Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152390.roa
File: AS152390.roa (raw, json)
Hash identifier: RSzJ7cfS67aGY/gnIwmqZB95tFAGvQUTMW+CwlpRUz0=
Subject key identifier: 0A:51:A5:DF:CD:31:0E:39:06:F1:D7:93:F8:F2:1C:9E:0F:C8:EA:97
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 47DFD6A4CC9132CF7891A4F6C2429D8DAF85E891
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152390.roa
Signing time: Fri 26 Jun 2026 11:48:41 +0000
ROA not before: Fri 26 Jun 2026 11:43:41 +0000
ROA not after: Fri 25 Jun 2027 11:48:41 +0000
asID: 152390
IP address blocks: 2a13:9500:4c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:df:d6:a4:cc:91:32:cf:78:91:a4:f6:c2:42:9d:8d:af:85:e8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 26 11:43:41 2026 GMT
Not After : Jun 25 11:48:41 2027 GMT
Subject: CN=0A51A5DFCD310E3906F1D793F8F21C9E0FC8EA97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2c:0d:8f:12:c2:a5:1a:09:c6:8e:77:b7:50:
9f:3f:3f:8e:e3:c0:da:be:85:d7:76:b3:35:1c:42:
12:35:4f:f1:98:bf:9a:cc:14:f4:61:88:fc:d3:97:
73:c6:a4:f4:fa:7d:1e:f7:f2:72:7c:ef:77:45:60:
ca:f6:d5:07:d4:8c:a7:f8:23:5c:5a:1c:30:59:c2:
23:26:b8:2e:30:db:2c:f5:f1:87:39:ca:65:46:39:
8f:52:f4:c0:b9:86:3e:b7:54:e6:21:b8:5c:57:ae:
6e:8f:4c:6c:c3:43:b4:3c:29:7b:81:81:c3:b8:57:
e0:b7:65:60:e4:07:e7:1b:c2:ed:e2:78:25:f3:bb:
a2:ea:17:1f:ef:2b:ec:56:80:df:f4:f4:3a:87:56:
ca:a5:91:d2:d5:c8:b9:6c:ee:aa:6d:25:01:81:09:
9d:05:9d:7a:3b:f2:19:dc:4b:61:4e:03:10:43:bc:
d4:03:8f:6f:a9:c5:7c:46:fd:09:82:e5:53:8b:af:
0d:21:3e:bc:c8:c1:7e:90:90:10:a6:7a:8d:51:d3:
28:2a:05:bb:dc:11:c9:e8:96:fe:95:44:cd:a2:2d:
25:fe:4a:da:42:71:90:37:3b:a4:7a:71:32:26:1d:
3f:26:fe:1d:fe:ee:b7:3f:90:44:ab:ed:a1:cc:3f:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:51:A5:DF:CD:31:0E:39:06:F1:D7:93:F8:F2:1C:9E:0F:C8:EA:97
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152390.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:4c::/48
Signature Algorithm: sha256WithRSAEncryption
57:95:41:aa:be:6d:fb:90:9b:8a:b7:4d:33:92:dd:68:12:20:
55:36:f8:76:0d:f1:29:42:ab:4a:af:60:27:bc:ac:03:36:5f:
64:94:b7:6d:8a:54:63:f5:b5:fa:3f:78:f8:e9:9b:3c:4e:ed:
87:e6:84:fb:eb:fb:18:dc:54:ae:05:3e:f6:10:b1:78:74:1d:
16:90:b3:2b:8f:e4:d6:e9:b2:2e:fe:39:1a:cb:4c:7b:43:eb:
e7:4c:a8:5a:94:19:c4:b4:00:ad:f3:4b:be:cc:44:a2:2c:9b:
f6:45:40:ac:20:09:d5:9d:02:a8:c0:93:c4:ab:80:07:7a:cd:
4a:f3:a7:65:05:b0:ba:f0:f6:55:77:71:9e:99:18:a8:5c:e8:
a2:c9:68:3a:0f:e5:94:7d:9b:d9:d8:d2:b4:9a:7c:27:93:e7:
ad:ef:5e:3d:43:ae:9b:95:04:f3:e6:ec:75:2e:59:e2:9f:64:
f4:2d:49:24:23:10:52:d6:ba:6c:30:a0:af:aa:9e:72:53:de:
2f:8c:66:2b:fe:4b:bf:6c:b2:1b:46:3d:ee:f9:33:e2:37:ac:
4c:94:6f:60:2d:38:19:27:01:d4:ed:cc:31:dd:7c:d6:e7:d6:
89:dc:09:77:0e:ba:0a:9a:23:77:1d:f3:55:b3:c5:49:e0:4d:
c6:99:ab:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:05:59 2026 by rpki-client