Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: hne3j/VA6r3JgqAwO2xI3K5z3K7KudnAaGilzMtSie4=
Subject key identifier: 13:FA:FE:B0:09:7F:D8:64:21:78:84:FE:32:EC:D4:91:AD:07:8D:F4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 388C82C969FAF7177871ACB54C20D7AF7425A5CF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
Signing time: Mon 31 Aug 2026 05:53:52 +0000
ROA not before: Mon 31 Aug 2026 05:48:52 +0000
ROA not after: Mon 30 Aug 2027 05:53:52 +0000
asID: 152179
IP address blocks: 82.21.80.0/23 maxlen: 24
82.38.212.0/24 maxlen: 24
82.39.150.0/24 maxlen: 24
82.39.170.0/24 maxlen: 24
82.39.193.0/24 maxlen: 24
82.47.140.0/24 maxlen: 24
82.47.146.0/24 maxlen: 24
84.75.168.0/24 maxlen: 24
84.75.223.0/24 maxlen: 24
84.75.252.0/24 maxlen: 24
84.75.253.0/24 maxlen: 24
2a13:9500:57::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:8c:82:c9:69:fa:f7:17:78:71:ac:b5:4c:20:d7:af:74:25:a5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 31 05:48:52 2026 GMT
Not After : Aug 30 05:53:52 2027 GMT
Subject: CN=13FAFEB0097FD864217884FE32ECD491AD078DF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:4d:4c:04:33:f7:7b:d9:af:0b:fa:1b:2b:
29:67:b1:ed:79:69:f7:95:6a:41:73:2f:d0:00:88:
f3:14:c7:97:a8:af:f1:74:54:e3:68:b4:2a:b5:48:
44:a6:e4:ec:82:1f:34:62:e7:a8:72:4d:c0:be:7b:
d6:ba:6a:45:e4:33:c9:bc:89:66:ed:5c:fd:c3:7c:
45:1d:24:18:58:0c:e2:96:6e:f1:d3:e2:d2:55:3e:
fe:9e:71:1a:86:d6:0b:85:b3:cf:5d:c8:e4:28:5b:
96:16:43:73:a3:79:58:05:03:84:87:f4:53:48:2e:
99:bc:ba:a2:58:9c:08:45:b2:22:3b:e7:ea:12:3e:
12:18:20:b4:4c:df:e8:b7:7e:03:91:40:99:b9:f9:
08:bb:2c:d1:69:01:75:7f:78:3c:b7:37:f9:46:fd:
b6:eb:b0:02:a7:ee:14:b4:70:c7:84:dd:4a:ba:69:
f0:3d:30:d1:97:55:ae:cb:14:51:8b:11:ad:ed:c5:
26:09:51:cc:36:b3:79:3b:25:cc:8c:5a:0d:52:c8:
15:85:ff:ea:85:64:1e:f4:6c:ed:42:aa:e5:e4:99:
4f:9e:9e:24:07:1c:3e:8f:73:44:1f:4d:87:82:75:
0e:04:d2:cc:3d:43:68:d2:74:d0:91:69:7e:23:48:
1c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FA:FE:B0:09:7F:D8:64:21:78:84:FE:32:EC:D4:91:AD:07:8D:F4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.80.0/23
82.38.212.0/24
82.39.150.0/24
82.39.170.0/24
82.39.193.0/24
82.47.140.0/24
82.47.146.0/24
84.75.168.0/24
84.75.223.0/24
84.75.252.0/23
IPv6:
2a13:9500:57::/48
Signature Algorithm: sha256WithRSAEncryption
2a:14:1e:d2:cc:82:14:4c:e8:f5:0b:3b:65:6b:dc:69:6b:c1:
da:12:aa:e2:38:08:81:51:79:e1:66:1b:6b:e6:0c:5c:52:ea:
3d:52:65:44:72:ab:3a:e2:18:51:88:3c:ac:5f:f2:6f:d2:bb:
52:e3:b0:87:f4:a7:d6:c8:a0:fe:d7:29:49:ea:59:4d:9c:c7:
08:1f:11:bc:c1:1c:e9:da:46:82:24:b5:2d:78:6a:24:cc:77:
a7:5a:ee:3f:5b:98:18:f0:b8:3f:9f:06:33:8b:ba:9b:50:38:
5b:96:bb:75:a0:7d:82:57:a5:92:fa:48:d3:35:2b:44:a4:88:
3d:a6:b0:ba:0b:8b:ac:9b:b3:a9:e7:fe:89:18:f7:27:9b:32:
c0:93:2f:6e:96:04:56:58:66:df:a2:e9:3b:de:ef:37:72:31:
e3:6c:ae:72:93:99:6f:e0:3d:c0:80:36:d1:80:5c:df:c8:2d:
65:5d:54:4c:5d:10:f4:40:0c:ac:a7:1f:9d:ab:8c:3b:7e:59:
bd:84:2d:a7:f4:96:8d:38:73:08:80:7b:9e:13:27:e7:82:8e:
72:30:1b:f5:cc:3e:5d:39:06:39:f7:8f:7c:d6:b8:23:64:30:
c2:26:ca:72:d2:2b:4b:eb:63:c5:9a:b6:12:71:6e:31:59:49:
37:eb:3d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:10 2026 by rpki-client