Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: onRfVpsWFnG8uALdhqGZM7MsD23Wq/mPjtMc7xTbNuo=
Subject key identifier: A2:A0:67:13:16:93:01:03:0A:28:94:50:A4:E8:1A:C4:A5:D8:F9:B4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6E44E144F2542FE79AA3B4723AD8CCD94AC10593
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
Signing time: Wed 08 Jul 2026 09:10:28 +0000
ROA not before: Wed 08 Jul 2026 09:05:28 +0000
ROA not after: Wed 07 Jul 2027 09:10:28 +0000
asID: 152179
IP address blocks: 82.21.80.0/23 maxlen: 24
82.26.132.0/24 maxlen: 24
82.29.45.0/24 maxlen: 24
82.47.184.0/24 maxlen: 24
82.47.191.0/24 maxlen: 24
82.47.249.0/24 maxlen: 24
82.47.255.0/24 maxlen: 24
2a13:9500:57::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:44:e1:44:f2:54:2f:e7:9a:a3:b4:72:3a:d8:cc:d9:4a:c1:05:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 8 09:05:28 2026 GMT
Not After : Jul 7 09:10:28 2027 GMT
Subject: CN=A2A06713169301030A289450A4E81AC4A5D8F9B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ae:c3:a4:98:88:0d:05:11:e9:0b:95:93:1a:
ad:3e:6f:da:1e:cd:df:bf:5a:53:4d:03:d7:4d:63:
18:3c:f4:bb:70:0e:c5:29:b2:24:bb:ba:31:84:80:
98:1f:0f:60:67:db:ee:49:70:60:b9:f9:1d:a5:6a:
cf:4a:5f:61:c5:4f:24:40:b4:ea:fe:3a:2b:e1:f4:
a0:c4:13:f4:73:81:03:4e:73:f2:f1:17:e0:2b:4a:
f1:44:cb:b2:7b:8f:86:63:00:74:ba:30:44:08:20:
7f:54:59:fe:12:12:3c:8c:fa:1c:fa:ed:9c:49:29:
aa:67:07:4c:95:5c:b3:27:e8:25:9e:73:89:1f:a5:
93:96:37:a5:ad:5a:7e:d8:1f:65:be:83:6b:95:7c:
58:b1:9b:10:07:e7:f4:47:99:c9:0a:d0:2f:b8:4e:
f0:46:54:03:0c:7b:be:88:6b:0c:6e:74:ee:cd:f7:
bf:31:ba:29:e5:2a:e9:1c:96:24:0f:16:bb:8c:35:
ea:1c:64:af:1f:07:ce:09:5a:9c:6c:c3:f8:f6:75:
a4:dc:b3:33:b9:52:17:38:1e:63:51:8e:4d:4d:74:
c4:3a:8e:b9:26:62:0d:1d:06:34:10:c6:cb:37:39:
28:7e:c9:61:e3:23:0e:28:f1:e4:8b:38:6a:e4:39:
50:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A0:67:13:16:93:01:03:0A:28:94:50:A4:E8:1A:C4:A5:D8:F9:B4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.80.0/23
82.26.132.0/24
82.29.45.0/24
82.47.184.0/24
82.47.191.0/24
82.47.249.0/24
82.47.255.0/24
IPv6:
2a13:9500:57::/48
Signature Algorithm: sha256WithRSAEncryption
78:a6:fa:20:0d:0d:e5:ee:61:cc:42:a2:49:ec:83:1f:b9:13:
19:91:ae:a9:e0:17:33:b1:d6:82:85:13:e1:9d:4c:85:7e:1c:
00:78:30:2d:be:48:a2:c4:33:67:7f:c6:ff:e0:05:4d:2e:99:
16:4d:dc:4f:63:71:e4:54:02:a1:cf:cf:03:20:f2:90:6d:3c:
dc:06:1f:05:7b:a3:36:42:2b:c0:d5:86:05:84:58:0a:4b:59:
84:49:14:56:33:4d:b1:a2:85:aa:c8:bb:47:44:cb:8f:a7:8c:
81:b4:2b:71:8c:18:3f:0c:c2:b2:16:58:a7:ae:7b:47:18:fb:
9e:d4:b9:8f:51:65:9f:59:06:83:dc:3f:e9:9d:30:59:65:ce:
48:7f:3b:19:81:da:c7:65:bf:55:58:b1:8f:ee:08:2f:42:05:
eb:45:73:6c:94:7b:42:77:30:e6:67:a4:06:46:9d:b6:b0:7b:
39:80:e3:08:41:5e:83:0a:45:a3:21:4f:cb:65:0f:e1:50:c9:
31:0e:d3:2f:dd:8b:a9:6c:22:14:02:98:36:3b:ff:3a:7c:d6:
20:9a:12:15:c3:95:bf:bc:e7:e5:16:c0:4f:45:03:79:80:db:
b2:1a:90:73:92:d6:08:83:b8:93:07:e0:4b:d9:6e:b5:81:ee:
6e:9d:f8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:08:19 2026 by rpki-client