Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151389.roa
File: AS151389.roa (raw, json)
Hash identifier: ReoS8e5TgtruVaVrIpzvDjkks88PQc1jQludz2SRLOA=
Subject key identifier: A7:2C:5E:A0:4A:DF:AB:1F:D1:5C:75:93:D8:5D:F9:7D:9C:CD:4F:35
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0FB5BB48D9F76313D76814150EA5899BA1C63868
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151389.roa
Signing time: Mon 08 Jun 2026 01:44:51 +0000
ROA not before: Mon 08 Jun 2026 01:39:51 +0000
ROA not after: Mon 07 Jun 2027 01:44:51 +0000
asID: 151389
IP address blocks: 167.148.139.0/24 maxlen: 24
168.222.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b5:bb:48:d9:f7:63:13:d7:68:14:15:0e:a5:89:9b:a1:c6:38:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 8 01:39:51 2026 GMT
Not After : Jun 7 01:44:51 2027 GMT
Subject: CN=A72C5EA04ADFAB1FD15C7593D85DF97D9CCD4F35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:ae:9e:40:9e:fb:78:c0:c7:82:e4:7b:22:
d6:63:69:64:a5:c2:4b:67:86:2e:61:97:0d:c5:ff:
78:de:5b:d6:d4:ae:2b:dd:c1:46:8a:08:8a:33:0d:
51:86:b5:4b:87:51:f3:28:d0:0a:48:b2:74:09:fc:
c9:e2:06:cf:02:a7:bb:69:70:88:a1:6c:f8:a0:bf:
ae:99:c9:0c:a9:fd:af:c8:cf:46:73:d7:7d:03:2a:
a6:9a:6d:fd:1f:73:3b:c0:10:95:ad:98:15:c5:71:
16:db:c5:55:d0:e4:b1:82:8e:ac:a4:72:a0:32:d0:
0c:81:91:ec:2d:25:ec:e9:d6:42:e6:31:68:92:c3:
03:eb:35:1a:2b:c2:ea:e2:90:6d:2e:bf:c1:25:f2:
13:5d:8b:de:86:44:03:4c:05:ba:09:2e:70:f6:26:
02:cb:ae:68:34:66:fd:6d:e1:08:c5:1d:72:8d:52:
88:af:04:f4:28:62:87:6d:ff:e8:bd:6d:45:54:20:
d3:4d:76:4e:c2:5a:6c:f6:ff:5f:98:7d:6d:f5:36:
b2:11:05:bd:82:26:51:34:fd:96:e8:af:6f:89:ba:
25:3d:3e:f7:7b:6e:37:ae:4a:58:0a:80:47:ca:e0:
32:b6:9e:ff:67:53:5c:e3:58:89:bb:a7:6d:da:db:
3c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2C:5E:A0:4A:DF:AB:1F:D1:5C:75:93:D8:5D:F9:7D:9C:CD:4F:35
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151389.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.139.0/24
168.222.125.0/24
Signature Algorithm: sha256WithRSAEncryption
75:8e:d4:e8:73:90:c9:93:e1:84:ee:e0:d3:03:e9:ef:b6:9f:
c1:35:bd:62:2f:9a:d2:d7:27:39:3f:dc:24:b7:ad:ab:28:10:
7a:22:08:9a:1f:cb:5d:0f:0b:b8:96:af:48:12:86:ff:7c:0a:
64:4a:5d:9e:5b:65:35:c8:af:ea:8c:25:c0:80:cf:7d:1b:f8:
8d:8a:a4:25:5d:d0:11:95:39:46:3f:74:04:08:08:3a:d4:31:
b3:1b:78:25:34:54:f2:dd:df:b5:f9:97:5c:03:3b:f4:d2:60:
f1:a2:d6:f4:16:81:44:58:4f:87:2a:1c:99:57:ec:e7:f1:a3:
09:74:f5:16:ec:74:76:14:5a:98:a0:6c:48:83:f8:c1:2c:39:
34:73:85:81:54:d6:37:95:17:4f:70:f9:80:4c:79:bd:24:1c:
6b:96:e3:26:f9:c7:61:2a:40:9a:b3:35:cb:13:a7:b5:b1:59:
e8:c0:2f:c3:72:90:71:78:20:90:f9:c7:4d:81:d2:a2:f4:f9:
d6:3c:8c:87:7a:80:0e:fb:15:3b:cd:72:b3:d1:72:b3:51:97:
e6:4c:a8:c4:c3:d3:6b:3d:d4:5b:80:d8:d9:cb:f8:22:b2:6f:
eb:5d:6a:74:c6:e7:63:87:f1:05:ca:5d:3d:fa:b5:62:79:6c:
dc:d6:2c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:45:47 2026 by rpki-client