Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153717.roa
File: AS153717.roa (raw, json)
Hash identifier: Thw+D+wf+TU4Hmg23VzaXVLDVI2pVr0BIOq798GV9qg=
Subject key identifier: 61:6C:78:02:48:C6:2D:E0:EE:A8:93:BB:F2:93:44:21:F8:BB:BD:86
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 303BC54F801772E19C300DBEAE807FA779B68872
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153717.roa
Signing time: Fri 26 Jun 2026 06:48:41 +0000
ROA not before: Fri 26 Jun 2026 06:43:41 +0000
ROA not after: Fri 25 Jun 2027 06:48:41 +0000
asID: 153717
IP address blocks: 2a13:9500:b9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:3b:c5:4f:80:17:72:e1:9c:30:0d:be:ae:80:7f:a7:79:b6:88:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 26 06:43:41 2026 GMT
Not After : Jun 25 06:48:41 2027 GMT
Subject: CN=616C780248C62DE0EEA893BBF2934421F8BBBD86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:51:ce:ba:ae:9c:fa:65:fd:33:db:ad:93:
a5:8e:c2:86:55:f0:b1:fc:c2:6f:ff:31:56:6a:9b:
e2:59:25:62:1e:2f:f6:a9:3e:db:7b:f8:03:ef:51:
4a:5e:3b:e7:be:30:b8:40:c9:ff:23:4a:3b:c1:71:
c5:de:a0:02:84:dd:49:53:2a:db:96:1d:1f:dc:5c:
43:16:db:16:e9:a1:a0:bd:40:7a:58:e3:dd:cb:00:
92:c3:8e:fe:28:fd:3b:32:35:94:30:a5:94:c5:89:
5b:db:9e:1c:06:79:f1:ed:22:87:c1:55:4e:27:3b:
2e:ef:d5:31:47:b5:b6:c9:f7:e2:90:fd:82:7a:f9:
31:8d:d6:14:3a:63:3d:8b:2f:57:2a:a9:52:df:cd:
e8:8b:87:11:d2:64:90:4c:d5:fa:2a:d5:c2:69:3a:
40:86:3f:09:18:2c:22:4c:12:46:21:38:a5:f9:e3:
c7:2a:69:71:d7:b8:4f:a0:84:06:19:c9:e7:90:bd:
c4:0f:c6:19:a5:84:da:87:e5:10:42:7f:de:02:a4:
14:a5:47:89:8f:d9:3c:30:17:79:a0:62:de:c5:8c:
d5:76:47:37:ab:11:db:3f:2d:0d:e7:9c:2f:08:2d:
fb:6f:67:0b:0f:8e:2c:31:aa:0e:ae:87:f2:b7:44:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6C:78:02:48:C6:2D:E0:EE:A8:93:BB:F2:93:44:21:F8:BB:BD:86
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153717.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:b9::/48
Signature Algorithm: sha256WithRSAEncryption
8e:bf:35:d7:d5:c3:be:78:17:b8:50:65:5e:36:e1:b3:db:9c:
00:8f:21:82:a5:b2:10:6c:a2:15:3d:67:9b:67:ee:6a:1e:e8:
1b:b2:77:8f:3f:b8:71:9e:e5:81:61:68:4c:aa:3a:b3:6a:90:
b6:48:3f:9d:c1:79:8d:6e:2b:60:61:0d:0a:b9:00:1c:06:e0:
75:4e:c8:e5:d8:23:47:a0:66:30:77:b6:4f:1a:b9:44:db:b4:
d0:08:5c:53:fc:f8:ef:a3:29:8b:10:95:40:c4:49:94:5c:77:
5d:95:bf:ee:33:73:b9:4d:b6:3b:48:a7:19:ac:12:bb:3e:53:
b3:14:72:f4:48:d3:2e:a1:90:ea:e7:28:58:f2:0b:db:4d:1c:
a1:99:f1:d5:9e:3f:fe:71:e5:6b:58:b0:0c:85:68:96:31:08:
cf:5c:69:e1:56:01:02:f8:53:2b:86:bb:6c:46:dc:65:f6:d3:
4f:7d:59:e4:8b:39:9d:6d:ef:74:81:e9:d5:3e:2b:5f:41:e7:
cb:e1:4d:12:0b:be:51:8f:76:72:14:52:2b:75:0c:2d:2a:61:
62:f4:75:fe:91:63:3c:c3:30:ce:73:e9:48:a6:49:74:db:47:
c4:7d:fd:f7:33:5f:0c:7d:eb:12:cd:85:3c:e2:30:a0:d0:ac:
77:b2:df:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:06:32 2026 by rpki-client