Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS149606.roa
File: AS149606.roa (raw, json)
Hash identifier: neE956oG70PGOucJG9r1y5Ch12JPK7FBZ99H/wAsYQY=
Subject key identifier: A4:82:AE:14:87:EE:A9:2A:7F:8B:40:A1:D2:B8:AA:15:2E:5B:5B:EE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0190B4213BA067566E5C95371B0EA1B11A6B015F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS149606.roa
Signing time: Mon 27 Jul 2026 07:51:18 +0000
ROA not before: Mon 27 Jul 2026 07:46:18 +0000
ROA not after: Mon 26 Jul 2027 07:51:18 +0000
asID: 149606
IP address blocks: 167.148.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b4:21:3b:a0:67:56:6e:5c:95:37:1b:0e:a1:b1:1a:6b:01:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 27 07:46:18 2026 GMT
Not After : Jul 26 07:51:18 2027 GMT
Subject: CN=A482AE1487EEA92A7F8B40A1D2B8AA152E5B5BEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:7a:1f:da:55:9c:37:0b:65:6a:42:58:32:
b2:22:1c:92:22:0b:65:fa:85:44:2b:fc:0b:b5:29:
6a:3b:71:4c:63:96:2d:ff:dc:00:da:ca:4e:63:7a:
2d:df:a0:9a:80:24:7d:d2:15:ac:ac:f2:de:b8:b4:
89:fe:ee:27:06:89:e3:af:81:33:c5:86:14:68:32:
ed:4f:4d:66:d4:10:68:49:c6:bd:30:64:62:81:00:
a3:86:88:6b:07:ea:ed:5f:71:57:1f:c4:e4:14:a6:
d4:44:2d:f8:85:73:b1:e6:6f:5a:7b:00:0a:c6:74:
f8:d5:e6:b5:ba:be:1f:28:01:44:a6:a2:50:d9:01:
0c:d1:81:9e:a4:30:df:cc:48:88:9b:66:bf:c7:89:
92:73:0f:35:6c:9c:c7:37:6f:c6:52:a6:0e:65:c8:
ff:52:26:19:73:85:24:80:ab:d6:91:c8:27:8b:d5:
25:62:e5:9d:ef:e6:6e:96:96:9f:85:56:e7:bf:ed:
4e:2e:f0:88:92:92:53:9b:2b:62:04:56:99:8b:ce:
5a:d7:94:2a:f1:3f:71:66:6b:9d:18:02:0b:26:e9:
d1:b0:52:bd:d0:f4:17:4d:61:5c:ea:1a:49:b2:ff:
c9:79:8c:56:f6:ba:d5:23:67:36:70:40:8e:5f:c3:
96:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:82:AE:14:87:EE:A9:2A:7F:8B:40:A1:D2:B8:AA:15:2E:5B:5B:EE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS149606.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.2.0/24
Signature Algorithm: sha256WithRSAEncryption
86:59:d5:4d:fa:92:a0:55:dd:22:1c:d0:d7:bd:7b:ce:3f:7c:
7d:5a:e6:5b:15:6e:02:01:ae:26:32:29:0a:49:58:fc:9e:92:
cc:f2:a6:f3:d2:f8:7b:33:96:06:2e:51:de:8f:83:9b:81:c2:
26:c5:b7:0a:57:94:89:02:72:5d:88:f1:e0:aa:e8:63:56:ee:
10:14:33:50:fd:bf:5d:b2:40:9a:9b:92:22:1b:b4:c7:a9:a0:
02:7f:bb:0a:5d:4c:45:b3:7f:22:30:87:1a:20:59:98:8c:22:
8c:2a:33:c0:f7:ae:50:16:69:e4:5e:b2:a8:3e:14:41:6d:f4:
ea:34:2c:26:f4:51:ed:2a:8a:31:93:1e:08:b0:50:d9:67:f1:
7f:42:31:7f:fa:8e:e7:60:ad:25:29:c4:b0:86:e0:97:04:a2:
a8:72:a5:b1:96:6f:49:57:26:4c:bd:5b:a2:20:90:d6:f0:5a:
b9:4c:c4:42:bc:92:a0:a8:24:12:81:24:9b:15:4a:63:e6:28:
41:f6:58:bf:27:99:06:c7:8d:d6:5e:84:6f:16:f4:1a:24:85:
da:45:75:46:48:79:18:92:f8:0f:33:01:1c:65:e0:59:50:d3:
6c:02:21:50:34:b4:41:84:8f:78:ff:7b:df:20:cb:f4:c4:2b:
a9:c5:43:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:00:13 2026 by rpki-client