Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152868.roa
File: AS152868.roa (raw, json)
Hash identifier: 7aDukP/qG3YDpyjWhd08pyiAFnxe3MEFc3CKNaYicBE=
Subject key identifier: E5:8C:3D:1E:67:2D:30:82:31:BA:72:7A:2D:64:68:30:47:72:35:68
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0783E4D7CC6FA90AB580CEFB4F4A71F04544E7FB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152868.roa
Signing time: Fri 10 Jul 2026 06:32:25 +0000
ROA not before: Fri 10 Jul 2026 06:27:25 +0000
ROA not after: Fri 09 Jul 2027 06:32:25 +0000
asID: 152868
IP address blocks: 82.23.136.0/24 maxlen: 24
82.24.71.0/24 maxlen: 24
82.47.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:83:e4:d7:cc:6f:a9:0a:b5:80:ce:fb:4f:4a:71:f0:45:44:e7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 10 06:27:25 2026 GMT
Not After : Jul 9 06:32:25 2027 GMT
Subject: CN=E58C3D1E672D308231BA727A2D64683047723568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:c5:e9:4e:31:dc:e9:c8:db:b1:e2:14:a7:
65:c7:07:20:53:cf:79:dc:63:ff:5b:9f:a2:6b:d6:
47:0d:82:e4:aa:76:1e:06:6c:c3:6d:26:f3:fe:23:
e0:6d:8c:72:33:24:83:89:4c:c0:85:e9:19:f4:22:
cb:24:5e:87:e1:5f:55:da:7d:7b:e4:4a:cf:41:97:
c9:12:8f:b8:db:e4:7d:c1:66:46:0f:c3:79:fb:f5:
a2:e5:81:ac:16:76:9e:a2:41:6b:18:18:ed:a5:ff:
13:f8:39:e5:46:52:30:f6:34:22:a8:f6:a6:c3:b5:
b7:c1:4f:e0:4d:2e:37:ef:81:8c:d1:2f:f8:bd:9e:
8f:a9:3f:71:5e:1b:3a:fc:22:63:33:c6:c5:68:ba:
5a:b6:61:61:33:15:87:77:a6:4c:99:bb:72:b7:3e:
fa:6b:39:12:19:fb:ee:c6:9e:43:4a:2a:13:3e:17:
b3:de:e5:c7:a8:9f:08:07:71:18:e8:f4:04:e7:62:
58:ec:9f:f6:9a:4c:0e:0f:7c:25:e6:2b:ab:24:b6:
3a:af:97:e7:27:bd:5c:93:76:39:2c:40:f2:13:c3:
73:1b:76:15:8d:cf:37:15:98:61:07:fe:cb:64:4a:
ff:4a:7f:a5:b3:7c:e5:86:5e:39:12:4d:f2:ac:ac:
2b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8C:3D:1E:67:2D:30:82:31:BA:72:7A:2D:64:68:30:47:72:35:68
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.136.0/24
82.24.71.0/24
82.47.247.0/24
Signature Algorithm: sha256WithRSAEncryption
67:cb:e1:64:7b:d3:b9:67:39:bb:9e:7e:f1:4f:fe:63:cd:8e:
c6:dd:fa:ba:7c:ff:c0:bb:f3:e7:ed:9a:e6:42:65:24:18:2f:
23:00:07:ec:ec:1e:7e:b0:d1:8d:b8:8c:0b:8a:f4:31:a9:88:
cb:a8:a6:94:81:01:db:c0:a1:b2:b5:52:6c:0c:fc:9f:61:ea:
5a:8f:bb:81:13:43:f9:6e:f7:62:18:22:82:71:40:6f:72:be:
1f:b1:ac:2f:83:b8:30:c4:bb:24:e2:71:42:35:df:86:a3:00:
71:ee:46:ff:da:9b:29:b0:ef:23:de:ee:55:4b:07:43:c5:49:
38:f4:9f:b9:d7:d7:3e:a6:23:2b:1d:f8:8e:16:b4:09:86:2f:
13:7e:f8:10:de:bd:16:cc:7f:21:50:fd:b9:0f:70:ad:c4:4d:
87:2f:c9:1f:54:d5:a9:5c:e4:d4:80:a8:53:f7:78:f6:90:f5:
44:72:66:83:68:15:a8:35:98:18:44:84:df:cf:a1:b0:82:a8:
e9:e5:4c:a5:df:b5:4d:74:c6:cd:76:6a:24:56:5d:b5:64:c3:
a5:75:5b:fe:a2:f2:51:e1:00:73:4b:6a:6c:f6:2a:6e:12:3d:
fc:cd:07:2d:cc:15:cb:d8:0f:6e:15:40:c2:1b:0b:8f:60:d4:
aa:af:7e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:55 2026 by rpki-client