Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151419.roa
File: AS151419.roa (raw, json)
Hash identifier: 9xu1PL5TTKquRbiueWu7UMXwqWJrFZlKtHeezpkIA7A=
Subject key identifier: 66:CD:DA:EF:84:C1:B5:1C:08:46:B1:1C:33:75:6D:F5:DC:47:A2:CA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2E8DB62BA67CD0EAABCD566A80988EA7789505DE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151419.roa
Signing time: Mon 25 May 2026 16:16:46 +0000
ROA not before: Mon 25 May 2026 16:11:46 +0000
ROA not after: Mon 24 May 2027 16:16:46 +0000
asID: 151419
IP address blocks: 178.83.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:8d:b6:2b:a6:7c:d0:ea:ab:cd:56:6a:80:98:8e:a7:78:95:05:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 25 16:11:46 2026 GMT
Not After : May 24 16:16:46 2027 GMT
Subject: CN=66CDDAEF84C1B51C0846B11C33756DF5DC47A2CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:78:b8:3f:4f:cc:3c:c4:5d:8a:5f:65:ea:
df:7d:b5:e5:3f:77:6b:9b:df:0d:33:e5:64:87:90:
2a:c6:aa:56:8d:eb:a7:0a:60:17:2c:33:17:bd:7f:
b2:19:9c:41:1d:9a:d2:d3:0e:5a:34:77:b9:12:3e:
10:96:af:98:da:ad:5c:51:ba:da:0f:63:d5:44:b4:
92:45:13:3e:45:ed:91:ea:98:ef:68:34:64:a1:a6:
11:f9:9b:26:db:15:6b:14:81:be:e5:9b:ba:a8:0b:
24:61:cc:a5:d2:49:39:88:71:83:8b:5c:c4:ac:23:
19:b7:5a:13:18:3f:e7:b2:7e:3b:56:62:75:a4:6e:
fd:3d:b3:fc:fc:ae:20:4b:61:50:63:86:29:61:bc:
9e:cc:1a:7d:c5:0b:a6:e2:f1:4a:d3:e7:f6:1c:cb:
5d:cf:07:e1:97:f3:1d:83:78:5f:4d:1e:83:94:7c:
3c:62:c4:78:e0:20:11:bd:b2:5b:28:bb:10:05:04:
6f:a3:ab:72:52:7b:fd:cf:b4:2d:80:f7:ec:d8:a0:
f4:35:b0:a6:b5:8e:dc:30:bb:49:80:a0:69:b8:7e:
ac:e9:b7:db:6a:a0:32:41:b5:81:d6:47:b4:73:b0:
ec:d5:7d:3c:c5:9a:5c:09:d0:e3:6e:3c:1a:71:ff:
0f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CD:DA:EF:84:C1:B5:1C:08:46:B1:1C:33:75:6D:F5:DC:47:A2:CA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151419.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.206.0/23
Signature Algorithm: sha256WithRSAEncryption
13:d9:55:66:25:08:2e:49:b6:fb:0a:60:c1:1f:c0:6a:76:08:
6d:d7:5c:50:2f:84:b4:ae:54:46:d6:eb:21:21:85:77:9b:6c:
10:8d:b5:80:4d:c2:3b:b5:c9:44:ae:39:c6:a3:bd:42:54:98:
de:a7:dd:44:c0:db:df:4c:92:44:da:bb:87:3f:7d:5b:0d:e0:
0d:12:f1:31:be:31:00:eb:c1:a8:1a:ac:90:69:a0:34:11:ff:
c9:a9:67:02:d8:1b:ca:50:30:11:3f:e0:a3:68:ec:96:2b:ca:
f0:29:5c:e1:f7:22:63:c2:6c:f9:6a:7d:ba:8b:04:6e:bd:8c:
bb:56:d0:b2:13:c4:9a:29:1b:ef:03:7c:cd:bf:00:c0:7c:ae:
36:6d:15:13:42:03:37:05:8a:47:dc:7c:2b:3f:1e:b3:d0:83:
be:a2:be:2f:07:63:83:28:98:d7:a1:c3:82:b9:96:72:6f:e3:
d8:3a:cb:d3:b6:1e:54:65:a4:63:6d:2b:17:eb:5f:27:9b:ef:
ed:4d:32:d9:5e:f7:b8:99:57:b7:66:54:ed:ce:da:1e:59:73:
0f:19:1c:68:f8:9c:94:11:ce:5d:43:2b:68:28:e1:60:a7:b0:
fa:f6:31:27:0c:bc:b1:86:7c:20:b7:3a:be:c6:9e:18:e7:1c:
e4:a8:93:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:34 2026 by rpki-client