Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153174.roa
File: AS153174.roa (raw, json)
Hash identifier: YP5Jt/VseoSTyd19bR//zlt0nSEOYhvumm5/ahLQAEc=
Subject key identifier: 56:4D:F0:F3:01:89:44:67:D1:57:E1:8E:63:CF:D3:1D:3F:EC:42:A4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6137DA497A0DFFD058C615CFD9AFF9C50D5067F8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153174.roa
Signing time: Fri 14 Aug 2026 07:45:21 +0000
ROA not before: Fri 14 Aug 2026 07:40:21 +0000
ROA not after: Fri 13 Aug 2027 07:45:21 +0000
asID: 153174
IP address blocks: 82.21.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:37:da:49:7a:0d:ff:d0:58:c6:15:cf:d9:af:f9:c5:0d:50:67:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 14 07:40:21 2026 GMT
Not After : Aug 13 07:45:21 2027 GMT
Subject: CN=564DF0F301894467D157E18E63CFD31D3FEC42A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:10:79:ca:1b:ce:76:9e:ac:e2:dd:2a:09:
75:53:d4:86:4f:13:8f:90:9b:42:cf:db:f2:c9:74:
ab:24:f2:da:12:12:17:1f:c8:65:4c:11:bb:e4:4f:
64:69:a6:8f:07:69:37:1b:c9:25:47:78:30:8d:e5:
94:4b:ca:ad:46:d4:3b:a9:c6:ef:bb:51:db:aa:bf:
fc:b7:84:6c:c1:95:30:38:a5:c0:82:46:8d:4b:f4:
b1:ce:dd:8c:3a:ec:7d:42:d5:b4:d5:55:c8:b7:8d:
90:2e:62:6d:ca:ea:8b:64:9c:d9:bd:ce:19:3f:72:
86:99:5f:11:d8:70:84:f2:c2:30:d6:9f:57:8b:cd:
b5:37:ca:27:2d:63:c9:74:68:fd:f5:dc:73:2c:71:
4c:2b:3c:64:6e:da:72:49:d6:5a:f8:7f:b7:58:78:
19:b6:c2:2c:b3:09:67:62:c0:49:89:e1:fc:8d:68:
bd:9e:22:e7:0e:1e:3c:b6:2d:3d:a5:97:43:d2:ca:
64:02:59:f3:8c:ed:60:f1:dc:2a:fa:3c:db:e9:41:
7f:6f:99:83:36:29:76:46:e8:53:9f:c3:bb:b3:70:
a7:b2:fd:c9:ad:86:f8:91:4a:b3:09:1e:f0:8a:86:
b1:56:1e:f3:49:31:83:de:a8:64:3a:c6:45:a3:2f:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4D:F0:F3:01:89:44:67:D1:57:E1:8E:63:CF:D3:1D:3F:EC:42:A4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.146.0/24
Signature Algorithm: sha256WithRSAEncryption
82:f2:22:22:d1:14:a1:24:c5:9c:1c:e3:7e:c5:6c:07:a4:cc:
72:ca:52:6b:70:20:0d:b5:55:be:cc:96:fb:af:50:4e:c5:26:
23:86:c8:66:82:04:01:e0:87:f1:b1:35:20:05:98:a7:68:75:
61:ed:43:72:ff:a0:e2:64:04:6a:24:9e:1e:6f:fc:12:6f:fc:
9b:09:54:e4:60:99:b6:2e:a1:0d:b7:02:0c:53:29:26:51:b4:
7b:63:95:c3:46:98:1b:bf:5f:20:f0:c2:f6:c9:f7:f1:e1:c5:
ba:bb:ce:c3:ca:b7:c8:ab:46:f3:57:2c:bc:42:a1:f5:a5:6b:
cc:c3:b3:aa:7e:e2:36:56:ed:7d:5b:72:88:b6:58:01:84:e0:
ea:25:5f:d2:c6:e3:79:92:b3:4f:f6:3c:21:6e:80:e5:01:4f:
dc:da:f5:05:52:97:2d:f2:2e:7a:07:92:77:f6:12:01:8c:89:
db:8c:60:18:d7:25:42:e2:f0:ff:67:3f:ed:8b:8d:3e:07:35:
a0:ee:7f:dc:f3:5d:86:12:2e:61:85:6c:f2:26:91:14:11:9b:
4d:a5:19:b8:36:55:85:ea:74:58:d2:61:5e:33:5e:13:d1:fe:
19:16:e9:e3:9e:8d:33:50:30:9d:a3:63:2c:04:9c:db:29:9e:
65:c3:70:c9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUYTfaSXoN/9BYxhXP2a/5xQ1QZ/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MTQwNzQwMjFaFw0yNzA4MTMwNzQ1MjFaMDMxMTAvBgNV
BAMTKDU2NERGMEYzMDE4OTQ0NjdEMTU3RTE4RTYzQ0ZEMzFEM0ZFQzQyQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSXxB5yhvOdp6s4t0qCXVT1IZP
E4+Qm0LP2/LJdKsk8toSEhcfyGVMEbvkT2Rppo8HaTcbySVHeDCN5ZRLyq1G1Dup
xu+7Uduqv/y3hGzBlTA4pcCCRo1L9LHO3Yw67H1C1bTVVci3jZAuYm3K6otknNm9
zhk/coaZXxHYcITywjDWn1eLzbU3yictY8l0aP313HMscUwrPGRu2nJJ1lr4f7dY
eBm2wiyzCWdiwEmJ4fyNaL2eIucOHjy2LT2ll0PSymQCWfOM7WDx3Cr6PNvpQX9v
mYM2KXZG6FOfw7uzcKey/cmthviRSrMJHvCKhrFWHvNJMYPeqGQ6xkWjL65rAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUVk3w8wGJRGfRV+GOY8/THT/sQqQwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTUzMTc0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhWS
MA0GCSqGSIb3DQEBCwUAA4IBAQCC8iIi0RShJMWcHON+xWwHpMxyylJrcCANtVW+
zJb7r1BOxSYjhshmggQB4IfxsTUgBZinaHVh7UNy/6DiZARqJJ4eb/wSb/ybCVTk
YJm2LqENtwIMUykmUbR7Y5XDRpgbv18g8ML2yffx4cW6u87DyrfIq0bzVyy8QqH1
pWvMw7OqfuI2Vu19W3KItlgBhODqJV/SxuN5krNP9jwhboDlAU/c2vUFUpct8i56
B5J39hIBjInbjGAY1yVC4vD/Zz/ti40+BzWg7n/c812GEi5hhWzyJpEUEZtNpRm4
NlWF6nRY0mFeM14T0f4ZFunjno0zUDCdo2MsBJzbKZ5lw3DJ
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:07 2026 by rpki-client