b:70:c1:ba:61:03:c1:c0:52:00:51:d7:9e:84:45:
4c:31:63:b9:aa:6d:f4:ac:5f:e8:3b:b2:e0:b8:15:4b:72:8b:
33:44:47:fa:77:0f:b5:cd:af:c3:db:ec:b4:44:59:51:b9:92:
68:39:ec:35:24:2c:1c:b9:97:66:4b:93:97:18:ee:9e:73:ff:
8b:30:f2:35:2f:b1:4b:60:b6:48:05:44:a9:e1:50:cc:c2:13:
50:0a:40:a4:19:a5:86:03:88:a3:b1:0d:8a:71:27:02:2b:d2:
20:81:d7:8e:d4:02:0f:3f:ec:c8:cd:d3:39:d2:64:2a:bc:36:
68:5e:a9:11:8c:a8:d0:d5:95:6e:a2:1e:46:cb:69:75:42:a6:
40:83:ae:4e:97:50:6a:20:51:cc:54:35:22:b0:07:b0:06:f5:
a5:94:4a:32:9c:1a:8f:7f:84:b2:56:07:86:91:a7:f2:77:7d:
16:85:f4:57:b6:f2:66:25:3f:86:54:a3:80:05:58:e5:8c:ba:
81:0c:ce:32:ee:cb:f4:9c:fb:83:05:57:f8:8e:37:36:ac:8e:
ef:8d:ab:a0:3c:13:33:44:78:51:f7:ad:e5:57:cf:54:3d:7a:
c4:44:eb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:48:55 2026 by rpki-client