Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151786.roa
File: AS151786.roa (raw, json)
Hash identifier: T7eLHpTE0XtSYLwXPc6nwQXBXdH1ma6cco26nVLxQJo=
Subject key identifier: 26:BB:1F:0B:5A:BE:3A:E2:95:55:1F:86:BC:0D:0D:0D:9C:EE:B9:3E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6A94B9EA81E1FFBB278F142E12B135D5B99736C6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151786.roa
Signing time: Mon 10 Aug 2026 08:49:21 +0000
ROA not before: Mon 10 Aug 2026 08:44:21 +0000
ROA not after: Mon 09 Aug 2027 08:49:21 +0000
asID: 151786
IP address blocks: 2a13:9500:d8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:94:b9:ea:81:e1:ff:bb:27:8f:14:2e:12:b1:35:d5:b9:97:36:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 10 08:44:21 2026 GMT
Not After : Aug 9 08:49:21 2027 GMT
Subject: CN=26BB1F0B5ABE3AE295551F86BC0D0D0D9CEEB93E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cd:32:7e:fd:43:74:90:98:3f:fb:ab:0b:23:
93:c1:d9:72:21:f0:78:f1:9d:c6:ba:89:45:ed:47:
74:55:2e:8f:31:c7:95:92:72:62:61:c2:20:1a:b0:
31:d2:43:1e:43:3d:25:52:40:52:68:c5:de:4d:b3:
09:8f:0d:b0:c1:5a:16:7a:8b:3c:b6:c4:b1:d6:45:
8f:0c:bf:0f:30:12:c8:58:f3:f0:89:b4:0d:0d:e7:
26:69:f0:24:bd:b8:a0:72:d4:2b:74:c5:15:21:1b:
18:00:c9:93:82:f1:12:34:0f:a4:aa:23:c0:39:aa:
06:50:78:1e:72:09:fb:76:63:0c:f3:6b:06:ae:0e:
b7:32:11:37:f3:bc:2f:75:07:30:59:d5:8c:64:dc:
dc:b0:22:8e:ee:46:30:71:18:75:55:6b:d6:52:89:
ec:a3:b6:f4:81:3a:52:5d:46:ee:9f:c4:5e:73:57:
d1:b1:4f:a5:aa:66:67:40:99:5c:b7:2b:4d:64:27:
db:f8:50:c3:63:9b:ed:7c:b3:44:ff:51:f6:7c:95:
0e:1e:6a:0a:25:e1:3a:07:dc:1e:cb:d6:e3:37:75:
06:62:91:75:57:5e:bd:e7:11:8a:9f:96:9b:60:21:
86:14:37:3f:7a:1c:c5:f8:a9:32:0f:40:f8:5f:ad:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BB:1F:0B:5A:BE:3A:E2:95:55:1F:86:BC:0D:0D:0D:9C:EE:B9:3E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151786.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:d8::/48
Signature Algorithm: sha256WithRSAEncryption
8f:fe:75:60:c4:2a:78:64:d4:41:74:61:c1:6d:b7:47:ee:c0:
98:cb:ea:71:93:7d:33:66:30:b7:f4:30:b9:d0:02:fc:9c:2c:
b6:82:3d:46:05:8f:12:14:fd:b4:a4:08:75:59:f5:3d:9a:98:
a1:fe:fa:59:b0:7e:8a:10:7c:0d:60:db:61:61:ea:5c:f0:65:
f8:94:00:35:15:52:7c:36:25:30:c3:73:d8:f2:0f:6e:a8:4c:
41:1f:dd:bf:a4:24:33:75:ba:a6:d9:d3:d4:87:36:b9:c9:92:
a7:b2:63:35:a5:1c:ae:25:a5:91:14:61:08:a7:30:94:14:eb:
61:35:ed:1d:4d:56:39:8a:f0:bd:a8:3c:61:7e:84:d6:9e:18:
3a:3d:5d:8d:f4:77:ec:88:5c:5e:eb:3f:85:3d:cb:7a:7e:fa:
c7:73:df:d3:2e:24:09:ae:39:28:96:fe:ae:01:fe:be:1b:9d:
cc:ab:e7:ed:5f:1b:49:a7:e1:28:56:4c:cb:1e:ac:3d:bf:09:
79:2d:81:88:e0:1f:ad:ae:2d:94:76:f1:31:ff:7b:68:29:99:
4a:86:34:9d:f1:cd:2a:10:7e:db:2b:73:87:e7:02:1c:80:c5:
0d:52:db:8b:a3:9d:ac:71:dd:04:93:4a:c7:85:cd:6a:ab:1a:
c3:20:b1:93
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUapS56oHh/7snjxQuErE11bmXNsYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MTAwODQ0MjFaFw0yNzA4MDkwODQ5MjFaMDMxMTAvBgNV
BAMTKDI2QkIxRjBCNUFCRTNBRTI5NTU1MUY4NkJDMEQwRDBEOUNFRUI5M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQzTJ+/UN0kJg/+6sLI5PB2XIh
8Hjxnca6iUXtR3RVLo8xx5WScmJhwiAasDHSQx5DPSVSQFJoxd5NswmPDbDBWhZ6
izy2xLHWRY8Mvw8wEshY8/CJtA0N5yZp8CS9uKBy1Ct0xRUhGxgAyZOC8RI0D6Sq
I8A5qgZQeB5yCft2YwzzawauDrcyETfzvC91BzBZ1Yxk3NywIo7uRjBxGHVVa9ZS
ieyjtvSBOlJdRu6fxF5zV9GxT6WqZmdAmVy3K01kJ9v4UMNjm+18s0T/UfZ8lQ4e
agol4ToH3B7L1uM3dQZikXVXXr3nEYqflptgIYYUNz96HMX4qTIPQPhfrQ5NAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUJrsfC1q+OuKVVR+GvA0NDZzuuT4wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTUxNzg2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AADYMA0GCSqGSIb3DQEBCwUAA4IBAQCP/nVgxCp4ZNRBdGHBbbdH7sCYy+pxk30z
ZjC39DC50AL8nCy2gj1GBY8SFP20pAh1WfU9mpih/vpZsH6KEHwNYNthYepc8GX4
lAA1FVJ8NiUww3PY8g9uqExBH92/pCQzdbqm2dPUhza5yZKnsmM1pRyuJaWRFGEI
pzCUFOthNe0dTVY5ivC9qDxhfoTWnhg6PV2N9HfsiFxe6z+FPct6fvrHc9/TLiQJ
rjkolv6uAf6+G53Mq+ftXxtJp+EoVkzLHqw9vwl5LYGI4B+tri2UdvEx/3toKZlK
hjSd8c0qEH7bK3OH5wIcgMUNUtuLo52scd0Ek0rHhc1qqxrDILGT
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:56:10 2026 by rpki-client