Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS150501.roa
File: AS150501.roa (raw, json)
Hash identifier: GFUjvmy8HdSrqNcZ/NUtwtiHNYKJsppvWbxJm9XmddM=
Subject key identifier: 73:0A:3B:28:70:D1:AE:C2:5A:10:B5:3E:D4:6D:62:00:C5:67:A9:3B
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 44AEE8CE922920B72CCF0A097A9437651E97FC6B
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS150501.roa
Signing time: Sat 24 Oct 2026 10:34:06 +0000
ROA not before: Sat 24 Oct 2026 10:29:06 +0000
ROA not after: Sat 23 Oct 2027 10:34:06 +0000
asID: 150501
IP address blocks: 45.157.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ae:e8:ce:92:29:20:b7:2c:cf:0a:09:7a:94:37:65:1e:97:fc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 24 10:29:06 2026 GMT
Not After : Oct 23 10:34:06 2027 GMT
Subject: CN=730A3B2870D1AEC25A10B53ED46D6200C567A93B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:68:da:41:e4:1d:d7:b1:73:a1:68:cd:36:
33:04:74:df:33:2a:d7:ca:c7:63:b3:6d:f3:10:30:
5a:8f:05:50:36:ce:b2:0d:d3:31:ba:1f:84:6e:92:
05:89:d4:86:5b:17:27:92:df:83:48:3e:b3:0a:f6:
ab:df:c5:bd:da:75:b7:f9:86:21:20:75:b0:f9:ac:
2a:66:7e:07:77:c5:b2:03:6b:9c:89:30:f8:0a:0c:
2f:1a:9e:e3:d3:f8:88:7d:87:eb:b9:6d:14:58:ac:
d6:7c:e0:52:0c:78:7d:6d:0b:38:90:75:b3:8d:d6:
37:41:50:bd:4b:68:69:30:c2:d3:22:80:40:fc:18:
17:ee:7f:ea:90:49:b6:84:b2:da:ac:e3:c3:5b:c8:
b7:93:ef:83:c8:bd:84:e4:39:c9:0c:91:e5:b8:9e:
cf:5f:95:79:79:03:10:75:a4:e3:c7:38:2b:f6:c4:
72:cb:3e:e3:d1:b2:a7:a1:be:48:04:46:0d:f9:91:
12:72:1f:b7:31:d6:95:3b:ef:03:fa:d0:34:ec:ab:
80:bf:ea:84:a4:54:36:17:a1:08:f1:fe:b2:4b:36:
31:a0:8c:38:10:3a:b8:18:92:37:f7:45:ec:0d:45:
32:63:b6:9c:76:40:82:c7:9b:34:f4:4b:6c:64:22:
e7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0A:3B:28:70:D1:AE:C2:5A:10:B5:3E:D4:6D:62:00:C5:67:A9:3B
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS150501.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.18.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9a:8d:48:9e:b2:c5:c3:76:d5:62:c5:c9:11:de:97:19:76:
0c:4b:c2:a9:25:5a:43:14:3a:4a:65:5f:4e:90:14:9a:69:4c:
f5:d8:c3:14:df:42:fd:e7:d1:9a:37:22:2e:34:be:d9:4d:ff:
cc:32:14:0e:40:14:72:49:ed:b8:ee:22:87:8e:af:8f:d5:e7:
ee:94:b8:f4:cc:c2:f8:e7:68:c2:5f:98:28:6a:d3:31:1a:22:
39:17:89:24:97:ad:a3:a8:c1:1d:28:8e:a0:35:81:c6:cd:dd:
aa:22:46:3e:0a:e2:55:81:04:35:e3:03:11:97:db:de:ec:b7:
dd:12:d4:5a:cf:d8:81:f6:ef:1b:f3:22:d3:b4:ab:69:12:1e:
bc:92:62:2a:03:44:74:25:84:b4:4e:41:75:bb:97:8a:9b:74:
c4:e8:14:7c:df:83:80:76:f5:11:c2:9b:f6:45:c1:bd:c5:9e:
af:8f:65:ef:42:e2:10:41:ea:a5:4a:27:bc:cb:58:3f:e5:af:
25:a8:51:24:8e:ef:b5:d1:02:7c:23:17:a3:8d:41:f0:c4:9b:
ab:6b:7d:10:4d:54:d2:af:6f:01:50:c9:6b:00:57:6a:9c:6a:
44:92:c9:bb:58:01:0d:1b:1c:3a:12:13:b7:f3:4a:4d:98:03:
4d:1c:8c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:16:35 2026 by rpki-client