Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152565.roa
File: AS152565.roa (raw, json)
Hash identifier: dDDiFt16i/tPxwDAeCnpCuDumSFybJ3sDdGkh4mM6uQ=
Subject key identifier: 02:67:87:34:FC:0A:8A:0E:B4:13:0F:46:FF:26:87:A9:E5:5C:E3:94
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 026FE6F63010DEBBCF933EC42816E8D6FECADB42
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152565.roa
Signing time: Sat 01 Aug 2026 12:49:16 +0000
ROA not before: Sat 01 Aug 2026 12:44:16 +0000
ROA not after: Sat 31 Jul 2027 12:49:16 +0000
asID: 152565
IP address blocks: 2a13:9500:cb::/48 maxlen: 48
2a13:9500:d0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:6f:e6:f6:30:10:de:bb:cf:93:3e:c4:28:16:e8:d6:fe:ca:db:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 1 12:44:16 2026 GMT
Not After : Jul 31 12:49:16 2027 GMT
Subject: CN=02678734FC0A8A0EB4130F46FF2687A9E55CE394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:b4:1c:63:35:2f:5f:bb:4f:f7:a4:64:35:
6f:74:cd:d4:0e:87:2b:3f:5b:94:db:ed:bf:bd:88:
d0:ae:4c:d4:f6:07:80:8d:04:a9:99:4d:ae:5e:89:
29:40:72:46:d4:38:5e:76:be:b9:4c:a7:02:77:d7:
9f:f6:c9:49:fd:80:58:15:ce:37:81:42:f0:a2:26:
40:cf:46:e4:46:a1:d7:c0:bd:b1:d4:e0:03:6b:1c:
04:c1:f5:38:fe:f7:35:9d:1f:50:8c:66:9e:a7:da:
6b:16:9b:85:9a:85:30:cb:c0:ac:b0:9c:43:6d:04:
c5:44:98:64:51:ad:cf:30:d5:ee:19:f2:5c:e3:32:
3c:7e:6b:42:57:c4:a0:4a:04:2d:5c:ec:97:31:dc:
b3:18:27:13:f9:0e:63:72:2f:8c:00:7e:ca:7b:bc:
24:f8:37:ab:fe:ef:c5:64:39:0c:a6:18:18:81:d5:
6a:15:16:45:b7:00:99:2c:c3:e0:83:02:fe:83:c8:
91:88:dc:0f:2b:52:ca:43:a0:0e:9c:02:e8:87:9f:
e8:8f:14:dd:38:7d:37:b7:be:64:82:5b:89:1c:25:
3b:d7:30:89:63:b0:e7:57:13:35:ae:c0:05:7f:87:
c2:2f:fd:0d:a9:8d:90:61:f7:c7:5c:24:f6:a3:07:
ae:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:67:87:34:FC:0A:8A:0E:B4:13:0F:46:FF:26:87:A9:E5:5C:E3:94
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152565.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:cb::/48
2a13:9500:d0::/48
Signature Algorithm: sha256WithRSAEncryption
78:46:68:1d:12:66:b0:4e:ef:07:1e:52:15:f0:0e:8f:d5:28:
45:94:7e:e1:de:9c:bb:36:e0:9a:2f:1c:84:ae:98:e3:31:81:
41:d9:8d:92:f5:98:58:1b:7d:4a:14:44:6e:d5:3b:08:dc:54:
6e:d9:d7:8c:21:9d:97:e3:a3:37:02:88:47:c7:b6:ea:a8:44:
50:93:e4:02:57:94:9b:af:b0:08:c4:1b:eb:03:f1:2b:0c:97:
b5:bd:37:d4:c1:ac:85:e6:a9:4c:12:dd:bd:c7:8b:54:e8:93:
fd:b1:28:c9:9e:23:64:3e:ab:b5:81:0c:48:7c:e1:fd:16:81:
c1:61:cc:e8:7d:7a:69:ca:c5:c1:94:e9:83:d4:0c:3d:2c:8d:
72:20:89:02:11:f6:f2:8d:33:7d:26:fe:07:e0:72:ca:46:89:
10:9f:c4:43:fa:08:69:d7:1f:c6:2d:61:44:7b:28:3b:89:88:
61:c7:7f:6b:9e:de:5c:ee:9c:32:a1:43:3c:fa:4c:cb:07:6c:
64:d7:26:78:b0:a9:03:4b:ae:4c:ea:79:df:64:d3:9f:ad:ec:
c3:40:9f:47:59:ee:e4:67:14:38:4e:ba:9e:8e:9d:08:10:06:
d8:1a:62:1d:cf:80:6c:6c:27:1b:09:d8:30:dd:8f:6c:b2:2f:
fd:07:8a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:31:22 2026 by rpki-client