Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153996.roa
File: AS153996.roa (raw, json)
Hash identifier: GcEzWflBdtG7jRi7L6/UMrwfA7b6XXAIlwaiKT85XPQ=
Subject key identifier: 79:67:EB:1D:EA:30:01:DD:FA:58:E8:4E:5E:68:D8:AA:B4:DC:E4:15
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0D678691402E6133A32D79A1B954B45FE6022DDE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153996.roa
Signing time: Tue 02 Jun 2026 14:06:20 +0000
ROA not before: Tue 02 Jun 2026 14:01:20 +0000
ROA not after: Tue 01 Jun 2027 14:06:20 +0000
asID: 153996
IP address blocks: 82.47.226.0/24 maxlen: 24
82.47.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:67:86:91:40:2e:61:33:a3:2d:79:a1:b9:54:b4:5f:e6:02:2d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 2 14:01:20 2026 GMT
Not After : Jun 1 14:06:20 2027 GMT
Subject: CN=7967EB1DEA3001DDFA58E84E5E68D8AAB4DCE415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:3f:be:f8:81:85:78:60:71:a6:69:77:cc:
26:02:e9:f6:1d:93:f0:59:c0:02:70:a2:f8:1c:b8:
aa:cf:8f:98:42:b0:cd:38:c0:e0:43:b9:4c:3d:93:
fb:a3:c3:85:fa:b1:e1:a8:42:64:f9:8f:ca:11:72:
b2:cf:5e:7e:a1:2f:4e:76:a1:6f:71:2f:f4:28:33:
1b:38:db:12:2d:9f:2c:c1:f1:5e:04:d7:40:3c:3d:
4f:14:4a:f6:2e:fa:f2:a6:4a:a4:15:12:77:92:29:
06:49:37:1f:9c:7f:b0:55:43:37:99:be:a0:21:db:
56:3d:8f:90:13:2b:ee:32:b0:be:37:c7:d2:c5:5e:
5d:56:70:cd:73:75:95:3d:b3:4f:38:f9:42:3b:f1:
aa:76:d4:7d:0f:b6:1a:42:36:45:d1:c4:72:1f:67:
d3:f4:17:ee:61:11:c0:e0:e0:4a:d8:31:36:74:41:
89:ee:34:87:ce:f6:4a:e4:88:87:50:8e:15:1f:00:
30:d0:bb:46:26:d9:9d:6b:b0:63:0e:ec:72:23:50:
6e:14:48:90:ec:07:7c:1e:63:6d:23:ce:73:85:0a:
30:7b:4f:0c:9f:f4:ba:0b:c3:4d:7a:93:2f:e4:75:
cd:68:61:fa:87:a5:f1:f1:c3:45:57:d7:df:02:14:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:67:EB:1D:EA:30:01:DD:FA:58:E8:4E:5E:68:D8:AA:B4:DC:E4:15
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.226.0/23
Signature Algorithm: sha256WithRSAEncryption
40:e8:02:2a:27:8e:a0:59:d0:a8:30:28:d2:e9:31:0d:2f:62:
d0:f1:de:aa:0f:c5:e4:f6:d5:f3:77:12:65:6f:36:7f:a7:ee:
04:1a:f2:07:14:03:0b:46:04:c4:8e:80:c6:12:53:67:89:0a:
14:48:3c:de:07:1c:aa:a6:31:02:5e:9f:9c:39:91:bb:f4:ee:
47:1c:fe:97:59:bf:64:f7:4f:61:fe:a1:6c:cf:3e:df:45:03:
51:ae:03:ac:b5:d8:2b:df:bd:a8:54:40:5b:97:59:a5:91:3f:
d8:0a:65:1d:2b:cb:de:9e:c6:64:aa:7c:03:ca:7f:8f:58:d8:
dc:71:71:01:02:b5:f9:17:70:29:cd:8f:eb:fd:08:fc:a6:61:
43:cc:85:df:06:5c:21:c3:bf:36:e0:57:2d:87:3f:1c:54:cd:
09:d2:bc:fc:66:73:dd:ba:9d:1e:7f:98:36:14:3d:e4:aa:56:
97:47:5f:2b:16:4f:8d:15:98:aa:01:ec:5e:8b:65:b4:be:6a:
2c:24:93:ff:07:dc:71:93:ed:e1:40:c2:1e:d5:64:88:87:83:
51:dd:e1:82:78:bc:47:43:f4:32:ed:ab:70:a0:7e:e9:b2:a6:
5c:ad:96:aa:b5:5b:1a:67:93:d6:ea:f9:af:3d:e6:43:77:7e:
fa:b8:82:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:32 2026 by rpki-client