Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS151544.roa
File: AS151544.roa (raw, json)
Hash identifier: +i0aK0LG2b61pKjqVjQG0ZoNzRfaZsJ+1/3LX/JI4x0=
Subject key identifier: 0A:83:B1:7A:F3:CE:0E:9A:32:54:2F:44:DF:6F:48:47:6E:C7:4C:60
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2A2E71C35CD45085D9FD57F62C752020D265991F
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS151544.roa
Signing time: Sun 31 May 2026 18:12:59 +0000
ROA not before: Sun 31 May 2026 18:07:59 +0000
ROA not after: Sun 30 May 2027 18:12:59 +0000
asID: 151544
IP address blocks: 2a14:7580:ff00::/44 maxlen: 48
2a14:7580:ff30::/45 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:2e:71:c3:5c:d4:50:85:d9:fd:57:f6:2c:75:20:20:d2:65:99:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 31 18:07:59 2026 GMT
Not After : May 30 18:12:59 2027 GMT
Subject: CN=0A83B17AF3CE0E9A32542F44DF6F48476EC74C60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:fa:58:f4:61:40:7a:1b:64:ba:ef:91:62:
49:1d:4c:d5:55:24:53:5e:03:37:1e:cb:ff:35:21:
ce:9f:15:8f:15:98:99:5f:ef:d0:ce:1e:6b:29:90:
f6:0d:1d:1d:d4:bb:67:04:81:0b:a9:8e:a2:91:de:
34:3a:48:e5:18:27:c6:bb:3b:af:5c:a9:65:54:cc:
4f:a4:76:62:d4:69:56:27:8d:d9:96:58:76:96:f8:
87:5e:db:dd:d0:34:1e:b2:1c:89:74:ad:44:ed:40:
bc:77:05:6b:c7:47:9e:e8:3e:60:78:36:bd:c2:16:
84:07:52:37:18:8f:7f:a6:23:40:84:11:c3:fb:17:
b5:f4:e2:b6:6a:2e:39:0b:5d:8b:66:9b:67:8d:79:
94:e4:74:2d:18:c3:50:72:85:d7:6f:3e:7a:3a:c1:
8c:71:9a:cf:1f:58:39:73:bd:85:71:7f:dd:69:a4:
5e:6f:91:5b:2d:07:89:ed:ec:23:d3:cf:4f:70:2b:
bc:0b:e9:63:ff:c0:47:6c:2c:8f:7e:50:78:37:3e:
05:86:b0:94:f9:8a:09:5f:39:94:15:22:49:f8:e6:
2d:9a:e1:b8:13:85:a5:0e:fb:25:0a:24:d2:4a:1c:
c0:42:7b:f4:ae:be:a9:0b:5d:79:4b:d7:d7:3d:72:
39:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:83:B1:7A:F3:CE:0E:9A:32:54:2F:44:DF:6F:48:47:6E:C7:4C:60
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS151544.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff00::/44
2a14:7580:ff30::/45
Signature Algorithm: sha256WithRSAEncryption
5c:06:9a:be:32:3a:e7:c4:92:b3:1d:c6:d1:f2:5b:56:c0:45:
9b:20:bd:6b:2d:9c:fd:23:c7:ed:14:24:98:2a:79:64:85:56:
d5:90:cd:ee:6d:f8:84:ef:9f:b5:67:df:30:6b:a3:c7:cd:82:
c2:99:74:af:37:43:4f:28:d8:36:e0:42:67:64:3e:56:cf:f6:
c6:9b:3c:8d:33:66:dd:26:e3:62:5c:38:43:f8:82:39:42:06:
b1:78:95:23:f8:00:3b:69:89:df:81:07:18:47:f1:bb:71:8f:
9c:31:7c:9a:16:38:d5:0a:6d:9e:77:55:14:7b:bf:12:87:dd:
8d:be:65:c0:19:5d:f8:a1:3b:96:37:df:02:a9:9d:ac:c6:8c:
a5:b9:dc:19:8c:d0:32:a5:29:5d:18:e8:35:2f:01:19:b6:0f:
de:18:dd:52:7f:83:43:15:73:3f:88:84:69:2f:57:14:45:c2:
ab:fa:95:4b:2b:99:24:8b:87:ad:56:d0:df:6f:94:78:40:c0:
0b:ac:a4:d5:77:76:ef:52:a2:de:6e:59:e0:d1:b5:68:4e:23:
d2:a6:52:43:c2:85:c3:57:29:50:53:49:c1:4b:d7:ab:63:2b:
df:4d:a0:82:b8:2c:f9:77:63:74:ad:9d:c9:4d:26:9d:93:69:
a3:23:27:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:46:44 2026 by rpki-client