Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151336.roa
File: AS151336.roa (raw, json)
Hash identifier: 9w7PlKwIDtsk+VziyenpPnlo40memoEVUh8ND/rCb8I=
Subject key identifier: 3C:B3:6E:56:44:75:01:3D:0C:01:E0:03:5B:8F:52:16:30:64:F6:3B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 566BF7C80E68E889DEFD8DD4504279CBCFB6BBD9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151336.roa
Signing time: Wed 12 Aug 2026 02:49:26 +0000
ROA not before: Wed 12 Aug 2026 02:44:26 +0000
ROA not after: Wed 11 Aug 2027 02:49:26 +0000
asID: 151336
IP address blocks: 82.29.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:6b:f7:c8:0e:68:e8:89:de:fd:8d:d4:50:42:79:cb:cf:b6:bb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 12 02:44:26 2026 GMT
Not After : Aug 11 02:49:26 2027 GMT
Subject: CN=3CB36E564475013D0C01E0035B8F52163064F63B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:67:31:e9:40:3a:9c:0e:ba:8c:12:27:5d:29:
46:78:80:9a:83:7c:6b:92:61:5d:1c:bb:eb:81:0a:
5a:58:e8:8d:24:94:f3:62:e1:3d:9b:cd:4e:32:21:
c0:28:96:e2:73:dd:9c:58:4b:52:fc:a2:d1:6b:b2:
b5:36:3f:c7:b1:92:9c:40:63:d5:99:ac:a9:7e:a2:
64:e8:37:08:0e:b3:ba:a0:33:32:66:96:65:a3:49:
02:48:87:d5:e7:54:0b:7d:62:ff:31:60:7f:c8:8f:
af:42:c2:a3:27:57:06:56:59:75:4c:65:10:fc:8c:
da:8e:e4:1d:15:a9:73:d6:11:8d:a7:5c:85:53:66:
9b:13:61:ee:19:62:e5:37:1f:bc:d0:68:f0:8e:d6:
3a:a7:01:4c:34:eb:57:c9:97:f3:d6:8b:9f:9a:9c:
7e:a8:75:35:a1:73:cd:17:6b:c9:ea:fd:bb:41:d0:
5a:b9:18:8e:1b:00:77:5c:98:d6:23:d8:15:e0:c8:
5c:5b:7f:dc:d6:00:32:d3:cd:af:ba:bb:9c:f4:5f:
01:c2:75:4a:e9:3a:72:d3:11:4e:71:55:94:39:85:
2e:f3:17:d3:00:f2:45:26:4e:15:f4:31:00:ef:e2:
67:b7:11:78:29:62:7d:57:1a:23:f9:9e:af:76:f3:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B3:6E:56:44:75:01:3D:0C:01:E0:03:5B:8F:52:16:30:64:F6:3B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.107.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5c:e8:7b:f2:66:9a:6d:5d:9a:87:95:7f:ac:60:ec:8a:22:
c9:2c:63:79:e0:ee:75:4f:e8:ac:68:1e:41:66:da:ac:77:b3:
1f:12:fb:66:58:2e:5e:df:5b:72:a5:20:4a:f3:7d:61:47:ea:
e5:93:4d:f6:07:fa:d3:76:d2:b7:09:86:01:d4:e9:97:f9:d4:
15:fe:31:24:b2:d2:47:53:91:6d:da:5a:7c:69:9e:b8:49:90:
ce:6d:d4:e5:df:35:04:25:e9:e9:b1:a3:7e:92:d4:bd:26:f5:
c7:7d:fc:c7:dc:23:c6:e9:be:13:65:bc:6b:54:73:63:8f:d8:
b1:bb:e3:fb:2e:fd:d3:b4:67:88:ac:ae:b2:8a:f5:a9:9b:38:
dc:49:6c:6d:cb:f0:3d:b0:a6:c5:81:03:c0:8d:4c:a8:08:c5:
3c:9c:1f:89:8b:1e:71:8b:ab:97:4d:2f:5b:a1:f2:84:6f:67:
e9:2f:65:86:5d:b6:41:53:18:c9:1f:66:1d:ef:3f:9c:1e:b7:
71:5d:7a:9d:ff:72:ae:68:4f:70:f5:ee:91:52:15:62:ed:39:
f5:98:2e:ca:ee:d7:83:04:a8:bc:05:9e:24:c6:9d:ed:34:ec:
2e:06:07:0a:17:78:32:e6:f9:e0:d4:1d:f6:3b:5b:f1:36:2a:
24:1d:b2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:56:14 2026 by rpki-client