Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153568.roa
File: AS153568.roa (raw, json)
Hash identifier: WcOTWBYaE8iYLmGJ5w5oKal+uC02n78whzgvMupshS4=
Subject key identifier: 83:D8:6D:8C:F0:84:C5:62:03:DC:17:F8:55:63:D4:42:79:6A:99:5B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4DB24A549BAC11F8FC3470C1FE7E9A75090B2951
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153568.roa
Signing time: Fri 22 May 2026 02:40:08 +0000
ROA not before: Fri 22 May 2026 02:35:08 +0000
ROA not after: Fri 21 May 2027 02:40:08 +0000
asID: 153568
IP address blocks: 82.25.52.0/24 maxlen: 24
84.75.145.0/24 maxlen: 24
178.83.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:b2:4a:54:9b:ac:11:f8:fc:34:70:c1:fe:7e:9a:75:09:0b:29:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 22 02:35:08 2026 GMT
Not After : May 21 02:40:08 2027 GMT
Subject: CN=83D86D8CF084C56203DC17F85563D442796A995B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:86:32:4b:d2:01:7b:a6:e4:ad:2b:18:7b:
2a:0f:e5:dd:76:05:ce:f9:6b:66:61:f9:71:cb:31:
15:dd:28:02:10:3e:84:06:9b:54:47:4f:85:f5:f8:
a5:06:71:74:36:dc:95:9d:58:dc:22:03:b1:88:1c:
2c:da:e6:dd:36:2f:1e:55:d0:4f:3d:74:fd:65:7b:
d2:b7:25:3e:0a:9f:62:1f:14:08:4a:8f:dd:3c:7e:
56:61:5b:c1:40:26:84:cd:37:f9:19:4a:d8:df:a8:
f3:a4:fc:a1:f8:e7:5a:12:1f:a1:cc:28:c1:6e:c8:
23:d3:87:ee:69:68:89:36:59:50:ea:78:9c:44:14:
15:b8:45:e8:90:3a:e4:92:58:72:f6:6c:9d:1c:40:
61:26:a1:1c:08:81:57:36:72:68:e1:db:86:0b:31:
d8:11:f4:09:39:6b:e5:f1:05:1c:21:d4:6c:d1:b7:
c2:13:de:e3:49:74:e2:bb:33:da:5b:5b:e2:8b:f3:
00:07:2b:36:05:74:b2:6c:0d:9e:43:92:c7:60:11:
dc:81:1f:94:30:f2:31:78:29:39:22:79:35:84:ee:
85:b7:80:e9:15:7a:68:a3:46:e7:da:0c:fc:7c:60:
d2:08:46:04:1c:1b:60:1c:6f:83:1d:b2:6f:a9:05:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D8:6D:8C:F0:84:C5:62:03:DC:17:F8:55:63:D4:42:79:6A:99:5B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153568.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.52.0/24
84.75.145.0/24
178.83.165.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:c0:54:6a:08:1c:ea:1b:9f:f7:0e:b5:70:f7:ba:e7:ce:23:
43:b6:86:c3:03:c7:a3:63:d1:9d:22:bc:1e:57:aa:96:9b:37:
48:fc:b2:ee:79:71:e6:50:5d:03:82:e6:83:ea:f5:84:a2:36:
33:99:7d:03:69:d7:d8:68:bb:f3:f0:ce:2d:a0:99:87:bc:ac:
0a:11:9b:40:d5:4a:bd:c6:bb:3d:6b:dc:db:6f:0b:76:1d:47:
4a:bf:5b:8d:43:1a:f5:e2:9e:4c:6d:d5:b1:33:0f:f1:00:20:
af:c3:34:ff:b6:08:b4:b7:cc:15:9b:11:eb:18:48:83:38:e7:
c0:19:3a:9b:53:24:35:c1:c0:20:7a:d3:73:b0:64:fc:2b:a2:
aa:3d:65:01:c8:ee:5e:03:2a:f4:46:3c:0d:26:58:3e:8f:f5:
4e:23:96:1a:ae:73:e0:66:e1:5a:ad:1b:5f:0a:a8:e9:51:c7:
48:44:91:6a:fa:b7:5d:7c:c0:45:a3:83:22:7a:d4:2e:3f:7c:
42:5e:f1:9a:83:c6:21:d6:bd:38:55:43:76:77:52:62:a0:dd:
ee:67:5f:fa:90:f4:17:47:7b:ac:89:ab:59:ec:01:74:e8:5f:
5d:4a:69:fd:f9:f4:02:6b:63:5a:13:51:17:d1:c9:9c:a9:72:
58:0f:03:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 08:32:27 2026 by rpki-client