Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154049.roa
File: AS154049.roa (raw, json)
Hash identifier: okSvkm55H3D/8LVPLu8QNx8wDG3CAzj1GbtblsETpM8=
Subject key identifier: AC:F1:97:34:36:7F:12:E4:97:EA:A1:6C:CB:10:31:A3:26:ED:9E:9D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6BE6AFF0720F9C79BA7DFD6B02B28FE23B950738
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154049.roa
Signing time: Mon 29 Sep 2025 13:53:14 +0000
ROA not before: Mon 29 Sep 2025 13:48:14 +0000
ROA not after: Mon 28 Sep 2026 13:53:14 +0000
asID: 154049
IP address blocks: 82.21.187.0/24 maxlen: 24
2a13:9500:eb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e6:af:f0:72:0f:9c:79:ba:7d:fd:6b:02:b2:8f:e2:3b:95:07:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 29 13:48:14 2025 GMT
Not After : Sep 28 13:53:14 2026 GMT
Subject: CN=ACF19734367F12E497EAA16CCB1031A326ED9E9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3f:8c:b6:6b:fa:e2:c4:83:eb:d2:34:d1:b4:
7f:2b:80:51:97:66:74:a9:52:76:6b:35:8a:87:85:
6a:b4:b4:0b:aa:f7:94:b7:04:b1:20:c8:1d:1a:69:
fc:e9:dd:17:78:67:49:f4:a7:f8:46:09:8d:c0:18:
e9:b3:7c:9b:29:63:c1:d3:8f:49:50:88:26:38:ce:
a0:27:c2:03:76:3f:70:7b:ce:71:06:b4:6a:dd:1e:
6e:e5:f2:f4:42:94:fb:c7:4e:44:83:c7:ff:4b:21:
3c:12:a8:bc:a0:b7:a4:ba:38:dc:ed:60:a5:75:b1:
87:24:a9:e8:7a:52:f4:8c:e4:4c:55:21:f0:64:39:
b0:44:65:59:f4:92:a1:d0:ad:e0:19:69:6e:b1:e0:
fd:da:ec:ad:9c:4b:cf:a4:de:bd:4e:bd:b3:06:d6:
e8:51:fa:dc:07:39:2d:95:64:5a:2a:eb:13:d4:e9:
15:ef:e6:e7:6b:0c:66:ad:a0:46:0b:a7:da:c9:98:
ae:d1:53:ac:4f:5e:75:21:72:6e:57:71:89:5f:02:
e7:5e:dd:cd:20:2f:d9:40:eb:8c:94:06:ff:d7:f5:
d0:89:50:0b:8a:4a:ea:ca:3b:1d:8c:c9:7b:78:bd:
3e:15:f0:dc:aa:a7:f5:b7:27:37:fc:31:f9:5c:9b:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F1:97:34:36:7F:12:E4:97:EA:A1:6C:CB:10:31:A3:26:ED:9E:9D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.187.0/24
IPv6:
2a13:9500:eb::/48
Signature Algorithm: sha256WithRSAEncryption
8e:42:5b:52:1a:81:1d:29:d1:b3:f0:60:dc:d3:ba:a6:2b:78:
17:65:02:b2:d0:14:5e:12:43:1b:6f:e2:09:8c:17:c7:eb:1a:
b5:59:60:b3:ef:9b:70:6a:79:0d:2d:fc:7f:50:4e:28:be:96:
f7:80:2c:dc:d4:84:00:3d:63:85:58:fe:5a:36:14:14:ac:5f:
4a:ba:08:a5:04:18:9a:28:2b:68:43:9e:03:c7:18:0d:13:7e:
69:a1:dd:42:c9:d3:6b:fa:44:4c:d6:d1:37:57:ee:e2:73:0f:
da:66:85:24:af:87:54:00:d6:50:5a:05:38:27:a9:ad:ac:f6:
80:7a:26:fd:36:ec:d6:63:43:a9:89:46:7b:c2:bf:d4:c1:9a:
75:54:26:ee:64:6d:18:1f:31:b8:3f:de:86:7b:1c:1d:47:d0:
15:8b:28:65:5e:ed:63:c8:36:9a:f0:6b:2c:f7:1d:6d:f8:9e:
9e:15:68:eb:d2:d7:a0:3b:f0:63:12:e3:33:d3:6a:a5:85:51:
72:b8:8a:59:03:95:1d:72:e9:41:f2:98:54:78:d6:9b:1f:ea:
1e:53:a3:83:aa:a6:e5:87:60:d6:eb:04:1a:da:f1:17:a6:9c:
48:10:ad:5a:66:fd:e9:93:c3:4d:bf:94:af:be:d3:53:06:e7:
81:8b:62:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:15:13 2025 by rpki-client