Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS153947.roa
File: AS153947.roa (raw, json)
Hash identifier: 79uJkeDf1kg9qInjWICXr9SSV+V9UVEGY80npPBh8gs=
Subject key identifier: 0C:61:C3:C1:C4:EF:E9:21:9E:B2:3B:2F:4A:71:A4:85:A3:0A:19:0E
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 0642350BB3B05292D0CE38829E47DE919996D816
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS153947.roa
Signing time: Fri 05 Jun 2026 11:23:56 +0000
ROA not before: Fri 05 Jun 2026 11:18:56 +0000
ROA not after: Fri 04 Jun 2027 11:23:56 +0000
asID: 153947
IP address blocks: 193.187.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:42:35:0b:b3:b0:52:92:d0:ce:38:82:9e:47:de:91:99:96:d8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jun 5 11:18:56 2026 GMT
Not After : Jun 4 11:23:56 2027 GMT
Subject: CN=0C61C3C1C4EFE9219EB23B2F4A71A485A30A190E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d1:a0:41:87:4c:75:47:72:1e:c9:cd:ad:ff:
05:99:dd:4f:9b:f2:4a:db:c8:83:21:e5:ab:9c:3a:
1f:48:53:e3:8a:a7:01:ed:d2:8f:0b:52:7c:77:15:
4d:f2:d3:7a:5d:7f:36:e4:6f:54:25:dd:6d:c4:a9:
27:32:01:6e:5f:16:c7:38:f4:a2:2c:55:da:e4:f0:
8f:53:0c:9b:b1:02:ca:f1:3e:30:6a:e0:1c:e8:3e:
c3:fb:e1:68:4d:8b:07:35:05:0c:42:c3:21:74:be:
68:41:4a:e2:c9:cf:66:6f:ae:7d:2e:1a:c8:15:1e:
b0:d9:d9:3a:2f:4d:66:8d:a8:19:20:fe:8b:97:30:
ee:0d:3e:c6:db:cd:6f:35:e6:c4:e8:71:88:95:75:
56:5e:51:ac:23:67:70:1f:71:70:5e:c9:f8:90:cc:
06:32:6a:70:aa:c8:0d:b4:b8:4d:95:53:d9:37:53:
a2:d6:21:5c:7d:8d:6b:d1:12:79:be:57:32:ff:fe:
4c:b6:18:09:86:6d:b7:ad:5f:8a:4e:7e:bb:d7:18:
15:5c:98:13:97:bd:9b:82:f9:5e:30:42:bc:8a:c4:
6e:03:17:ce:30:c0:b5:07:cf:45:13:c5:17:d3:ab:
2d:a6:52:87:49:8c:fe:a9:7c:71:13:86:98:c0:6c:
f8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:61:C3:C1:C4:EF:E9:21:9E:B2:3B:2F:4A:71:A4:85:A3:0A:19:0E
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS153947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.110.0/24
Signature Algorithm: sha256WithRSAEncryption
57:b2:4c:c9:d1:ab:8e:e5:be:e0:8e:ca:89:94:33:4d:03:95:
21:98:e6:e3:ce:05:f2:a9:99:f1:4e:80:51:f7:cc:5a:a2:64:
96:fe:dc:9a:12:d3:51:75:f4:7a:80:33:4b:04:6e:aa:02:4f:
50:28:35:ba:7e:c9:4c:b7:a9:d8:c0:ff:1b:34:27:7e:84:54:
0c:7a:1b:aa:fb:f5:9c:4d:ec:6d:16:99:0d:51:b3:57:69:4a:
b1:2d:a0:b2:98:6a:8f:e1:70:19:3a:6d:86:9a:c4:87:94:3c:
70:17:49:ca:65:cc:6a:bf:66:72:cc:09:87:90:3f:fa:d6:10:
fc:1b:0a:7d:b3:a7:60:fa:a5:63:11:d9:69:74:4e:9e:69:2b:
14:45:d4:3c:78:64:35:ee:f3:49:76:20:b5:4b:ad:51:36:a3:
5f:7f:ec:be:fe:fb:8b:66:12:e7:01:43:92:fc:c1:83:5f:73:
37:06:f8:50:f2:d9:c5:24:e1:47:4c:22:59:2e:c7:f7:63:1b:
b3:4d:21:65:bc:81:f9:eb:04:f7:a0:35:11:d9:b5:6f:c5:93:
a0:1a:f9:12:18:0d:f1:05:63:29:a6:8b:8c:aa:20:3c:b3:83:
3d:18:ef:17:64:b3:29:39:9a:5b:6f:9d:f6:ef:11:0b:ef:d7:
7c:47:fc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:28:00 2026 by rpki-client