Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152672.roa
File: AS152672.roa (raw, json)
Hash identifier: 6hKXNL0+tuX0OMNZ+XQFLexC0Em04Y/OdhrgDADCnvU=
Subject key identifier: 94:A5:35:D1:F6:69:D2:89:B7:E9:96:4F:B2:2F:C1:8E:B2:2F:C2:A5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2C26775693C14F11651F034C54CA4947E1DFA156
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152672.roa
Signing time: Sat 16 May 2026 16:47:13 +0000
ROA not before: Sat 16 May 2026 16:42:13 +0000
ROA not after: Sat 15 May 2027 16:47:13 +0000
asID: 152672
IP address blocks: 2a13:9500:92::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:26:77:56:93:c1:4f:11:65:1f:03:4c:54:ca:49:47:e1:df:a1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 16 16:42:13 2026 GMT
Not After : May 15 16:47:13 2027 GMT
Subject: CN=94A535D1F669D289B7E9964FB22FC18EB22FC2A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:99:cc:7a:1e:14:cb:2f:d8:c3:23:c8:a2:
a9:85:28:eb:7e:04:58:01:6c:bb:59:26:81:d0:5f:
c7:62:98:3a:a6:ca:a7:16:b8:cc:1c:7a:06:a4:db:
cd:5e:d7:7b:86:74:0f:58:76:b6:10:46:d8:aa:d6:
9b:54:63:90:62:1e:f4:7b:22:05:4f:12:81:81:4c:
45:65:92:fe:e9:36:52:42:11:b2:ca:bd:b7:cb:3f:
f4:b8:c5:81:23:18:7b:a4:25:da:00:17:02:98:a3:
26:ee:f1:97:99:40:94:b8:18:3d:4e:99:55:d4:1d:
d3:f6:24:09:fd:89:7e:d2:f2:c6:51:11:68:b6:d8:
65:36:8c:f3:f0:dd:07:db:a5:08:db:7f:dc:a9:17:
58:89:95:91:a2:c8:de:09:07:63:94:bb:91:42:15:
9c:ed:c8:d9:5c:11:15:86:cc:a8:37:07:9d:79:98:
f3:e5:53:3f:27:ae:77:07:70:76:03:88:5e:a6:e1:
af:0d:92:e7:3f:4f:be:4b:47:a7:d0:28:a3:e8:4a:
d0:c5:d0:70:cb:37:42:ea:4b:16:fc:9b:db:3e:28:
5d:cb:a5:cf:0c:90:6d:97:87:d7:9f:74:9b:6f:3d:
57:fd:13:cc:b5:b4:45:27:a8:fa:c0:0f:e1:ea:61:
d1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A5:35:D1:F6:69:D2:89:B7:E9:96:4F:B2:2F:C1:8E:B2:2F:C2:A5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:92::/48
Signature Algorithm: sha256WithRSAEncryption
35:b2:7e:9d:98:2e:09:54:50:98:9f:a2:e1:1e:0f:03:77:45:
34:74:c0:8b:f9:56:6e:2a:e7:c9:a0:76:13:2a:06:eb:a5:5d:
75:2e:ec:d9:7e:90:da:7b:e4:b2:b9:83:b6:81:6a:e4:ee:36:
c3:d6:31:a7:c4:87:2f:e6:01:03:4e:f9:af:01:e6:52:9b:bb:
ef:b8:bc:9d:12:3f:d2:24:99:af:ee:9b:76:d3:de:40:6b:f8:
11:41:de:17:10:03:c8:ff:b2:43:da:bb:ad:e9:ed:21:ac:51:
d8:b1:79:fc:65:12:37:9d:9b:66:b9:95:43:84:98:43:bf:f8:
29:c0:2e:dd:61:8f:f9:0a:17:72:cf:f5:e7:c5:90:9a:66:33:
d7:47:95:28:51:19:cd:1f:e1:a0:5c:4b:89:98:f4:29:05:1c:
7a:e3:8c:78:5d:59:3d:eb:d4:1e:13:2b:e6:a4:87:9e:6e:8f:
75:e4:33:84:8b:8b:54:de:a7:8c:62:b2:a4:53:92:82:5b:cf:
0f:82:a2:68:1c:1b:e7:de:e7:9a:2a:61:40:53:9f:eb:8d:55:
e7:8c:d8:36:2f:29:f5:da:71:d7:96:99:e2:78:07:8e:2d:9d:
e3:76:96:e6:e0:e5:dc:5e:2b:4a:3c:ad:79:23:5f:c3:2f:20:
8b:e6:a9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:40 2026 by rpki-client