Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153169.roa
File: AS153169.roa (raw, json)
Hash identifier: 45elmaezw5I4OGdBKe/NzESiRXxYqlslJ6hKfHRWvAg=
Subject key identifier: 32:DC:D1:CB:A4:9B:2D:72:55:7E:3C:61:63:63:38:A7:85:28:76:0E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3A0B8E20639A253AC5955BBD2272B516F22B2994
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153169.roa
Signing time: Fri 22 May 2026 00:24:09 +0000
ROA not before: Fri 22 May 2026 00:19:09 +0000
ROA not after: Fri 21 May 2027 00:24:09 +0000
asID: 153169
IP address blocks: 82.22.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:0b:8e:20:63:9a:25:3a:c5:95:5b:bd:22:72:b5:16:f2:2b:29:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 22 00:19:09 2026 GMT
Not After : May 21 00:24:09 2027 GMT
Subject: CN=32DCD1CBA49B2D72557E3C61636338A78528760E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9b:85:cd:bc:fa:69:7d:90:b9:89:67:c6:1b:
8b:90:25:63:8e:15:c7:05:8d:24:6c:b3:aa:7d:21:
68:bb:8f:d2:ba:10:27:d0:17:c3:f8:0f:3b:ce:66:
4d:79:ca:44:28:f3:f9:32:e1:e6:b5:37:ea:b0:80:
ad:62:a0:d8:fe:c3:05:30:f0:0b:d3:a8:b7:46:2f:
07:7f:5a:c6:28:0a:fb:b5:25:41:99:5c:05:15:e2:
cc:bb:94:1d:2e:ae:f0:64:19:dd:2d:e0:4c:e4:63:
d5:1c:b7:0d:d5:10:eb:72:f7:f5:03:f5:f3:4c:51:
34:78:24:ba:46:6a:48:08:28:36:83:4c:6d:ab:3f:
88:87:f0:bb:68:75:c5:48:bc:9e:15:12:fd:76:9b:
e8:ec:0f:d4:4a:5e:c9:22:62:59:67:96:c0:66:aa:
ce:19:12:eb:2e:d7:d4:75:a6:47:48:43:c8:ad:20:
4c:9f:3b:c3:15:89:b1:6a:64:d4:2f:e5:77:96:46:
96:25:71:44:59:67:42:75:17:69:82:82:ec:a5:84:
63:36:03:75:6e:01:af:61:74:2d:83:56:ad:a7:03:
b1:60:b1:bf:3e:e7:fd:31:42:0e:23:00:1f:7d:6b:
63:b7:54:16:f5:64:e9:74:55:94:e0:81:2c:84:57:
b7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DC:D1:CB:A4:9B:2D:72:55:7E:3C:61:63:63:38:A7:85:28:76:0E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153169.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.125.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:fe:7f:f1:f7:3d:0b:11:5a:ec:fd:83:61:ec:38:23:a3:ef:
29:ed:fa:24:35:20:c1:49:19:d6:e0:ea:1c:9e:10:e2:fa:a5:
f0:c8:a7:f3:e8:1d:9e:db:95:84:41:17:5d:6b:b3:78:1b:f6:
58:9a:2c:67:af:41:1e:91:25:2e:d3:69:27:e0:a5:37:11:26:
3e:53:bb:06:bd:37:c3:0b:c1:21:4a:f2:0d:00:bd:e2:f8:cd:
e3:0f:cb:a1:bd:1e:47:f3:b3:6f:35:6c:cb:3c:ff:1b:10:a0:
f1:2a:76:58:df:83:49:2a:e8:aa:ce:f7:73:ef:b0:4a:3d:e4:
6c:ca:91:ae:07:5f:8e:9b:10:d8:7b:45:e5:84:6b:69:23:5a:
85:b3:ac:e5:6f:68:f9:33:bd:98:4e:b2:1e:94:1f:49:6a:fc:
1a:bf:3e:da:88:9b:d4:2a:f2:ad:7d:52:39:54:03:e4:bc:76:
6b:8c:8d:c8:50:57:8c:bd:e1:f3:68:a4:7d:96:33:f2:01:7a:
29:62:ea:67:51:63:84:ec:d8:6b:67:a0:91:9d:95:77:be:59:
b3:94:31:af:83:e7:3d:c8:a8:84:00:1d:38:0f:6b:46:f8:ba:
a5:d5:a8:88:94:8a:5c:e2:71:4b:0f:ff:b0:3b:9c:4d:66:29:
8b:f2:84:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 14:18:41 2026 by rpki-client