Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153564.roa
File: AS153564.roa (raw, json)
Hash identifier: sLe6tda5E88CsdP3AIpSLdnhJF4YY9dXiE9wwdEUr1o=
Subject key identifier: 9F:75:A7:0D:0F:57:54:82:35:54:D4:D1:BA:05:D3:56:D6:33:A9:C7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 07710A81F0FE9052428E5D02D51DE487517EF702
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153564.roa
Signing time: Fri 12 Sep 2025 18:50:54 +0000
ROA not before: Fri 12 Sep 2025 18:45:54 +0000
ROA not after: Fri 11 Sep 2026 18:50:54 +0000
asID: 153564
IP address blocks: 162.141.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:71:0a:81:f0:fe:90:52:42:8e:5d:02:d5:1d:e4:87:51:7e:f7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 12 18:45:54 2025 GMT
Not After : Sep 11 18:50:54 2026 GMT
Subject: CN=9F75A70D0F5754823554D4D1BA05D356D633A9C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:b6:78:5d:b1:b1:f8:ae:54:97:b4:ce:d9:
4c:d5:36:1d:cc:47:9a:84:bc:cf:f7:53:6a:66:7a:
49:a6:5b:b1:61:88:a9:33:5f:44:b7:a3:00:31:9c:
50:d7:f7:1a:da:53:48:57:d3:60:a2:b3:06:57:b9:
8c:fa:03:2d:41:ca:b9:da:c4:a6:6b:9f:cf:55:2e:
77:08:ee:df:95:a2:e2:50:fc:6c:1f:f6:5f:24:c3:
c3:94:0e:6d:27:fb:4b:a6:39:3c:bd:4f:be:68:a5:
f0:09:d3:47:73:f1:81:70:f4:c5:4d:55:b9:15:af:
98:49:85:8c:74:75:8c:c1:2a:71:4d:24:80:c8:51:
ce:65:c0:d9:46:95:f7:76:b2:0f:5a:17:be:92:2c:
58:d5:85:02:a7:ee:4e:12:bb:9c:41:01:3b:c0:8a:
0a:19:23:13:2d:d4:5c:b4:f9:3f:41:1c:43:d4:9e:
80:b1:01:31:8e:72:61:42:6b:0b:f3:01:95:fc:95:
bb:18:4b:72:08:c4:ce:1e:b3:11:00:88:8c:11:c4:
de:1e:ef:c4:e5:a2:39:00:89:33:0f:7c:ae:4c:8e:
82:e3:dd:94:e7:5c:4d:3b:b7:ae:9b:4d:bc:ea:e0:
4b:7e:e6:cc:9e:ed:6b:88:86:a7:f3:30:29:79:a4:
f3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:75:A7:0D:0F:57:54:82:35:54:D4:D1:BA:05:D3:56:D6:33:A9:C7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153564.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.0.0/23
Signature Algorithm: sha256WithRSAEncryption
44:ce:2f:62:99:2f:c6:cf:8b:b6:de:d4:ab:84:ff:fb:a9:b4:
c8:df:2e:eb:f5:f8:dc:61:fe:2d:c9:be:b5:ec:1e:9e:ba:1b:
48:06:e8:23:3e:2b:e6:77:a4:f8:96:3f:15:1c:35:7f:2c:be:
38:e1:f1:2b:fc:82:51:d4:d3:f1:b2:c0:e7:e5:6f:2b:b7:f8:
1a:fd:20:15:34:38:0d:6e:33:9c:4f:75:1b:16:99:9f:67:0a:
a0:b2:52:f9:bf:0e:a8:67:5c:c4:25:9c:23:c2:42:0b:bc:84:
59:c9:33:4b:99:b5:a1:02:c7:b7:02:43:87:f1:3a:f6:03:8e:
65:3e:6f:4a:67:2d:71:89:40:ec:de:2e:00:2f:11:a2:6b:d9:
97:4f:29:62:e6:94:6d:22:2d:57:2a:a8:5f:16:55:06:fa:dd:
80:21:de:f9:56:80:ff:db:2e:87:df:6f:46:f0:19:c0:e7:4d:
51:c5:2f:31:dc:1e:eb:cc:e4:6b:74:d0:f7:92:9b:15:aa:44:
10:df:d6:b0:31:67:f4:9b:b0:be:88:f6:a0:29:9b:e7:a9:2d:
2b:bb:41:1f:03:44:8e:ef:be:56:e8:cc:a6:18:4e:c8:ab:66:
6b:66:2d:0a:9b:3c:81:00:7a:81:49:0c:62:3b:71:ab:67:50:
66:87:c0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:40:51 2025 by rpki-client