Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154383.roa
File: AS154383.roa (raw, json)
Hash identifier: Ocp5fez2GJAedfNwkUrSxkO9KyMTNYp15fbO4jwTT4U=
Subject key identifier: B7:89:8D:F9:E3:64:14:91:B3:B2:17:12:9B:52:1F:82:D8:9E:B1:87
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 05149894C80F9D5F39CDF54B3F8C74C94196D0E8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154383.roa
Signing time: Sat 30 May 2026 04:42:23 +0000
ROA not before: Sat 30 May 2026 04:37:23 +0000
ROA not after: Sat 29 May 2027 04:42:23 +0000
asID: 154383
IP address blocks: 46.202.46.0/24 maxlen: 24
95.134.70.0/24 maxlen: 24
178.94.180.0/24 maxlen: 24
178.94.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:14:98:94:c8:0f:9d:5f:39:cd:f5:4b:3f:8c:74:c9:41:96:d0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 30 04:37:23 2026 GMT
Not After : May 29 04:42:23 2027 GMT
Subject: CN=B7898DF9E3641491B3B217129B521F82D89EB187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:2e:7a:e2:8b:01:02:30:85:32:ab:81:94:
2f:0b:6e:4b:9b:3b:21:68:e6:51:45:4d:6e:b7:53:
e0:9c:e7:40:0e:a7:52:ff:8b:e7:7b:ab:f0:f6:d9:
05:78:ea:ea:5b:fe:89:02:10:e7:9a:91:04:3c:b4:
e0:5a:bd:9b:23:77:e4:94:5b:59:12:9b:ef:cd:66:
86:0f:ae:be:98:75:33:c8:b3:2d:a8:9b:4e:d2:e1:
18:a4:b7:63:77:7b:63:2b:19:77:fe:9b:3f:d2:3d:
2f:cb:0c:aa:af:e4:36:a2:6b:57:f4:f0:81:7c:45:
fd:52:66:8a:96:3d:fe:d2:a8:e7:83:cc:d2:b9:5c:
e2:01:2a:3d:9e:d8:c3:2c:15:f5:9b:98:43:f2:a2:
2d:07:80:10:69:bd:65:00:87:08:b7:6f:cd:37:d0:
86:7e:02:bb:f0:72:8a:ed:59:7f:79:3c:e4:1a:b5:
ca:de:b0:3f:58:63:50:bc:b5:18:73:88:6f:de:60:
e1:d9:fd:e6:da:f1:e3:b3:4c:8c:82:0e:f7:40:32:
17:f6:4d:b7:b3:b8:51:60:34:6f:d3:c6:9f:83:ab:
12:e0:b9:f6:1a:a3:91:3d:45:3a:2e:80:0f:c9:b4:
b6:b6:69:fb:37:e8:16:68:bc:ff:ab:18:9f:5a:08:
7e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:89:8D:F9:E3:64:14:91:B3:B2:17:12:9B:52:1F:82:D8:9E:B1:87
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154383.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.46.0/24
95.134.70.0/24
178.94.180.0/24
178.94.187.0/24
Signature Algorithm: sha256WithRSAEncryption
76:25:d7:b9:47:f8:87:04:39:da:51:b3:56:e5:5e:90:92:56:
38:fe:e1:3c:90:6f:56:60:fb:01:68:1e:85:98:27:ae:92:81:
63:59:69:13:65:61:95:a2:d7:ed:96:2c:39:c2:3f:96:67:55:
6c:cd:cf:dc:74:88:c6:b6:32:79:ae:93:d0:2c:de:88:0f:2e:
4b:4d:c2:0a:4c:6b:59:cd:28:ba:a0:13:e2:3f:95:99:65:58:
8b:7d:24:6e:e1:af:7b:5d:7c:d1:39:95:45:e6:70:c7:af:fa:
bd:25:e8:1e:82:9b:a9:b2:cc:bf:55:cc:20:71:2e:51:dd:ec:
fc:16:83:24:96:52:a2:99:41:21:eb:a5:58:7b:90:8c:c0:fd:
2b:4c:42:03:af:3f:86:06:5c:eb:7e:dc:b4:78:6b:2c:f7:d5:
60:8c:0e:e2:4e:aa:a4:06:07:f7:e1:36:98:4c:74:27:e8:36:
25:7e:33:23:62:13:ad:8b:50:5f:20:2c:b9:39:c2:19:b3:4e:
6c:f9:c7:5e:17:c6:f8:a4:6a:5c:46:c5:04:59:50:4b:f5:38:
c3:b0:4d:6a:3b:b5:ac:78:0e:60:ae:b6:09:80:3b:95:26:2c:
4a:1a:02:d7:07:b7:30:e2:d9:d6:95:6f:b0:96:9f:06:f7:52:
92:d7:b0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:34:57 2026 by rpki-client