Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151576.roa
File: AS151576.roa (raw, json)
Hash identifier: UujTgOP9nfyZ81c+/1UTGRRLA/tIXmN6S4y39v/GCAs=
Subject key identifier: 01:40:3B:E6:3E:15:BB:59:F8:4C:0A:C7:63:A6:01:A6:AE:FE:AA:BD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 41F54FA4F06FC93F0E5EE0D58ED85F59457D3470
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151576.roa
Signing time: Thu 30 Jul 2026 10:57:18 +0000
ROA not before: Thu 30 Jul 2026 10:52:18 +0000
ROA not after: Thu 29 Jul 2027 10:57:18 +0000
asID: 151576
IP address blocks: 2a13:9500:1af::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f5:4f:a4:f0:6f:c9:3f:0e:5e:e0:d5:8e:d8:5f:59:45:7d:34:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 30 10:52:18 2026 GMT
Not After : Jul 29 10:57:18 2027 GMT
Subject: CN=01403BE63E15BB59F84C0AC763A601A6AEFEAABD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:d7:ea:20:ce:5b:c5:f7:e3:3f:88:b6:15:
75:98:3d:4e:27:fd:31:bf:1f:46:62:11:7d:62:31:
7a:08:90:a7:41:fa:67:0c:e1:e3:8d:37:41:d9:ab:
54:9e:a3:ac:32:b1:39:6a:b8:0e:29:0d:eb:58:7f:
bb:f0:90:9d:c3:33:3d:15:c4:15:a9:c0:b4:88:4c:
0e:6f:67:3f:96:30:8b:92:c1:29:e1:b9:d2:06:71:
13:b3:6f:d8:9a:ca:73:46:65:26:a9:95:5e:f5:18:
33:f9:39:89:d3:a2:46:f4:ab:f8:21:f5:e6:bc:3c:
0b:cb:e3:f0:81:c4:21:43:d1:2c:6f:58:6f:72:57:
d2:0c:ef:f2:5d:8a:57:62:db:6b:12:cb:d8:ab:ef:
74:0b:51:6f:07:5a:20:f8:71:c0:c0:44:2e:c5:54:
83:a5:7f:1e:c0:ec:a8:c7:d2:ad:56:71:f5:75:c0:
69:2f:54:f6:1a:dc:3a:53:c8:39:42:4d:7e:dc:d1:
9b:aa:58:c5:be:ca:06:3e:60:57:b9:c5:96:a9:26:
47:28:1c:c6:ef:c8:91:1d:00:71:f8:04:8a:33:71:
e4:82:e1:80:b5:0d:73:f7:58:8e:8a:01:3e:0a:ea:
61:c3:04:a1:a8:d1:15:bd:27:a7:00:66:72:65:4e:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:40:3B:E6:3E:15:BB:59:F8:4C:0A:C7:63:A6:01:A6:AE:FE:AA:BD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151576.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1af::/48
Signature Algorithm: sha256WithRSAEncryption
40:16:a9:f3:ad:27:53:e0:05:4d:92:3a:7e:de:12:a7:fe:df:
bd:f9:77:24:c9:b4:81:cd:64:ed:76:0f:ca:17:0e:d1:19:83:
f2:32:59:ff:fd:25:0e:70:9e:30:9a:60:72:ae:85:d5:b4:ef:
98:27:7a:25:52:10:9e:aa:b2:25:00:90:12:8a:e7:d8:96:41:
eb:0b:ea:25:63:19:9d:8f:81:0a:3e:a6:8f:16:05:12:6b:43:
fe:7c:bf:c3:3d:c9:88:6c:38:9b:fa:42:b3:18:67:29:d4:51:
14:8b:b6:87:70:43:2c:69:e6:2c:c7:fb:38:f7:b9:72:d4:92:
ed:f7:91:11:b4:7b:90:85:4c:b2:a9:ca:33:49:02:f8:dd:85:
d6:38:42:aa:36:b1:7f:bf:3a:f6:8c:67:2f:e2:11:3c:a1:e1:
9c:5f:3d:0d:d9:c4:48:a2:95:23:31:e6:94:c2:20:ac:73:ab:
c0:c8:85:b7:c7:35:8f:bc:f0:42:1b:87:2b:35:e6:a9:33:cd:
6f:c3:22:b0:12:12:e8:35:5d:8d:78:9b:ec:cc:36:3a:92:de:
2d:ad:21:8a:21:96:c9:4d:80:3d:97:96:e3:7f:2d:40:e9:1f:
94:1a:69:d7:ec:ac:fd:51:41:5d:d7:14:de:04:a2:d1:d8:7a:
54:c1:82:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:03 2026 by rpki-client