Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS151544.roa
File: AS151544.roa (raw, json)
Hash identifier: nGeqidMI2wudfNsP9wavg7ANcsW3eT2jXvQ5ay2U2cE=
Subject key identifier: 36:B0:43:D8:A5:CC:B0:61:46:4B:A3:50:7F:F2:41:C8:36:32:7E:F1
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 66821512C3B0FE3EB74E55982C8113A618031D8E
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS151544.roa
Signing time: Thu 02 Apr 2026 15:33:56 +0000
ROA not before: Thu 02 Apr 2026 15:28:56 +0000
ROA not after: Thu 01 Apr 2027 15:33:56 +0000
asID: 151544
IP address blocks: 2a14:7580:ff00::/48 maxlen: 48
2a14:7580:ff30::/45 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:82:15:12:c3:b0:fe:3e:b7:4e:55:98:2c:81:13:a6:18:03:1d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Apr 2 15:28:56 2026 GMT
Not After : Apr 1 15:33:56 2027 GMT
Subject: CN=36B043D8A5CCB061464BA3507FF241C836327EF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cb:6d:52:52:08:16:bb:23:48:b5:00:e9:d2:
a4:3d:c6:bd:9c:c7:87:e0:39:d6:fd:82:e8:f9:b0:
92:37:4a:3f:78:ef:ae:01:d3:57:f0:be:78:40:4b:
16:73:f8:12:f0:68:d7:a5:1a:7d:92:a7:8f:d0:7b:
01:07:93:b4:d1:31:8f:69:5c:23:f0:9b:9e:2b:e0:
bd:77:ec:02:8a:16:73:d7:cb:a6:fc:e8:9d:b2:e8:
26:82:f5:3e:0f:de:64:3e:56:92:85:2a:b4:ee:1f:
8e:ec:97:4b:17:03:58:ee:45:4e:ec:ee:92:e5:b6:
e2:33:67:0f:26:7e:5a:c4:41:e6:25:62:8d:d1:02:
e2:36:03:1c:c2:1f:b2:6f:97:49:f3:53:b1:68:ee:
db:a1:b7:cb:4c:38:12:d7:e8:93:d7:63:7a:56:dd:
6d:28:e4:31:7a:04:ba:12:22:12:7e:6d:10:56:ca:
44:b4:14:2a:d9:0c:83:4a:74:9e:54:3c:80:3b:ce:
57:1a:e5:00:2e:e6:c2:f9:59:3a:f3:ae:2b:36:db:
3d:31:cb:86:ab:ae:c9:00:c2:9d:c7:d8:5a:f0:15:
ac:3a:1f:78:b2:da:ec:c2:24:32:53:59:49:dd:86:
2b:5e:33:85:54:e5:2e:15:29:a2:df:b9:8b:a8:b1:
ad:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B0:43:D8:A5:CC:B0:61:46:4B:A3:50:7F:F2:41:C8:36:32:7E:F1
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS151544.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff00::/48
2a14:7580:ff30::/45
Signature Algorithm: sha256WithRSAEncryption
74:28:6e:06:a0:f5:d4:ff:ed:9f:ad:b6:a8:58:91:6a:e1:90:
06:87:da:96:78:55:b3:61:e3:75:9e:93:87:2e:6c:21:64:58:
06:4c:01:25:5e:f7:66:08:7e:df:dc:b8:71:3a:bc:cb:ea:4a:
f6:b8:df:86:c3:79:d0:77:1a:56:a6:d7:b8:00:70:96:f2:1e:
e3:82:df:d1:f9:25:d3:c8:e4:02:d3:ae:65:a2:cf:14:8a:5d:
dd:09:3f:e6:7d:99:70:7c:39:17:7a:a5:9f:36:c4:11:05:de:
6a:d0:c6:d4:b3:d2:98:7e:90:44:0f:5d:8f:cb:be:e3:71:db:
ae:f1:60:bf:12:f2:e3:bf:e1:bf:f0:05:42:2d:59:20:82:87:
20:68:6e:06:ea:6e:34:9b:07:40:e5:78:ca:65:0a:59:39:83:
3c:1a:d5:9a:8e:0a:9a:0e:82:a9:88:02:f6:4d:6a:da:a9:20:
60:45:86:5c:d2:00:4c:de:6b:63:5f:fd:8e:32:87:e9:31:5c:
f1:f8:74:03:32:09:bc:5c:37:42:b1:6a:8d:22:35:60:aa:c9:
34:c7:98:bd:cc:f6:ac:91:c2:0d:cd:86:a4:9e:8d:50:d2:0b:
10:ba:ac:05:88:01:43:48:d0:f8:e8:da:50:47:cb:64:f1:a4:
55:7a:12:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:09:10 2026 by rpki-client