Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152698.roa
File: AS152698.roa (raw, json)
Hash identifier: r8i5oPoKGIbWHR8bGbHAze5Qec6n/H1gTFcFppLc/hQ=
Subject key identifier: A5:0A:D9:17:D4:3C:AA:15:33:02:D4:7D:11:1D:E7:6E:CE:3B:5C:E9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6B67AD0B01034F56B036C5B763E65FF23AA1A478
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152698.roa
Signing time: Tue 06 Oct 2026 13:42:23 +0000
ROA not before: Tue 06 Oct 2026 13:37:23 +0000
ROA not after: Tue 05 Oct 2027 13:42:23 +0000
asID: 152698
IP address blocks: 82.47.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:67:ad:0b:01:03:4f:56:b0:36:c5:b7:63:e6:5f:f2:3a:a1:a4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 6 13:37:23 2026 GMT
Not After : Oct 5 13:42:23 2027 GMT
Subject: CN=A50AD917D43CAA153302D47D111DE76ECE3B5CE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ec:c9:c5:44:ac:0c:63:03:88:af:d9:02:fb:
97:d8:46:18:a1:72:5d:7e:d7:da:72:f6:f7:21:45:
2f:e6:73:40:1b:ce:a4:08:f6:ba:96:3b:5d:a5:e5:
bb:aa:ff:d1:83:c9:de:e2:d0:8b:04:12:7a:50:2c:
ba:01:44:93:52:69:38:af:b7:86:5c:04:56:f0:24:
b9:12:06:38:78:d7:68:73:6f:2a:ac:25:16:fd:a2:
83:a0:3b:5d:4b:06:f3:8d:d8:b1:52:0f:90:14:f0:
8f:41:de:c1:65:6a:1b:17:0a:cc:8a:4f:63:e5:59:
00:18:83:f1:2a:a0:aa:3a:2e:55:af:02:19:84:54:
5a:0f:06:6c:95:c0:ec:ab:72:87:42:b9:d3:6a:c8:
26:d8:4b:53:ed:54:7d:71:4b:ec:56:a7:aa:6c:cd:
52:8b:0a:18:47:49:9a:2d:c5:31:c5:f9:8d:b6:36:
0f:b8:46:f6:94:c1:4c:79:86:87:30:94:59:de:db:
74:c7:be:36:44:40:53:90:13:23:f6:e1:03:1c:b4:
5c:6d:b0:6a:e6:01:61:fc:91:5a:fc:44:c7:56:1d:
2d:f3:f0:5d:21:de:a4:75:e6:ae:68:80:bd:ab:62:
41:22:13:fd:59:fe:c1:d5:10:2e:53:3e:78:b1:9e:
1e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0A:D9:17:D4:3C:AA:15:33:02:D4:7D:11:1D:E7:6E:CE:3B:5C:E9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152698.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.21.0/24
Signature Algorithm: sha256WithRSAEncryption
13:27:fa:fc:13:99:63:c9:cb:1b:b3:b1:75:52:34:9f:3e:06:
f7:35:05:83:8f:79:84:99:74:57:dc:e2:e3:15:55:70:9e:fc:
5a:50:48:44:1f:b9:7c:71:1a:e4:11:f7:c9:d1:f8:98:77:89:
16:f3:6e:bd:0c:f5:d2:d5:24:ec:34:a4:a7:db:1f:8a:f9:fe:
58:85:9d:eb:ab:ff:4c:9b:db:1b:1d:9f:d0:a6:2f:4d:8e:34:
66:a0:9d:b7:a4:f5:13:a7:d1:70:e5:13:4a:03:1e:17:e2:af:
45:8d:b1:88:d6:65:35:68:95:f8:05:5d:34:c7:44:ea:69:74:
ce:af:be:83:13:88:e6:22:fd:e9:78:15:c5:dd:8d:3d:fa:7c:
76:f9:bc:cd:9e:dd:00:6e:df:86:a3:98:ec:c6:01:b8:e7:ac:
ec:71:6d:6f:86:f1:ee:09:f3:d3:e4:0f:41:3b:f3:51:56:2c:
7e:88:b4:93:46:ca:6f:72:cf:d7:53:6f:8b:06:fd:4e:7d:e4:
60:99:c8:7f:9b:37:62:a8:b7:2c:cf:90:2d:0c:31:eb:8a:aa:
06:7f:d0:a2:47:6c:8c:e9:90:2a:34:51:02:0a:9c:26:d4:ef:
a6:29:dc:0c:17:c6:06:ab:cb:07:53:d2:f6:9c:a5:5a:eb:41:
cd:6d:2f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:36:10 2026 by rpki-client