Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS149573.roa
File: AS149573.roa (raw, json)
Hash identifier: jn9A4bNiIsqRmuOqi02XnQPLFpJfDBwmvIvEK4SJm6I=
Subject key identifier: BC:76:4D:02:F5:36:6A:3F:34:59:7A:8B:99:C7:4B:B7:23:80:35:B0
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 73EB1054E60133A27764CD16A7B097122BCF4C3F
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS149573.roa
Signing time: Tue 09 Jun 2026 16:50:29 +0000
ROA not before: Tue 09 Jun 2026 16:45:29 +0000
ROA not after: Tue 08 Jun 2027 16:50:29 +0000
asID: 149573
IP address blocks: 193.151.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 17:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:eb:10:54:e6:01:33:a2:77:64:cd:16:a7:b0:97:12:2b:cf:4c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 9 16:45:29 2026 GMT
Not After : Jun 8 16:50:29 2027 GMT
Subject: CN=BC764D02F5366A3F34597A8B99C74BB7238035B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:87:1c:77:46:dc:f9:5e:20:ce:2d:be:dd:
55:27:2c:3d:d1:60:9a:90:ad:57:e1:05:7a:57:99:
a5:14:ed:9e:68:8d:66:5f:0d:07:ad:b4:e0:5d:b4:
6d:d4:26:48:3e:e9:e1:1c:4f:1b:b1:81:2b:bf:be:
ff:e9:8c:ac:8a:ec:10:25:2f:a1:b7:28:1a:93:14:
4f:cb:f0:be:fa:4c:77:d6:54:71:11:d0:d9:19:7d:
5c:6d:c9:b9:f4:b8:73:61:d4:79:36:48:9b:d4:05:
49:1e:2b:95:19:9d:e9:c3:e7:0c:45:1d:b5:6b:f9:
df:af:a5:f4:9e:f6:42:cc:59:f7:5e:ca:88:11:bd:
47:c5:54:03:76:18:91:b5:f9:bf:29:68:c3:90:0f:
87:ea:7b:05:16:d2:ae:48:91:10:e6:a0:b4:85:5b:
1e:5f:37:64:2d:07:c9:e3:be:3e:d0:63:ff:14:d3:
e4:6b:d6:26:e9:5c:44:79:b1:a4:10:c1:59:eb:9b:
f5:5d:f2:45:39:e5:f9:1e:c2:97:25:bc:be:2d:7a:
a2:9a:ef:a8:be:bb:a0:96:80:f0:3d:70:8d:83:6f:
e9:c8:30:e0:21:9f:cd:00:46:74:31:5f:1b:27:4c:
6f:60:c6:3c:b2:87:58:ba:d2:4e:29:e4:12:e4:80:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:76:4D:02:F5:36:6A:3F:34:59:7A:8B:99:C7:4B:B7:23:80:35:B0
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS149573.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.181.0/24
Signature Algorithm: sha256WithRSAEncryption
91:16:10:46:29:89:69:f2:c5:73:ef:6a:ff:40:91:ea:7c:2b:
0e:df:12:87:a9:6c:70:63:d2:e5:ea:04:91:dc:d2:40:d0:3a:
b1:d1:32:d3:25:a3:c9:5b:79:4b:2a:6f:05:18:63:d4:90:d7:
df:a3:9b:c7:e5:53:10:7b:18:ad:88:81:32:39:d3:7d:40:9c:
e9:5f:2f:06:97:b9:62:09:3b:14:1e:78:44:38:72:32:5f:c3:
50:36:6a:ed:f8:24:b1:58:46:8d:d2:a5:d8:1a:d9:72:3c:b5:
3e:26:91:c7:44:0d:b4:30:2d:f8:e8:b2:c0:6c:78:6e:e1:29:
b7:2c:7f:3f:73:12:fe:5a:91:1f:ce:9d:f9:52:50:aa:2c:f9:
35:fe:3c:40:78:ef:dd:0c:cb:28:51:db:72:4a:a0:9c:2b:25:
8a:91:a9:67:71:9d:ec:0a:b8:aa:a9:d1:a7:a1:93:30:e0:90:
f7:09:86:1d:2f:34:5e:07:32:62:31:e2:55:fd:30:8b:0c:65:
87:f4:be:8c:03:00:c4:7b:81:dd:96:d0:89:cf:4a:7d:fb:ab:
80:bc:00:3a:8f:5a:bd:b5:de:ed:08:55:b8:cc:26:c6:5d:19:
1c:bb:14:66:0e:35:0e:8d:e2:e6:14:56:f5:4c:a5:72:44:1e:
44:db:07:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:30 2026 by rpki-client