Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153997.roa
File: AS153997.roa (raw, json)
Hash identifier: pcXcl0ICmJvXjahAK8nd+z9i5Bac216NYhheY9m529o=
Subject key identifier: D1:40:94:72:EA:54:8A:D3:5F:05:67:37:21:F5:D3:A3:AC:65:EE:24
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 49D35C10369E2C8BC153E28927F23097D618DB93
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153997.roa
Signing time: Mon 28 Sep 2026 06:49:35 +0000
ROA not before: Mon 28 Sep 2026 06:44:35 +0000
ROA not after: Mon 27 Sep 2027 06:49:35 +0000
asID: 153997
IP address blocks: 2a13:9500:ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d3:5c:10:36:9e:2c:8b:c1:53:e2:89:27:f2:30:97:d6:18:db:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 28 06:44:35 2026 GMT
Not After : Sep 27 06:49:35 2027 GMT
Subject: CN=D1409472EA548AD35F05673721F5D3A3AC65EE24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fb:76:23:a0:b5:fe:ee:05:62:4c:72:10:ac:
84:dd:39:ee:68:ef:13:b5:91:a7:41:e2:82:d0:fc:
6f:ca:9b:25:27:2d:d0:59:c1:bf:47:2c:1f:5e:4a:
77:0e:60:ea:e6:0f:91:21:c6:6c:80:32:b5:fd:00:
89:c0:a0:61:2e:49:a8:1b:bb:84:a8:97:3b:c9:a7:
0d:7f:25:c1:2d:94:ba:14:dd:cf:9e:d5:e8:3f:ed:
85:f6:97:3b:13:da:36:eb:55:1f:56:ae:a1:78:4b:
1d:7a:e5:e4:7f:ad:72:ee:3a:6e:50:be:0d:27:bd:
4f:83:20:34:7e:43:c6:2a:24:a0:c4:8e:23:44:3d:
ea:a7:df:04:77:85:87:2d:37:a5:1b:99:b9:9c:b6:
5f:6c:e3:09:f2:2d:bf:e7:9b:b7:b3:5f:94:3e:09:
03:bf:0a:c7:b2:73:6e:f2:95:f7:56:4e:e3:dc:3f:
22:fd:0e:7a:3a:4e:61:2e:e5:9b:60:ec:2a:04:25:
42:21:6c:f2:51:32:97:4d:f5:9f:f9:e0:25:ce:ea:
78:72:4f:48:ef:ae:e0:74:6a:e0:6a:ef:b6:4a:4b:
be:0b:a9:d7:ec:b7:32:b8:98:c8:83:d9:dc:b0:3a:
e5:d1:43:1a:a7:d7:0b:66:23:07:f7:46:80:84:3c:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:40:94:72:EA:54:8A:D3:5F:05:67:37:21:F5:D3:A3:AC:65:EE:24
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153997.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:ff::/48
Signature Algorithm: sha256WithRSAEncryption
2a:49:d5:00:52:de:b7:94:82:c6:c3:d6:b0:01:6f:5b:84:52:
99:d9:b0:43:f9:07:31:d7:5d:4f:35:24:95:ab:05:27:d1:3f:
04:b6:2c:38:f7:40:8c:54:ad:32:b8:48:96:ac:75:fb:14:56:
41:72:4e:a5:6a:77:09:2b:ec:d0:01:ac:80:86:92:e3:ce:cf:
8e:6b:1f:d0:fe:6c:12:0b:7e:30:12:c9:3a:f1:11:d1:58:1d:
32:08:73:ac:53:b9:4a:63:16:54:28:18:8f:85:51:77:87:05:
5b:47:88:33:cf:7d:dd:fe:9e:17:ec:2f:18:d0:29:56:80:36:
e9:9f:c8:c7:92:ef:23:17:39:02:38:59:da:99:c9:37:6e:39:
06:71:68:33:97:06:98:09:8b:47:e3:49:95:0c:0e:a0:9d:0c:
72:d8:1c:f5:c0:8c:3d:64:71:1f:95:45:e4:1e:37:49:96:b6:
3b:05:b9:1e:fe:c8:e1:b7:2b:6a:2b:dc:7a:86:71:b4:94:62:
67:85:f9:c3:5e:c5:82:9a:89:6f:ce:c1:01:70:45:1a:40:34:
07:1c:b6:b8:cb:eb:61:63:2c:83:8e:4a:df:37:be:26:f3:c1:
17:19:81:55:1b:b4:cb:b8:52:f0:2d:ba:f0:3c:c2:de:2c:90:
20:10:9e:18
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUSdNcEDaeLIvBU+KJJ/Iwl9YY25MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MjgwNjQ0MzVaFw0yNzA5MjcwNjQ5MzVaMDMxMTAvBgNV
BAMTKEQxNDA5NDcyRUE1NDhBRDM1RjA1NjczNzIxRjVEM0EzQUM2NUVFMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt+3YjoLX+7gViTHIQrITdOe5o
7xO1kadB4oLQ/G/KmyUnLdBZwb9HLB9eSncOYOrmD5EhxmyAMrX9AInAoGEuSagb
u4SolzvJpw1/JcEtlLoU3c+e1eg/7YX2lzsT2jbrVR9WrqF4Sx165eR/rXLuOm5Q
vg0nvU+DIDR+Q8YqJKDEjiNEPeqn3wR3hYctN6Ubmbmctl9s4wnyLb/nm7ezX5Q+
CQO/Cseyc27ylfdWTuPcPyL9Dno6TmEu5Ztg7CoEJUIhbPJRMpdN9Z/54CXO6nhy
T0jvruB0auBq77ZKS74LqdfstzK4mMiD2dywOuXRQxqn1wtmIwf3RoCEPBGfAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU0UCUcupUitNfBWc3IfXTo6xl7iQwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTUzOTk3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AAD/MA0GCSqGSIb3DQEBCwUAA4IBAQAqSdUAUt63lILGw9awAW9bhFKZ2bBD+Qcx
111PNSSVqwUn0T8Etiw490CMVK0yuEiWrHX7FFZBck6lancJK+zQAayAhpLjzs+O
ax/Q/mwSC34wEsk68RHRWB0yCHOsU7lKYxZUKBiPhVF3hwVbR4gzz33d/p4X7C8Y
0ClWgDbpn8jHku8jFzkCOFnamck3bjkGcWgzlwaYCYtH40mVDA6gnQxy2Bz1wIw9
ZHEflUXkHjdJlrY7Bbke/sjhtytqK9x6hnG0lGJnhfnDXsWCmolvzsEBcEUaQDQH
HLa4y+thYyyDjkrfN74m88EXGYFVG7TLuFLwLbrwPMLeLJAgEJ4Y
-----END CERTIFICATE-----
Generated at Sun Oct 18 01:14:22 2026 by rpki-client