Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153568.roa
File: AS153568.roa (raw, json)
Hash identifier: 0tC/GAMoySqZE+5UJAlIynTYcn+b/kgSnKZRgAHmLhY=
Subject key identifier: E6:19:9A:05:2B:A7:A7:2C:E1:98:0C:80:CA:F4:62:73:07:A1:62:DB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 51BB2EBA887691ED7BF82B61981FC11173AC50F3
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153568.roa
Signing time: Sat 08 Aug 2026 02:45:45 +0000
ROA not before: Sat 08 Aug 2026 02:40:45 +0000
ROA not after: Sat 07 Aug 2027 02:45:45 +0000
asID: 153568
IP address blocks: 82.22.49.0/24 maxlen: 24
82.39.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:bb:2e:ba:88:76:91:ed:7b:f8:2b:61:98:1f:c1:11:73:ac:50:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 8 02:40:45 2026 GMT
Not After : Aug 7 02:45:45 2027 GMT
Subject: CN=E6199A052BA7A72CE1980C80CAF4627307A162DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c8:ce:01:f2:38:ec:34:07:86:66:97:83:8e:
bb:fd:8c:60:e5:a2:fa:55:b7:d3:45:12:14:65:bd:
73:50:73:22:94:64:1a:5b:45:63:95:42:b8:a5:af:
9b:15:25:18:f2:0f:19:c8:fe:a7:d8:7f:23:c8:4a:
a3:76:33:7d:d5:47:b9:f0:9a:85:c0:08:04:33:0a:
89:5a:42:5d:7c:1e:9f:64:cd:ba:63:f4:76:e6:9c:
2f:d1:53:61:fe:b9:b6:aa:88:3b:48:22:fc:41:68:
8d:2d:13:7e:48:b1:70:81:2c:da:d1:f8:39:91:a1:
11:e2:06:38:02:6b:cc:63:f1:03:3d:34:3c:80:9a:
e2:64:8d:0b:ae:d2:77:8b:30:20:e2:0d:a9:5d:5c:
4e:1e:f0:be:64:8d:dc:ab:87:af:45:56:bc:17:11:
ab:62:09:da:d9:07:7a:4b:7c:c3:d7:c4:67:ec:1f:
df:18:79:a5:23:ff:71:00:11:db:13:1e:b7:c0:b5:
33:11:5c:b0:a7:a1:01:c7:3f:a6:59:9a:a9:a7:a8:
1e:82:e0:24:50:1b:50:92:97:54:90:6f:1e:6e:fd:
4d:bc:30:55:a5:2c:44:25:34:4e:98:9e:00:f3:62:
ea:85:1f:c7:dd:60:bb:e8:96:fe:81:c0:c8:f9:e6:
f7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:19:9A:05:2B:A7:A7:2C:E1:98:0C:80:CA:F4:62:73:07:A1:62:DB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153568.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.49.0/24
82.39.65.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:03:8c:6a:f6:6f:2e:73:ae:05:de:aa:30:c1:ea:05:db:18:
5d:cc:5b:0c:a9:6b:1a:16:67:71:72:d2:73:3a:52:d4:74:4d:
7c:ef:01:2a:7a:f3:32:3f:90:2d:57:60:c4:ce:c1:a2:f5:f0:
67:b9:8d:51:75:83:9e:f2:00:de:a0:d5:ae:7b:c8:d0:87:9e:
dc:d2:6f:8a:52:4d:39:5e:ad:87:c0:3f:2a:c9:b7:6b:55:5c:
b5:0f:6a:20:33:9c:34:4c:4b:ba:4f:73:15:98:93:9b:69:0b:
56:91:af:c0:c8:54:3d:9b:e4:3e:1e:fa:02:0a:c6:12:97:2d:
b7:49:0d:ef:fd:a1:5e:95:7a:b0:3d:70:79:ee:6a:7a:06:90:
de:6e:61:18:e4:19:a7:61:d2:9d:23:05:e0:9d:67:95:27:ff:
d0:9b:71:44:c0:50:7f:e5:22:6a:6e:d0:b1:be:87:9c:ff:fb:
8a:07:01:76:48:34:f8:81:3d:0a:3c:6d:fd:8b:ba:cc:03:8d:
34:6e:b6:c0:f8:10:b8:cf:2d:ab:94:80:a0:61:81:73:04:13:
33:dd:3b:f8:a3:19:fe:da:ed:88:65:9a:48:56:c5:4d:9f:44:
3c:00:12:ef:3a:15:0d:7c:64:73:4e:5d:a6:0e:40:6a:6d:2c:
8c:75:19:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 21:12:02 2026 by rpki-client