Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151704.roa
File: AS151704.roa (raw, json)
Hash identifier: yp0ndjzossyvLTPqtQcrn8d6CwG4aNQvnhTKPgIG3zw=
Subject key identifier: D4:60:DF:9A:ED:F8:52:C7:16:00:69:81:75:63:E0:CB:C0:02:99:96
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 61B7C353897E31A544E770998B2D583B85BA4F6A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151704.roa
Signing time: Fri 23 Oct 2026 08:35:03 +0000
ROA not before: Fri 23 Oct 2026 08:30:03 +0000
ROA not after: Fri 22 Oct 2027 08:35:03 +0000
asID: 151704
IP address blocks: 168.222.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:b7:c3:53:89:7e:31:a5:44:e7:70:99:8b:2d:58:3b:85:ba:4f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 23 08:30:03 2026 GMT
Not After : Oct 22 08:35:03 2027 GMT
Subject: CN=D460DF9AEDF852C7160069817563E0CBC0029996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:f5:10:02:f2:d5:32:53:04:88:cf:7a:b8:
ad:9c:3a:fd:e5:36:78:0d:dd:80:9a:85:f8:d8:11:
f6:2c:eb:c9:aa:0f:45:8e:4e:30:30:b1:e4:5e:34:
ba:2a:8f:07:bc:3c:a7:d2:67:a2:82:ae:d3:15:be:
26:b3:80:cc:60:ec:31:fc:dd:fe:cc:c3:e6:3d:01:
53:87:e8:16:87:f1:67:bd:ce:df:29:11:a8:4c:f3:
49:63:c0:4d:6f:69:ef:d2:d1:36:e3:7a:28:5b:93:
e2:e3:ab:07:da:ca:31:49:73:04:df:a8:ac:9e:1f:
1b:0e:9e:86:a5:be:d5:cc:ff:1a:be:29:a3:98:2a:
db:ee:d9:5d:58:13:67:8e:45:bc:3d:b5:fd:84:f8:
d2:84:13:d1:96:03:f9:83:18:d8:16:dc:6f:c3:40:
cb:38:76:63:0b:e4:d4:a9:ff:b4:16:da:b6:fe:51:
79:57:af:7e:ba:d4:9f:99:44:9c:9d:96:8c:2c:13:
0a:0d:d4:d2:84:f0:00:11:e6:ba:2f:01:9a:47:c9:
af:bc:ff:b0:bc:e5:e3:75:6f:e1:45:05:3f:9b:8a:
8a:7f:62:4b:9c:10:62:41:cf:9f:bf:c1:de:74:38:
6b:90:a4:25:2c:e2:f6:e4:cb:4f:2d:ee:c5:c6:a7:
56:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:60:DF:9A:ED:F8:52:C7:16:00:69:81:75:63:E0:CB:C0:02:99:96
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151704.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.105.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:38:78:06:c9:0d:d7:72:34:3a:e3:56:ea:98:c1:70:fe:5f:
14:b3:44:8b:6d:cf:fd:18:00:6a:4f:33:94:d4:fb:e0:eb:91:
f4:de:8c:ea:08:d8:16:ac:1c:8e:f3:76:33:d6:ee:7c:b2:3d:
69:2f:d5:2d:5b:42:0f:8e:f3:88:8a:6d:59:31:86:94:09:79:
74:44:c9:c9:59:09:29:5f:23:86:fc:16:a7:bb:8c:8e:ce:19:
6f:78:9e:26:f8:70:ba:15:40:23:8a:a6:1b:01:bf:ea:78:60:
51:7a:91:95:bd:66:44:04:c1:18:73:5a:1c:20:39:20:8a:05:
d3:68:70:8b:88:a7:93:35:77:4a:b8:6a:6d:06:11:b5:83:cb:
1a:a2:f5:20:4f:f4:51:3b:fd:c3:39:66:6b:28:bf:ea:9b:1a:
88:08:36:65:c8:b5:e9:9e:e6:9b:48:6a:4f:8f:7a:21:b3:66:
4d:35:28:f9:5a:3a:f6:0b:41:fa:66:8c:13:25:ef:1a:84:c1:
27:e7:d1:7e:c7:65:38:6c:71:6f:8b:26:6a:d1:72:3b:7e:f9:
33:97:13:d5:10:f6:4a:8f:be:cd:6d:01:4f:cf:40:33:f3:95:
a2:07:f2:56:a7:19:4b:b1:07:de:8d:d6:fe:32:12:31:e4:ff:
43:6a:32:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:18:04 2026 by rpki-client