Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS10111.roa
File: AS10111.roa (raw, json)
Hash identifier: ZaYW/T5VpNRQHLzP9TYRQtSDfEZylBAP7hTNmVM3WPw=
Subject key identifier: E5:46:9B:DE:6B:1D:65:96:2A:49:E9:A0:DB:A0:B8:FF:56:02:DC:BD
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 6855150E70199FF826F615863D3727936B62276B
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS10111.roa
Signing time: Thu 04 Jun 2026 18:47:29 +0000
ROA not before: Thu 04 Jun 2026 18:42:29 +0000
ROA not after: Thu 03 Jun 2027 18:47:29 +0000
asID: 10111
IP address blocks: 45.151.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 17:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:55:15:0e:70:19:9f:f8:26:f6:15:86:3d:37:27:93:6b:62:27:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 4 18:42:29 2026 GMT
Not After : Jun 3 18:47:29 2027 GMT
Subject: CN=E5469BDE6B1D65962A49E9A0DBA0B8FF5602DCBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:a4:f5:bd:00:eb:16:7e:7d:ae:7d:ee:59:
6f:8d:57:57:c2:b9:4f:22:9c:28:5b:58:cc:29:9a:
09:c1:f0:26:f0:a0:bd:c1:85:69:11:d5:9a:c5:0b:
ba:a3:44:e7:ed:1b:e8:6f:eb:05:3b:b8:1c:68:5d:
11:37:52:f1:24:0c:6b:9d:b8:1c:59:3d:c7:ee:6a:
fa:26:78:23:be:5c:5a:61:d0:31:ba:d7:18:82:99:
cc:9d:6c:53:38:46:cb:6f:d5:ba:1c:1e:2c:a1:48:
05:41:44:2c:4e:72:b7:71:d4:95:d0:f3:98:1e:ec:
3b:9a:e3:c1:60:f9:4f:b2:39:1b:6c:91:4a:76:29:
c8:3e:cc:86:b9:ca:e9:95:de:39:37:7e:90:7b:86:
4d:3d:15:05:b2:8b:67:0f:09:27:d5:14:af:4a:70:
e5:4d:95:a3:ba:4d:cc:0b:7b:cc:d4:2b:a5:7b:b5:
a4:67:df:7d:57:bc:0a:21:a5:6c:d9:83:1d:bb:25:
e8:75:f2:db:13:18:1f:e5:fc:50:77:ef:e6:04:fc:
6d:b2:59:a8:20:0e:20:54:e8:87:dd:4b:63:30:25:
ec:4a:58:f1:5b:85:4b:89:a6:55:9c:62:9d:77:bc:
1c:74:0b:f6:43:20:8d:15:89:c2:33:b4:bc:c9:88:
97:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:46:9B:DE:6B:1D:65:96:2A:49:E9:A0:DB:A0:B8:FF:56:02:DC:BD
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS10111.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.47.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c1:eb:9d:79:fd:49:34:4a:ce:33:30:98:fa:fb:de:cb:9a:
cb:c7:f8:6e:83:58:68:4c:10:c9:69:6d:1c:07:92:f1:f8:9b:
32:e8:9a:4e:d5:d2:12:87:1b:15:1b:3a:d3:2e:f7:44:90:8d:
77:6d:8a:56:d9:74:df:32:d0:c9:27:8d:db:0c:f0:ff:45:73:
44:12:d6:1f:90:22:4f:1a:07:73:ff:31:39:50:d6:bf:76:55:
63:fb:f0:93:99:a2:33:8f:60:61:bd:c8:5e:ba:d8:b3:3d:bc:
b9:05:6a:b6:bd:ad:e9:93:3a:38:0c:ac:7a:46:aa:7f:53:0a:
b1:0f:46:8a:0d:2b:d1:1b:e1:70:35:bd:cf:d8:fa:fa:66:5a:
1b:96:35:9b:2d:19:19:d9:f3:df:07:79:d6:9c:2c:da:65:eb:
e0:f5:86:6e:23:95:6d:01:94:88:d6:1a:9b:1c:a4:ae:a9:fc:
23:e2:b2:d0:5e:3a:5f:ea:24:5b:aa:8d:80:d3:d2:08:a7:d0:
be:82:ea:40:48:79:07:19:da:f3:2c:82:68:40:7a:e8:90:49:
88:89:7c:d0:c1:7f:8c:d7:a0:18:50:95:76:53:90:1f:ca:81:
11:7a:d5:f5:70:5b:87:c5:4d:07:09:f4:c4:31:cd:3b:11:e5:
98:67:51:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:26:17 2026 by rpki-client