Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS150293.roa
File: AS150293.roa (raw, json)
Hash identifier: UDoxj4ucswxE9yggrpn3hSYu0TWTh1J6KYH9ecDwisM=
Subject key identifier: B8:8F:32:60:B0:4E:88:43:7F:D8:7B:28:F3:F6:3D:BB:9D:3F:31:3F
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 6A995A9EAA1CADF5BFC39485AF5AB38829D7390A
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS150293.roa
Signing time: Tue 07 Apr 2026 09:28:52 +0000
ROA not before: Tue 07 Apr 2026 09:23:52 +0000
ROA not after: Tue 06 Apr 2027 09:28:52 +0000
asID: 150293
IP address blocks: 46.236.210.0/24 maxlen: 24
46.236.213.0/24 maxlen: 24
46.236.214.0/24 maxlen: 24
212.60.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:99:5a:9e:aa:1c:ad:f5:bf:c3:94:85:af:5a:b3:88:29:d7:39:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Apr 7 09:23:52 2026 GMT
Not After : Apr 6 09:28:52 2027 GMT
Subject: CN=B88F3260B04E88437FD87B28F3F63DBB9D3F313F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:18:51:42:98:c6:7a:17:a8:11:69:3c:94:5a:
fc:0e:2b:d8:5f:44:b0:16:6c:97:7e:42:41:08:da:
4c:d7:66:ad:14:0a:0d:ed:57:44:58:6f:1f:51:e5:
7e:13:b0:86:e8:5b:c7:20:92:05:8c:80:c1:f3:82:
bd:12:b4:eb:04:4b:ef:ef:72:53:b8:74:ea:c0:16:
e8:0c:bd:7c:5a:31:4b:b2:2e:a2:63:dc:e7:b4:8c:
ab:57:0a:65:54:f2:ab:fb:a6:47:2b:f3:61:f9:ec:
82:38:07:fa:3f:be:6f:d0:23:89:24:9d:be:05:d8:
ea:31:f9:48:c9:a3:89:c3:17:2e:70:52:84:ec:47:
9f:ff:ab:db:1d:9d:6b:6d:11:35:a4:c1:e1:04:84:
94:40:a1:3c:6e:a8:ad:76:87:85:8f:09:98:df:8f:
64:f5:05:f8:1a:51:a4:4b:4a:2c:6e:08:e7:33:4f:
b6:cb:3a:aa:d3:95:45:d9:5a:ff:a9:d4:6b:95:f2:
f6:3c:82:43:b3:d5:06:94:ea:ae:57:b8:1a:97:fa:
81:4f:20:5f:83:02:a9:a4:77:50:9e:95:e7:a8:31:
73:46:e9:4f:49:36:9c:84:98:23:c6:53:2f:1d:e3:
75:ac:0e:f2:3e:1d:41:1e:9d:6a:cd:a9:dc:48:9e:
93:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8F:32:60:B0:4E:88:43:7F:D8:7B:28:F3:F6:3D:BB:9D:3F:31:3F
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS150293.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.210.0/24
46.236.213.0-46.236.214.255
212.60.145.0/24
Signature Algorithm: sha256WithRSAEncryption
61:56:79:79:b8:0e:64:c0:15:71:50:ab:74:f0:60:92:5d:99:
3f:55:30:9f:f5:26:dd:ef:98:df:13:bb:95:57:39:a1:41:68:
43:f0:2a:5f:68:36:54:4d:ce:9a:a5:9d:59:74:7f:e1:71:4b:
c8:d7:83:48:9b:f3:67:16:3b:c8:8d:45:8b:7f:8a:48:1a:28:
62:46:da:5f:58:d8:3c:64:96:53:2f:ce:48:b0:b7:fb:8c:52:
71:37:43:91:d6:3f:a4:98:45:98:3b:a2:2c:93:26:92:17:bb:
46:4d:75:9e:d6:46:96:d8:b2:70:4e:c0:e6:64:aa:8e:75:b4:
47:1b:dc:fa:dd:8b:35:e7:d9:e1:cc:97:cb:13:68:41:d3:d5:
42:98:6c:ed:e1:47:1e:7b:06:2c:20:d7:7a:2f:65:4f:23:80:
f1:df:e6:df:e9:ed:4e:d7:a8:0a:bd:f6:b9:ef:3c:d7:a0:08:
48:8b:b0:4d:09:73:76:88:d2:72:3c:5f:4b:45:cc:ff:00:70:
0b:90:fb:53:68:e3:13:eb:88:c4:6a:7b:76:2c:6e:bc:25:04:
83:ee:8f:a9:12:e3:55:e9:d7:3f:0b:d8:ad:53:ab:75:02:d5:
38:b1:57:64:0d:39:96:89:0d:78:d9:e7:c4:81:bf:5e:46:e0:
9c:93:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:48:49 2026 by rpki-client