Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS151704.roa
File: AS151704.roa (raw, json)
Hash identifier: sgIQ/M/uNZRq/XtJHGATQfQBFfkq/tIm87bbYbploZ0=
Subject key identifier: A3:51:A4:3A:FE:41:E8:B7:F5:52:19:56:99:5E:B1:8A:1F:71:75:0D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5BA2B1DD1CC77650356FD39067176BC3BEA9A42D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS151704.roa
Signing time: Fri 18 Sep 2026 11:36:18 +0000
ROA not before: Fri 18 Sep 2026 11:31:18 +0000
ROA not after: Fri 17 Sep 2027 11:36:18 +0000
asID: 151704
IP address blocks: 95.134.116.0/24 maxlen: 24
95.134.165.0/24 maxlen: 24
95.135.161.0/24 maxlen: 24
178.92.73.0/24 maxlen: 24
178.92.122.0/24 maxlen: 24
178.92.123.0/24 maxlen: 24
178.94.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:a2:b1:dd:1c:c7:76:50:35:6f:d3:90:67:17:6b:c3:be:a9:a4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 18 11:31:18 2026 GMT
Not After : Sep 17 11:36:18 2027 GMT
Subject: CN=A351A43AFE41E8B7F5521956995EB18A1F71750D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:e6:25:25:72:9c:2b:9a:4f:74:ab:ed:f3:
5e:06:c4:c6:00:8f:83:b3:a9:b4:08:6e:9a:4e:4c:
c6:bd:96:c6:b5:23:4e:7c:af:47:39:c7:3b:98:24:
aa:f9:52:6f:2f:6a:d5:89:94:85:b5:13:11:ad:ee:
7b:4d:da:6d:ae:16:4c:19:62:3b:a4:87:78:70:66:
91:c4:d7:3a:f4:d5:67:2e:67:e2:37:08:74:70:41:
62:26:2c:6e:5a:f4:34:04:95:00:d6:19:36:bb:c0:
e7:8e:93:08:4e:2d:67:1a:ff:46:c6:83:62:a7:a3:
b5:1c:fb:ee:27:24:af:20:0b:ee:f3:73:6a:3c:41:
16:55:2a:63:dd:41:50:49:28:1e:94:60:e3:04:0f:
b8:a6:cb:7f:8e:13:7e:5d:ad:8e:90:cc:59:85:35:
3a:7b:98:37:db:71:a3:bd:5a:6c:42:4e:76:2d:d8:
b2:af:05:b5:08:6d:14:96:7b:cf:59:cc:81:e5:06:
ae:35:2e:2d:0d:15:4c:47:df:0f:c4:e7:13:e3:69:
e1:a7:29:11:84:11:22:c1:27:0d:ab:0c:57:11:06:
f4:ec:43:ec:b8:d7:c2:4e:3c:9c:1e:91:ab:68:3d:
a6:9d:81:36:f5:09:6d:ab:d7:ea:51:65:37:87:82:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:51:A4:3A:FE:41:E8:B7:F5:52:19:56:99:5E:B1:8A:1F:71:75:0D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS151704.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.116.0/24
95.134.165.0/24
95.135.161.0/24
178.92.73.0/24
178.92.122.0/23
178.94.176.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:df:79:51:7f:93:64:ee:f3:c7:d5:d7:a1:c1:7d:ac:b6:30:
b6:c9:46:28:1b:28:78:75:d9:bb:ec:5f:ee:e5:2c:ac:0c:cb:
52:94:62:6d:87:0d:9e:b4:b0:45:eb:03:9d:aa:0b:d0:59:45:
a7:24:9b:db:14:60:8e:0b:5b:95:57:33:16:84:b0:90:ea:6f:
2b:d3:a8:2e:c1:38:03:e5:d0:b4:8d:42:44:39:65:81:e9:98:
26:6b:e2:da:25:b7:43:6f:a8:3b:e4:be:1a:ef:1f:3d:0f:54:
18:1f:ea:3d:3c:f4:f8:d3:a1:83:e9:20:fa:80:5c:11:37:56:
b8:32:3e:8a:8d:34:3c:54:d3:77:c4:fc:f5:89:81:9d:d1:c3:
8a:e2:ca:dd:68:4b:0e:b8:93:db:fc:44:57:cf:2c:d9:fb:d5:
60:01:54:22:c5:ad:d8:c3:cf:49:b4:b8:c5:3e:c7:6f:83:fb:
3f:10:ae:af:d9:7c:a8:60:f3:03:d3:36:22:e8:04:11:2a:0b:
ca:8c:85:dd:24:90:8e:c9:b4:a9:bb:f7:bd:ac:58:c2:a7:78:
56:12:8c:11:f1:5f:62:0b:d1:17:f7:e6:a9:26:a3:ba:f0:7d:
d6:1a:5e:36:b2:ff:ed:e1:0a:c7:8e:6b:ae:b0:a1:db:15:cd:
f6:41:f1:48
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUW6Kx3RzHdlA1b9OQZxdrw76ppC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA5MTgxMTMxMThaFw0yNzA5MTcxMTM2MThaMDMxMTAvBgNV
BAMTKEEzNTFBNDNBRkU0MUU4QjdGNTUyMTk1Njk5NUVCMThBMUY3MTc1MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJj+YlJXKcK5pPdKvt814GxMYA
j4OzqbQIbppOTMa9lsa1I058r0c5xzuYJKr5Um8vatWJlIW1ExGt7ntN2m2uFkwZ
Yjukh3hwZpHE1zr01WcuZ+I3CHRwQWImLG5a9DQElQDWGTa7wOeOkwhOLWca/0bG
g2Kno7Uc++4nJK8gC+7zc2o8QRZVKmPdQVBJKB6UYOMED7imy3+OE35drY6QzFmF
NTp7mDfbcaO9WmxCTnYt2LKvBbUIbRSWe89ZzIHlBq41Li0NFUxH3w/E5xPjaeGn
KRGEESLBJw2rDFcRBvTsQ+y418JOPJwekatoPaadgTb1CW2r1+pRZTeHgjArAgMB
AAGjggIoMIICJDAdBgNVHQ4EFgQUo1GkOv5B6Lf1UhlWmV6xih9xdQ0wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTUxNzA0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAX4Z0
AwQAX4alAwQAX4ehAwQAslxJAwQBslx6AwQAsl6wMA0GCSqGSIb3DQEBCwUAA4IB
AQCn33lRf5Nk7vPH1dehwX2stjC2yUYoGyh4ddm77F/u5SysDMtSlGJthw2etLBF
6wOdqgvQWUWnJJvbFGCOC1uVVzMWhLCQ6m8r06guwTgD5dC0jUJEOWWB6Zgma+La
JbdDb6g75L4a7x89D1QYH+o9PPT406GD6SD6gFwRN1a4Mj6KjTQ8VNN3xPz1iYGd
0cOK4srdaEsOuJPb/ERXzyzZ+9VgAVQixa3Yw89JtLjFPsdvg/s/EK6v2XyoYPMD
0zYi6AQRKgvKjIXdJJCOybSpu/e9rFjCp3hWEowR8V9iC9EX9+apJqO68H3WGl42
sv/t4QrHjmuusKHbFc32QfFI
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:31:37 2026 by rpki-client