Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS151389.roa
File: AS151389.roa (raw, json)
Hash identifier: vuWmmN7ZPkzjEFRnPrbHZJs7drRQbkowctL2MZWEf7Q=
Subject key identifier: C3:BF:C5:A5:EC:07:0F:1C:7D:CC:AC:0F:55:61:02:6E:69:20:9D:02
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6736B9503C5B96AC5A66B7163DD9825FF057C6D0
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS151389.roa
Signing time: Thu 04 Jun 2026 11:35:23 +0000
ROA not before: Thu 04 Jun 2026 11:30:23 +0000
ROA not after: Thu 03 Jun 2027 11:35:23 +0000
asID: 151389
IP address blocks: 188.221.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:36:b9:50:3c:5b:96:ac:5a:66:b7:16:3d:d9:82:5f:f0:57:c6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 4 11:30:23 2026 GMT
Not After : Jun 3 11:35:23 2027 GMT
Subject: CN=C3BFC5A5EC070F1C7DCCAC0F5561026E69209D02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:28:f2:73:1d:ab:96:df:82:98:49:94:9d:74:
6a:59:26:da:06:a9:c3:3f:21:9e:12:5e:00:56:76:
bc:76:20:68:5a:cd:33:78:d7:91:77:01:41:52:c7:
dd:43:c7:78:95:ed:2c:90:00:00:16:24:30:43:09:
cf:70:bf:9c:5e:14:69:44:99:56:02:9f:8d:af:79:
c6:4f:49:70:b2:5e:d8:38:dd:e3:e3:46:17:79:24:
6b:d6:8d:ee:0c:74:7e:a4:fa:aa:4c:36:71:8b:26:
64:c6:a7:f7:d1:df:11:d4:fc:dd:bb:c3:1d:69:21:
28:c2:8d:38:f0:24:c0:73:7c:15:09:43:d6:46:5c:
08:d4:05:14:f0:0e:38:23:5c:21:11:94:0e:f1:ad:
4c:cb:4e:23:7d:f9:66:32:28:1c:e8:6f:f9:1b:ab:
76:6c:33:83:e2:57:29:d0:04:f2:66:28:7a:1e:dd:
cc:97:92:58:b4:d2:1c:0d:2a:f6:5a:0a:fa:cf:66:
a5:c3:3b:64:1e:9b:97:3d:8b:88:a3:5f:77:fa:00:
67:9e:04:39:b2:dd:90:70:14:b5:f7:5d:cb:56:bf:
e5:09:74:b0:c7:d4:3e:1e:2a:78:aa:fd:0d:17:8b:
91:ad:5a:49:bb:6a:44:4f:31:09:b0:54:05:37:31:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BF:C5:A5:EC:07:0F:1C:7D:CC:AC:0F:55:61:02:6E:69:20:9D:02
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS151389.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.221.199.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:bd:0a:96:5a:14:0c:03:92:83:f2:50:02:27:7a:ea:ac:c1:
f1:7f:9f:55:31:e5:9a:f3:a9:3b:fd:0b:5c:7b:51:00:27:10:
a5:c7:49:00:00:77:a8:f0:b5:c9:17:49:3b:50:09:cd:c8:3b:
ad:34:c1:90:88:d1:61:07:32:32:e1:14:5e:3f:38:a6:b8:ef:
00:f7:ff:8c:11:36:62:b3:cf:f1:80:e7:13:6d:f4:e3:8f:2f:
50:f2:d9:42:d4:2c:b9:05:aa:ac:bc:e2:6b:f0:40:fe:9a:8b:
7e:53:48:52:ad:ee:99:91:9a:1c:d4:3b:8e:46:02:93:ec:f0:
bd:c2:fe:8e:21:53:98:36:cc:18:97:2d:69:3a:46:05:83:02:
69:3b:96:d0:1c:52:71:b3:94:5c:3e:95:d7:d3:c2:c6:e6:fe:
39:2e:a8:f9:12:81:50:c0:d4:0e:41:50:08:54:12:d1:a6:fb:
22:67:d9:eb:c0:09:0a:ea:48:71:e4:cc:d8:aa:ec:35:99:4c:
f5:ad:eb:e2:8e:d9:3d:b3:5c:92:4d:75:e1:1e:d2:c4:50:88:
00:87:1d:aa:ee:f3:3c:39:9f:5f:d0:e8:b5:06:17:ff:8a:7f:
e4:2e:a1:57:8c:ce:1b:50:54:79:84:59:d3:4b:d1:aa:df:c2:
6e:98:ac:35
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUZza5UDxblqxaZrcWPdmCX/BXxtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA2MDQxMTMwMjNaFw0yNzA2MDMxMTM1MjNaMDMxMTAvBgNV
BAMTKEMzQkZDNUE1RUMwNzBGMUM3RENDQUMwRjU1NjEwMjZFNjkyMDlEMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTKPJzHauW34KYSZSddGpZJtoG
qcM/IZ4SXgBWdrx2IGhazTN415F3AUFSx91Dx3iV7SyQAAAWJDBDCc9wv5xeFGlE
mVYCn42vecZPSXCyXtg43ePjRhd5JGvWje4MdH6k+qpMNnGLJmTGp/fR3xHU/N27
wx1pISjCjTjwJMBzfBUJQ9ZGXAjUBRTwDjgjXCERlA7xrUzLTiN9+WYyKBzob/kb
q3ZsM4PiVynQBPJmKHoe3cyXkli00hwNKvZaCvrPZqXDO2Qem5c9i4ijX3f6AGee
BDmy3ZBwFLX3XctWv+UJdLDH1D4eKniq/Q0Xi5GtWkm7akRPMQmwVAU3MWuRAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUw7/FpewHDxx9zKwPVWECbmkgnQIwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTUxMzg5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvN3H
MA0GCSqGSIb3DQEBCwUAA4IBAQA8vQqWWhQMA5KD8lACJ3rqrMHxf59VMeWa86k7
/Qtce1EAJxClx0kAAHeo8LXJF0k7UAnNyDutNMGQiNFhBzIy4RRePzimuO8A9/+M
ETZis8/xgOcTbfTjjy9Q8tlC1Cy5BaqsvOJr8ED+mot+U0hSre6ZkZoc1DuORgKT
7PC9wv6OIVOYNswYly1pOkYFgwJpO5bQHFJxs5RcPpXX08LG5v45Lqj5EoFQwNQO
QVAIVBLRpvsiZ9nrwAkK6khx5MzYquw1mUz1revijtk9s1ySTXXhHtLEUIgAhx2q
7vM8OZ9f0Oi1Bhf/in/kLqFXjM4bUFR5hFnTS9Gq38JumKw1
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:32 2026 by rpki-client