Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151786.roa
File: AS151786.roa (raw, json)
Hash identifier: g0aoZBWaZZUeeHwVa5sjvm8D8R8R73EHCpLZqC8plxA=
Subject key identifier: 32:8D:35:08:59:06:CC:9D:AB:4B:81:EB:68:DF:0E:93:17:B6:15:36
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 72CC138494B5654FD96F4B6ADDB455245A812DE4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151786.roa
Signing time: Mon 08 Sep 2025 08:05:06 +0000
ROA not before: Mon 08 Sep 2025 08:00:06 +0000
ROA not after: Mon 07 Sep 2026 08:05:06 +0000
asID: 151786
IP address blocks: 2a13:9500:d8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:cc:13:84:94:b5:65:4f:d9:6f:4b:6a:dd:b4:55:24:5a:81:2d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 8 08:00:06 2025 GMT
Not After : Sep 7 08:05:06 2026 GMT
Subject: CN=328D35085906CC9DAB4B81EB68DF0E9317B61536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0a:7f:a6:1f:4d:01:1d:1f:41:36:3a:73:71:
7e:55:f8:7e:f4:02:12:f3:9b:2b:30:6a:bf:9d:05:
05:25:27:27:07:c6:a2:ef:45:7c:4e:d3:da:99:33:
7e:c4:a0:3f:0c:16:68:47:6e:a4:c3:c2:55:46:bd:
e9:8d:06:2e:0e:c1:f5:9a:b3:09:5a:10:e2:0a:4e:
c5:d7:13:5e:fd:ec:6d:a5:6f:ab:5f:fe:87:d1:7e:
65:c2:92:e3:5f:b0:3b:45:e9:c0:47:f0:a6:06:0b:
fe:0e:3a:c0:37:29:17:2d:0f:5e:3c:d6:c0:b4:07:
33:d4:19:d1:79:cb:15:18:d2:c4:16:24:ba:cf:53:
ca:b3:6d:3f:8e:6d:f6:81:18:5a:28:9b:ab:7e:e2:
26:86:93:0f:b2:80:35:e9:9e:71:40:7f:0a:1b:2a:
e6:cc:93:1d:8e:40:74:a6:56:81:ab:92:28:6a:c0:
2a:44:e5:96:f8:66:c5:cc:ac:53:1d:f0:ea:3d:90:
b2:58:be:be:98:0f:6d:fe:e6:70:11:11:77:d0:d5:
c4:9d:fb:96:8c:cf:dd:84:6f:b1:84:8e:dd:86:a8:
fa:e1:8c:4d:ec:1a:2d:41:c3:70:4d:11:d7:0b:f2:
9b:4a:d9:55:04:58:59:97:c7:89:7a:78:eb:d5:e1:
62:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8D:35:08:59:06:CC:9D:AB:4B:81:EB:68:DF:0E:93:17:B6:15:36
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151786.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:d8::/48
Signature Algorithm: sha256WithRSAEncryption
80:b4:ad:4c:0e:1f:47:72:fc:c1:08:f9:87:28:28:ce:c2:c6:
25:e0:fe:76:99:de:93:3b:1a:66:0d:ad:3c:29:db:7e:c5:04:
15:7c:02:40:24:fb:d3:ce:4b:e1:55:d8:ff:76:8e:5e:af:cc:
a7:f7:07:6a:0b:fd:75:4b:8e:5e:bc:a5:53:4f:65:2d:2e:f3:
a6:75:a6:d1:76:b0:5e:92:8e:3c:b0:6d:a0:06:a6:e7:ff:3d:
53:a7:bd:bf:43:26:73:e2:db:2b:be:cf:e4:c6:0f:82:4d:a4:
fc:5b:fb:4c:81:53:95:8b:f2:e0:33:09:b7:12:3c:d3:f2:fe:
d2:94:04:86:1e:1d:f4:ce:fa:f1:12:12:93:9b:ba:7c:4c:95:
18:89:4b:68:82:6a:2a:ee:b3:f8:81:86:26:e9:d8:1d:17:c0:
9e:a1:39:d1:6e:65:59:c1:4c:53:24:c7:cf:24:d6:e1:aa:07:
a8:79:2d:45:95:19:44:4f:95:cb:5c:54:89:0e:ca:a1:67:a3:
68:1a:99:cc:df:6b:49:f9:a9:a0:6f:ef:ae:2b:68:66:39:35:
29:ef:8e:71:94:7f:08:0f:4b:80:11:ae:df:6c:3a:81:94:fb:
be:23:72:31:50:f6:5d:03:45:49:60:38:1a:ca:bd:be:99:d2:
c5:4a:c0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:27:42 2025 by rpki-client