Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS150369.roa
File: AS150369.roa (raw, json)
Hash identifier: XKOrRaE9K3vWH0FcfdkKyAfSzuJdxYBlh624+PDi3tM=
Subject key identifier: 22:29:FB:49:EB:F3:58:81:53:B5:F2:CC:25:D3:2A:2E:0D:8D:EC:24
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0D7E3C1478DEC361C4F6C3D3A0AF7B34489A3404
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS150369.roa
Signing time: Wed 21 Oct 2026 09:22:00 +0000
ROA not before: Wed 21 Oct 2026 09:17:00 +0000
ROA not after: Wed 20 Oct 2027 09:22:00 +0000
asID: 150369
IP address blocks: 2a13:9500:1d8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 01:37:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:7e:3c:14:78:de:c3:61:c4:f6:c3:d3:a0:af:7b:34:48:9a:34:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 21 09:17:00 2026 GMT
Not After : Oct 20 09:22:00 2027 GMT
Subject: CN=2229FB49EBF3588153B5F2CC25D32A2E0D8DEC24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:3b:07:e2:ce:be:f5:99:e1:25:80:f9:27:
0c:f3:82:75:40:7d:eb:29:4b:4b:7a:11:7a:54:49:
45:0b:1b:ee:37:b6:fe:31:97:83:20:74:19:c5:c8:
25:6a:82:d0:5f:13:73:04:99:3d:db:fc:a5:50:42:
b2:b5:9b:3d:cd:9b:32:5d:53:07:10:cc:c5:df:d8:
31:a9:1f:28:cb:b7:5f:5f:ea:27:71:93:d1:66:28:
fc:aa:8a:9c:e4:77:b9:20:5b:e2:8b:4a:13:d4:06:
a9:f4:d0:3d:b9:b6:5d:3b:64:eb:cb:c4:8b:be:51:
97:ed:da:b6:95:5f:0a:77:0c:f2:0a:d1:ca:53:0f:
2a:2a:eb:0f:9d:74:bb:66:be:4e:b9:a0:6a:d4:cf:
5d:09:03:15:83:7f:24:e1:c8:83:98:19:4b:be:f1:
20:0a:cb:40:cc:7a:4d:fd:8d:8f:bb:16:79:28:01:
b2:a7:50:72:a6:d2:1e:e4:63:cc:dd:04:f4:1f:b9:
35:10:b4:97:ab:ea:ae:6c:3b:71:ff:04:4c:74:31:
79:1f:80:a8:19:2e:96:95:2f:9a:a3:71:1b:5f:03:
1c:04:0d:a0:8c:96:43:34:67:2e:a8:bb:0d:c5:cb:
7e:0b:f6:d0:29:3a:be:b8:b0:6d:2d:9a:e0:81:73:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:29:FB:49:EB:F3:58:81:53:B5:F2:CC:25:D3:2A:2E:0D:8D:EC:24
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS150369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1d8::/48
Signature Algorithm: sha256WithRSAEncryption
72:2e:fb:88:9d:9f:c3:60:dd:30:34:94:2f:3a:f1:e9:c3:9a:
9e:bf:6d:69:75:15:fe:c1:56:8e:05:e7:97:1d:1a:1d:a6:c7:
6a:e5:6e:1f:21:39:a4:03:cc:a3:b5:f4:98:41:67:cb:40:51:
93:34:42:55:91:7b:54:9e:6d:85:d3:82:69:56:6a:e4:84:48:
2f:e9:ba:f5:c1:aa:0e:b4:19:cd:72:69:93:59:0e:38:ec:1b:
9a:35:e7:55:32:32:fd:45:c8:ff:90:18:d0:a8:47:70:ff:9c:
49:40:b0:24:64:2c:19:36:a3:48:94:b2:7c:ee:22:44:2b:20:
05:37:e6:f1:78:57:bd:fd:d0:9c:6a:d5:0d:ce:00:66:2a:7d:
0d:15:11:b1:6a:aa:64:c7:9d:b9:df:96:5d:a4:6c:fb:ab:ae:
c5:84:39:4d:6b:08:f2:df:4c:fd:c0:a7:12:9f:7c:9a:34:1a:
f9:22:6f:18:43:cd:5d:98:61:48:44:ae:22:e8:f3:66:8c:2e:
9c:69:0a:e4:52:ea:82:0e:c0:67:b1:46:94:b8:41:f2:27:c7:
35:3e:16:c1:6d:88:2c:49:86:e9:a7:95:3d:91:54:d2:05:cc:
0b:c1:97:37:ae:df:04:49:51:94:b7:5d:bf:f6:c6:19:f7:2a:
6f:18:4a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:02:02 2026 by rpki-client