Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153377.roa
File: AS153377.roa (raw, json)
Hash identifier: 4GKGKfUXizdP6BjFKntbednUsEoAVTDYmyM783d9ysc=
Subject key identifier: A0:DC:FD:B7:89:6A:83:11:A9:3B:C1:59:B0:D1:70:08:00:AC:87:DC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 56DDF6D25F9300C85434DE96F1D601446081B0FD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153377.roa
Signing time: Fri 17 Jul 2026 12:49:13 +0000
ROA not before: Fri 17 Jul 2026 12:44:13 +0000
ROA not after: Fri 16 Jul 2027 12:49:13 +0000
asID: 153377
IP address blocks: 2a13:9500:c6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:dd:f6:d2:5f:93:00:c8:54:34:de:96:f1:d6:01:44:60:81:b0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 17 12:44:13 2026 GMT
Not After : Jul 16 12:49:13 2027 GMT
Subject: CN=A0DCFDB7896A8311A93BC159B0D1700800AC87DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:35:25:c5:fa:e0:90:d5:4c:37:73:ae:b7:
e0:20:59:f1:c4:4f:c0:7b:84:fa:c1:f8:f2:95:66:
0a:85:b8:34:05:ad:ce:09:ba:ba:35:a0:2f:d9:df:
7b:fc:40:06:bb:aa:d1:f6:77:69:c7:88:9e:1e:52:
92:c8:d4:97:95:cf:b1:6f:d4:fd:14:46:a1:14:a3:
9e:6d:58:cc:45:44:ca:c6:13:ef:79:86:5f:4e:f7:
31:86:2e:c3:7d:97:5b:65:ed:96:d7:48:a1:e3:fa:
c9:f0:df:70:75:1e:c3:70:bb:b8:00:b4:23:81:7b:
6d:a6:3a:45:e6:67:3a:66:c7:ba:4f:a0:b6:cf:10:
41:aa:ae:93:fa:c0:00:c6:16:39:b5:34:3c:ae:53:
7c:2a:4a:90:f3:75:cf:e3:4f:38:1d:4a:59:5c:7f:
81:8c:92:0a:49:df:8b:8b:4b:5b:31:3a:17:a0:84:
71:f0:ba:5f:99:31:2c:e7:d6:69:db:da:02:54:5a:
d1:64:d2:4a:4c:c3:8a:47:85:b8:ac:cf:59:28:0c:
e2:71:b1:81:c2:8a:e1:f5:4f:79:ff:04:b0:c4:0f:
a4:9a:bf:ff:24:c6:83:fc:10:6e:10:f1:e6:ef:9c:
bf:86:4e:b3:c6:56:1b:0d:4e:75:c7:4f:88:98:5a:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DC:FD:B7:89:6A:83:11:A9:3B:C1:59:B0:D1:70:08:00:AC:87:DC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153377.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:c6::/48
Signature Algorithm: sha256WithRSAEncryption
59:f5:46:3e:71:01:ba:58:69:84:3f:e6:25:4d:81:6c:a2:65:
80:3a:e5:16:4c:c9:c6:e8:6e:cd:6d:e1:17:6e:b7:2e:e1:93:
ea:f9:fc:cf:68:37:65:2c:5c:29:16:07:c7:d2:ca:e9:19:0f:
e9:f2:9b:96:64:c6:80:04:bf:77:27:74:05:ab:72:c5:9e:1f:
8b:da:98:cf:f0:6e:f3:ba:60:5a:4b:fd:cf:49:bf:50:f4:c1:
83:b1:9f:e0:97:9d:df:f3:93:57:6a:38:a4:11:92:06:2d:20:
e3:9d:3d:0a:bd:9b:0c:12:8e:e7:13:e6:50:c2:4c:c9:ad:e7:
80:7a:06:a8:c1:99:58:73:65:bd:ed:bb:b5:d3:f0:60:64:79:
b1:0a:f5:c8:41:c8:a8:76:29:ff:22:0d:4e:b2:46:fc:30:04:
76:cc:55:4e:c3:42:b9:0b:55:7c:3b:02:c9:a4:20:73:ed:dc:
1c:17:e2:5a:37:30:c7:d4:fc:18:c8:ed:34:9c:16:b3:39:42:
59:37:96:fa:80:c4:03:a6:9b:10:1b:cc:a2:68:7e:2e:e6:51:
57:67:f8:d6:7a:4f:26:d5:49:cf:3c:65:23:1e:92:ca:d8:53:
f9:bc:88:76:45:fc:76:94:3c:bc:d4:66:e5:3e:e8:7c:04:dd:
ff:d5:95:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:05:15 2026 by rpki-client