Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS149573.roa
File: AS149573.roa (raw, json)
Hash identifier: zJRiLbNdGphz5eVZlxnWGKrb0q5QPn4SW/YpVqLkrBs=
Subject key identifier: 16:31:AF:13:69:EE:BF:17:49:18:DF:59:35:89:76:3A:A7:F1:E7:08
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 56C4F05E07638286B777E37C02050F00BD887A55
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS149573.roa
Signing time: Tue 30 Jun 2026 09:18:35 +0000
ROA not before: Tue 30 Jun 2026 09:13:35 +0000
ROA not after: Tue 29 Jun 2027 09:18:35 +0000
asID: 149573
IP address blocks: 178.83.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:c4:f0:5e:07:63:82:86:b7:77:e3:7c:02:05:0f:00:bd:88:7a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 30 09:13:35 2026 GMT
Not After : Jun 29 09:18:35 2027 GMT
Subject: CN=1631AF1369EEBF174918DF593589763AA7F1E708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:5b:2a:74:48:3b:f3:fc:b2:2f:c7:61:c8:
18:f2:20:e2:f2:5c:a1:6d:b1:94:5c:ed:34:12:de:
2d:d6:1a:84:49:cc:1a:6f:46:42:75:fa:b2:4f:df:
9d:87:01:f6:29:87:37:f0:68:d1:ec:b8:ca:aa:09:
c1:31:7d:79:91:ef:f7:0c:be:e7:05:b6:d8:e0:d8:
da:49:32:b5:f8:60:96:4d:18:a7:96:18:fb:16:1e:
cc:99:60:8c:cd:74:ab:27:f5:8d:3e:ae:fb:ef:ea:
95:65:2f:9e:36:c4:3d:85:21:6f:dc:73:ff:49:dc:
7c:43:f5:80:52:4b:85:19:40:a6:c0:a8:49:2e:68:
b7:27:d4:4e:ea:dd:ff:98:1e:9d:2c:05:5f:71:69:
5e:e8:ea:13:39:8f:4e:dd:ed:9e:a5:2e:51:09:58:
ac:a1:b5:53:dd:fc:44:01:0e:b5:c6:1f:6b:b2:28:
72:a4:da:20:28:7b:ac:0c:9b:78:51:a0:ef:d2:e4:
83:08:95:81:64:85:4d:a2:f3:ce:64:cb:3b:17:e1:
c9:9d:fd:cb:76:97:92:97:7f:84:08:d1:b2:e2:ff:
48:10:f1:40:b5:e1:db:95:fa:eb:3b:05:dd:3b:1b:
a9:a8:df:c3:cb:27:f7:8a:d6:01:46:ac:31:8d:bb:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:31:AF:13:69:EE:BF:17:49:18:DF:59:35:89:76:3A:A7:F1:E7:08
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS149573.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.47.0/24
Signature Algorithm: sha256WithRSAEncryption
98:2c:5e:40:e5:0b:0c:c8:57:42:cc:fa:37:19:39:d6:4f:72:
0f:96:1b:44:a5:b1:d1:a7:89:b6:7e:ee:5e:df:22:7f:56:fd:
1d:c1:3f:2a:99:45:96:34:9c:91:2b:1f:b1:4c:2b:91:56:82:
73:bf:d7:86:21:b9:d6:4c:6b:b3:bb:78:c5:a3:ee:80:40:39:
0e:54:df:f6:ee:a0:9b:59:5e:4d:df:ae:55:ec:ca:52:f7:7e:
06:d1:83:85:b0:0a:45:6e:9d:07:f2:d7:b9:e6:b7:a1:62:8b:
76:dc:53:4a:1f:64:a8:93:f2:9e:ec:9c:3a:6a:0b:5d:dd:9e:
e2:37:99:37:50:d2:5b:2a:1a:c3:c0:49:57:3d:fb:4a:65:05:
9e:8d:02:4e:eb:c5:34:57:dc:b7:3f:f0:64:1d:5d:03:a7:f8:
68:6d:ad:3d:ad:51:28:f6:81:61:b8:a3:15:1a:1f:13:a6:30:
c3:7b:09:0c:fa:82:0f:55:40:0d:ef:43:6b:63:75:dd:5a:57:
b4:66:80:c4:be:aa:c8:ae:23:64:60:b4:f6:60:d8:db:cd:ef:
60:42:ae:ed:4f:f9:85:82:11:6d:85:c5:1d:b2:09:5b:eb:fb:
30:62:b2:04:9d:1d:14:b0:79:c9:ea:85:e1:82:f9:78:2e:a6:
31:52:c1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:56 2026 by rpki-client