Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151389.roa
File: AS151389.roa (raw, json)
Hash identifier: WMwbpA8vsJbLlH4P49AdcQ/St9u9pJvhHLE68mgwPqo=
Subject key identifier: C6:9C:89:58:D4:ED:58:A0:45:AE:09:D4:3D:08:1F:56:74:D6:29:D6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 350865ADB3036242475864148734FCAC9C380A1E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151389.roa
Signing time: Fri 07 Aug 2026 02:03:37 +0000
ROA not before: Fri 07 Aug 2026 01:58:37 +0000
ROA not after: Fri 06 Aug 2027 02:03:37 +0000
asID: 151389
IP address blocks: 82.47.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:08:65:ad:b3:03:62:42:47:58:64:14:87:34:fc:ac:9c:38:0a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 7 01:58:37 2026 GMT
Not After : Aug 6 02:03:37 2027 GMT
Subject: CN=C69C8958D4ED58A045AE09D43D081F5674D629D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:e2:f4:16:df:27:3b:54:3a:77:25:b3:61:
9f:f3:fb:e1:2b:cc:d9:54:76:f6:18:a9:3b:75:03:
64:b5:f7:f5:28:03:f7:bf:46:57:86:57:ca:40:4f:
70:2a:e3:4e:b7:b9:50:e6:30:8a:f6:12:85:e8:25:
80:7a:9b:4a:ed:7e:43:22:c2:05:9c:07:cc:c6:a5:
79:19:da:6d:4f:34:6a:92:9b:1d:ce:c7:bb:a8:62:
d3:c5:88:eb:c5:2c:5e:2a:80:1d:32:2d:d2:af:41:
5d:e4:21:0a:b4:07:a2:bb:9d:f9:79:b2:e1:be:1c:
fe:1b:8e:84:d5:42:94:c7:ef:71:34:92:6c:6a:c0:
d7:d7:2c:8f:d3:8c:da:a9:2a:cf:7a:7e:6d:26:5e:
d0:09:25:d2:84:6b:e7:ae:00:eb:4f:8f:07:1d:ae:
db:28:81:fe:ba:49:89:50:65:69:37:be:4f:4a:71:
d9:ae:a9:67:ce:a3:42:36:ef:be:ce:60:48:de:df:
2a:8f:5b:63:57:36:72:85:bf:cc:98:96:f0:1a:d3:
ca:55:92:f0:ce:ad:50:dc:6c:10:a3:24:c3:d1:ff:
d6:5e:f9:6e:ea:c3:15:32:f9:fd:f2:48:bc:81:a9:
94:86:fd:f1:6a:3a:73:e5:f3:64:9a:6c:d6:b1:2c:
bd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9C:89:58:D4:ED:58:A0:45:AE:09:D4:3D:08:1F:56:74:D6:29:D6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151389.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.51.0/24
Signature Algorithm: sha256WithRSAEncryption
22:11:1c:1a:a2:2a:bc:cd:74:20:31:ee:a1:f1:0c:cd:33:6c:
c1:a4:0a:26:dd:51:fe:67:26:59:85:cd:15:94:b5:16:2d:1f:
d0:6b:e1:27:76:ad:6b:b0:98:b6:70:c2:0a:a0:a9:72:4a:7e:
35:6f:5e:f6:4f:a8:f4:37:ab:68:02:3c:c2:80:3c:9d:04:49:
ad:e0:f8:62:b6:3f:70:64:4b:9c:ad:af:7e:a1:f0:6f:a2:6f:
14:9b:78:34:c7:9b:a7:b3:16:21:9d:41:e1:2d:2e:6f:25:66:
26:c7:e6:13:b9:5d:f2:87:ee:59:b2:fe:53:33:63:26:a2:40:
db:0b:3c:74:00:8a:c8:46:0e:13:3a:d0:c5:b1:52:fc:33:ba:
95:1a:68:44:22:2c:54:79:63:0b:a7:48:13:d5:56:6c:a2:c9:
48:71:11:04:27:39:29:6f:57:47:09:42:1a:ab:93:42:0a:9b:
8a:97:a9:af:14:67:c4:91:22:af:26:d9:79:1c:a8:bf:4b:99:
6f:45:60:dc:f2:fa:15:9f:be:a5:04:bf:d9:92:36:3a:4a:61:
d4:cb:da:26:94:ca:77:d2:bf:97:cd:42:11:1a:80:25:26:c8:
ac:14:eb:51:2c:cf:6c:51:76:91:44:79:a8:15:40:11:5d:ed:
c7:6d:ca:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 05:44:31 2026 by rpki-client