Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153810.roa
File: AS153810.roa (raw, json)
Hash identifier: 2rRc1th59FHUm1osKDcCRhhQGBUj6jNswI+xFVK2YHE=
Subject key identifier: 17:09:9D:73:30:6C:31:F1:77:EF:A7:50:EA:DE:68:D6:A4:88:49:8B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 12ECC306A0D22B2644FCEB312FCA4D68BC1F4DEB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153810.roa
Signing time: Sat 08 Aug 2026 02:45:45 +0000
ROA not before: Sat 08 Aug 2026 02:40:45 +0000
ROA not after: Sat 07 Aug 2027 02:45:45 +0000
asID: 153810
IP address blocks: 82.22.49.0/24 maxlen: 24
82.39.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ec:c3:06:a0:d2:2b:26:44:fc:eb:31:2f:ca:4d:68:bc:1f:4d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 8 02:40:45 2026 GMT
Not After : Aug 7 02:45:45 2027 GMT
Subject: CN=17099D73306C31F177EFA750EADE68D6A488498B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:24:e1:12:f0:23:48:2c:29:64:65:fb:4c:
bd:4e:55:ea:d9:f3:62:3c:95:a1:29:7d:62:94:65:
74:2a:b5:6a:c3:c5:b1:90:5a:d6:55:af:c7:4a:6f:
73:17:bf:94:bd:05:1e:53:ad:b0:d5:92:ca:4d:28:
47:fc:e6:99:da:c4:53:32:4f:52:14:18:0c:12:bf:
c1:6b:ed:bb:a2:4d:4a:dc:19:f0:ac:a9:64:eb:b5:
98:dc:82:c5:7f:0e:b3:6b:8a:c3:c0:ef:84:45:10:
4a:ba:06:b4:bc:70:6c:9b:86:9b:5c:40:35:6b:25:
0c:bc:49:93:49:7a:6a:76:bf:32:08:7f:d0:a7:ac:
d8:a7:54:90:9d:f7:01:36:47:b9:cd:0a:db:f9:2b:
23:a8:15:86:cf:4d:85:bd:01:77:91:78:9c:5d:20:
a1:66:65:4f:dd:54:69:68:ee:be:e6:40:c8:f0:08:
1f:5f:1f:17:c8:79:26:c8:93:ad:93:02:58:1e:1c:
2d:72:11:72:15:63:9e:6c:3c:3a:63:9f:7d:73:d4:
fa:ea:85:63:59:b2:a8:04:1f:15:01:ff:d1:a5:53:
e5:d8:51:fd:9a:4a:4e:d0:da:6f:be:dd:2e:d7:0f:
39:31:38:c4:61:09:42:e8:b4:61:96:76:96:a4:3d:
18:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:09:9D:73:30:6C:31:F1:77:EF:A7:50:EA:DE:68:D6:A4:88:49:8B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.49.0/24
82.39.65.0/24
Signature Algorithm: sha256WithRSAEncryption
85:83:27:c5:3a:78:b2:4c:12:ac:40:15:7a:50:ff:98:2a:0d:
77:aa:20:5b:56:6a:7e:c8:cd:0e:1c:cf:20:93:93:4a:4f:cc:
93:3b:06:2f:37:50:a0:eb:49:91:27:c3:ee:1c:4a:a6:90:29:
3b:1f:b8:35:1d:af:0f:55:35:97:95:c8:8f:c5:0e:39:9d:3e:
9f:19:f1:3b:cf:5c:ba:66:4b:92:98:c0:75:dc:b9:f8:83:ef:
51:29:f8:46:aa:d2:53:6a:1e:12:75:26:7b:cf:27:8b:35:d1:
05:b2:b7:74:a3:68:25:0d:d7:a2:0c:64:b6:6f:36:e5:68:59:
44:5d:a6:28:a6:84:ce:a9:5e:d1:7f:4f:0c:c4:55:fc:57:05:
07:c2:7d:1f:2a:53:40:f0:24:34:8d:ec:46:c3:33:82:83:4e:
92:05:20:e3:d0:54:d4:d7:5b:5e:40:3d:69:11:a0:3f:4c:f4:
ed:6d:b0:c8:e9:55:e0:9d:ec:65:6d:2b:a5:0a:f6:51:e7:f0:
a0:86:52:48:d0:32:49:05:e3:e7:6f:88:69:12:7c:0a:ef:0c:
22:b3:97:f0:da:00:82:04:87:31:31:04:4d:bd:b9:3f:8e:d2:
45:3c:eb:33:0b:d4:87:5e:e7:12:66:c3:36:07:1d:33:8d:2b:
63:68:16:43
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUEuzDBqDSKyZE/OsxL8pNaLwfTeswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MDgwMjQwNDVaFw0yNzA4MDcwMjQ1NDVaMDMxMTAvBgNV
BAMTKDE3MDk5RDczMzA2QzMxRjE3N0VGQTc1MEVBREU2OEQ2QTQ4ODQ5OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxfiThEvAjSCwpZGX7TL1OVerZ
82I8laEpfWKUZXQqtWrDxbGQWtZVr8dKb3MXv5S9BR5TrbDVkspNKEf85pnaxFMy
T1IUGAwSv8Fr7buiTUrcGfCsqWTrtZjcgsV/DrNrisPA74RFEEq6BrS8cGybhptc
QDVrJQy8SZNJemp2vzIIf9CnrNinVJCd9wE2R7nNCtv5KyOoFYbPTYW9AXeReJxd
IKFmZU/dVGlo7r7mQMjwCB9fHxfIeSbIk62TAlgeHC1yEXIVY55sPDpjn31z1Prq
hWNZsqgEHxUB/9GlU+XYUf2aSk7Q2m++3S7XDzkxOMRhCULotGGWdpakPRh/AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUFwmdczBsMfF376dQ6t5o1qSISYswHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTUzODEwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUhYx
AwQAUidBMA0GCSqGSIb3DQEBCwUAA4IBAQCFgyfFOniyTBKsQBV6UP+YKg13qiBb
Vmp+yM0OHM8gk5NKT8yTOwYvN1Cg60mRJ8PuHEqmkCk7H7g1Ha8PVTWXlciPxQ45
nT6fGfE7z1y6ZkuSmMB13Ln4g+9RKfhGqtJTah4SdSZ7zyeLNdEFsrd0o2glDdei
DGS2bzblaFlEXaYopoTOqV7Rf08MxFX8VwUHwn0fKlNA8CQ0jexGwzOCg06SBSDj
0FTU11teQD1pEaA/TPTtbbDI6VXgnexlbSulCvZR5/CghlJI0DJJBePnb4hpEnwK
7wwis5fw2gCCBIcxMQRNvbk/jtJFPOszC9SHXucSZsM2Bx0zjStjaBZD
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:09 2026 by rpki-client