Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: vKpxOqlpmp1JW0gNnR4/DNyHpf2Hv/j8PKqnqQQMbpU=
Subject key identifier: 7F:85:3A:45:82:A8:9B:CA:72:5E:CB:BB:A0:55:3E:CF:8E:3E:DC:5E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 741BA1D7F378945F2E081261134A9C0065A1FA88
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
Signing time: Thu 15 Oct 2026 06:51:54 +0000
ROA not before: Thu 15 Oct 2026 06:46:54 +0000
ROA not after: Thu 14 Oct 2027 06:51:54 +0000
asID: 152179
IP address blocks: 82.21.80.0/23 maxlen: 24
82.21.149.0/24 maxlen: 24
82.39.150.0/24 maxlen: 24
2a13:9500:57::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:1b:a1:d7:f3:78:94:5f:2e:08:12:61:13:4a:9c:00:65:a1:fa:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 15 06:46:54 2026 GMT
Not After : Oct 14 06:51:54 2027 GMT
Subject: CN=7F853A4582A89BCA725ECBBBA0553ECF8E3EDC5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5c:db:ac:27:6f:0d:ec:97:39:d5:b3:16:ed:
ed:86:30:1e:dc:b4:42:d8:90:e0:5a:13:3d:c5:5d:
d0:02:80:0f:0e:94:69:20:e4:66:d7:ed:f0:f9:e0:
cc:70:58:85:47:d0:fd:85:ab:62:b7:54:de:3a:47:
d8:f1:bf:0f:33:62:dd:a0:0c:84:2e:c3:22:a4:2a:
b4:e8:56:b5:11:db:8e:05:c5:61:d2:9e:37:43:01:
9f:ca:09:ae:e5:f8:c4:55:7c:d3:58:73:55:78:28:
e2:8c:08:08:3d:c7:08:9a:6b:83:15:e7:f4:2c:da:
17:38:b4:a7:12:c0:64:22:89:86:d9:90:6d:89:37:
cc:24:bb:c1:dc:17:c1:be:ad:38:30:7f:68:a0:02:
73:6c:ea:44:37:5a:87:71:92:7e:38:cb:bf:a3:10:
35:27:d3:60:c3:3e:c1:7b:c1:a3:03:40:31:68:80:
8f:de:b6:7d:e7:85:3a:0e:a6:b1:d4:52:38:e0:82:
10:fb:c4:9e:f8:17:fd:1e:61:04:37:61:e7:a0:72:
c4:2e:88:d5:17:1b:0c:b9:48:48:d4:24:ad:98:a7:
f5:d0:e9:32:1e:20:d0:9e:0a:06:8d:c8:aa:2b:dc:
c5:54:89:f6:72:19:6a:58:7e:74:9a:b7:04:75:a7:
2a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:85:3A:45:82:A8:9B:CA:72:5E:CB:BB:A0:55:3E:CF:8E:3E:DC:5E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.80.0/23
82.21.149.0/24
82.39.150.0/24
IPv6:
2a13:9500:57::/48
Signature Algorithm: sha256WithRSAEncryption
77:ce:13:5d:1d:87:ba:b2:eb:3e:70:2e:21:cd:9a:7a:e1:f4:
f5:66:3c:93:18:35:d1:50:d4:1f:9f:42:ed:49:03:b6:ff:59:
8a:9e:e6:a3:e0:91:a9:24:d7:5a:a5:89:ee:4e:d8:31:1e:d9:
b9:0f:64:9a:b1:16:31:f6:f8:4f:35:68:35:09:0b:81:b5:1d:
ae:50:0d:19:d2:6b:87:43:c6:c6:67:48:92:7e:ab:4d:7a:18:
88:a0:97:ab:f2:5f:57:90:0a:1a:85:c2:59:1c:b0:da:8b:3d:
0f:d7:ef:be:f8:be:31:2f:3b:22:a5:e8:88:d3:c0:da:82:e2:
9f:27:90:28:f0:ff:9a:78:ca:05:6d:68:71:9a:ba:7c:e8:fe:
76:17:dc:87:b3:9d:df:f3:ce:d4:eb:71:7a:0e:15:ab:12:cc:
80:4c:a4:5a:29:ad:f5:83:45:17:71:2b:67:4d:17:60:37:21:
68:c8:45:9d:41:0b:63:38:14:f4:bc:b2:e4:b0:03:4a:dc:2c:
dd:9d:db:47:05:00:e0:7a:6f:92:fe:9a:71:2a:a5:ba:bb:b3:
4a:a5:0a:44:79:6c:a2:4f:41:41:49:c6:84:ad:c9:48:0f:0a:
4c:51:31:03:b4:b5:47:d2:45:81:46:29:ec:80:03:80:3e:26:
ae:80:23:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 11:06:53 2026 by rpki-client