Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152606.roa
File: AS152606.roa (raw, json)
Hash identifier: G+UgoTgG4WJLnB+O5GuFzKdUBL7hFogJe4tNPs9sWWA=
Subject key identifier: F9:63:C4:BF:8A:39:92:56:49:B0:19:E7:AC:1F:62:3C:24:5E:9E:42
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 34EEB3D00A187B8BD5BB2C4E898500E987AB7783
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152606.roa
Signing time: Fri 09 Oct 2026 10:07:33 +0000
ROA not before: Fri 09 Oct 2026 10:02:33 +0000
ROA not after: Fri 08 Oct 2027 10:07:33 +0000
asID: 152606
IP address blocks: 84.75.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 13:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:ee:b3:d0:0a:18:7b:8b:d5:bb:2c:4e:89:85:00:e9:87:ab:77:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 9 10:02:33 2026 GMT
Not After : Oct 8 10:07:33 2027 GMT
Subject: CN=F963C4BF8A39925649B019E7AC1F623C245E9E42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fc:c0:2c:7e:f9:fd:80:73:5d:1c:64:85:4f:
ff:68:6e:ee:1c:73:e9:73:d5:ed:2c:10:84:15:24:
66:91:bb:bb:cb:fb:36:1c:05:62:56:62:4c:af:86:
68:13:ae:ed:4b:05:3d:5d:05:eb:f8:e3:12:e2:e4:
95:48:f3:ca:31:5b:24:51:de:13:a2:48:6d:6b:8f:
6e:f5:92:f3:a2:96:c2:d7:4b:24:65:6f:a3:d8:aa:
6e:3c:f7:60:ec:11:73:78:78:cf:12:f4:30:56:76:
3b:fb:04:d4:f9:48:df:e4:f1:6c:16:95:4f:1d:d6:
78:1a:2a:80:48:a5:ac:f8:5e:23:5e:79:c3:7e:e2:
34:f9:f0:17:9c:93:c0:d7:3c:19:96:e5:8d:12:5f:
08:5d:33:63:d9:4f:40:94:86:e7:2d:93:fa:4a:85:
bc:63:55:39:f4:ca:a1:fe:3b:50:75:9c:fc:b3:f5:
72:99:de:f4:6c:d4:eb:2c:64:bc:4d:2b:9a:44:0c:
9d:74:62:2a:b9:85:c4:6d:85:d2:8b:94:85:f8:21:
15:55:ba:25:c6:2e:db:44:cf:36:74:c5:f5:3c:1f:
e5:a3:23:ef:be:15:7e:de:c3:9c:49:eb:24:23:2e:
8c:d1:28:a7:9f:ee:8a:27:9c:18:d3:65:48:1a:48:
c7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:63:C4:BF:8A:39:92:56:49:B0:19:E7:AC:1F:62:3C:24:5E:9E:42
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152606.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.81.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:02:10:b3:1d:1c:14:6a:a7:ad:09:44:ad:68:34:73:60:97:
7a:55:82:49:5e:c2:f5:2b:5f:65:7b:78:4a:0b:ab:a0:02:82:
a0:e8:ec:6d:3e:7e:09:02:a9:42:82:3f:4e:ef:75:49:0b:a8:
4b:f8:ec:15:cb:fb:71:b2:a8:fc:c1:46:47:4c:2e:da:1e:01:
aa:f2:07:a6:b6:46:43:11:47:a4:21:60:6d:aa:71:a8:b2:62:
4c:5f:1b:16:c1:d5:fe:d6:83:f0:42:65:0c:09:be:23:1e:7d:
64:aa:f2:b6:9e:dd:62:72:84:bb:15:f2:79:9f:2a:ad:04:cf:
4a:f8:5b:12:8d:b7:57:08:fa:08:3b:46:4b:50:7a:c3:23:a6:
4a:90:72:ea:ef:45:07:7b:43:79:cc:61:cb:23:86:29:11:07:
b9:1e:ae:cd:a6:7a:2d:1b:66:15:b7:9a:0d:32:d8:ae:e5:4e:
d5:26:b8:eb:45:0f:c6:f1:04:79:b1:a6:7a:1c:9d:f2:85:a3:
1b:b1:5f:0e:38:40:cc:cb:e5:2f:86:d2:5f:39:11:13:b5:d6:
15:fc:ca:f1:ca:57:de:f7:66:5c:19:d2:8a:7d:43:e1:b1:fb:
ec:fd:c4:6c:98:c8:f0:e9:24:c4:ae:77:d9:9b:ca:a7:e4:b9:
5d:41:bb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 16:01:41 2026 by rpki-client