Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154132.roa
File: AS154132.roa (raw, json)
Hash identifier: cQmC9gEBjM6NcefvdebOutM+gPBDZTYgn/lzIA85y/E=
Subject key identifier: D9:24:02:2F:95:DB:DF:4A:35:F9:FD:38:90:C9:0B:9C:D3:5F:1E:88
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 365391F3C9900055681D30B0F169DCB14C1F1200
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154132.roa
Signing time: Sat 03 Oct 2026 15:53:37 +0000
ROA not before: Sat 03 Oct 2026 15:48:37 +0000
ROA not after: Sat 02 Oct 2027 15:53:37 +0000
asID: 154132
IP address blocks: 84.75.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:53:91:f3:c9:90:00:55:68:1d:30:b0:f1:69:dc:b1:4c:1f:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 3 15:48:37 2026 GMT
Not After : Oct 2 15:53:37 2027 GMT
Subject: CN=D924022F95DBDF4A35F9FD3890C90B9CD35F1E88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:31:9e:71:96:71:97:cf:d3:7d:ca:cc:db:
59:e1:91:8f:ed:6f:a8:a5:1a:36:3c:66:8f:e1:18:
b9:e9:ed:1b:7d:e7:12:17:2e:3f:7b:20:0b:b3:f5:
2e:4c:ad:67:c3:b4:7e:97:e5:af:81:c3:93:85:04:
f0:22:ab:05:ad:8b:42:ef:73:a6:67:b5:68:cd:52:
50:80:5f:7b:6f:57:c3:06:f8:9d:da:11:8e:c2:ff:
2d:cd:04:87:7d:7f:45:6b:d1:2d:f7:66:89:fd:e2:
77:28:c3:a3:49:3b:06:ac:ec:36:2c:3c:03:a2:a6:
ab:1c:e2:67:cb:b8:ec:54:00:72:81:45:4f:f9:c2:
32:3f:a7:ba:2d:4a:ef:69:da:2c:f0:35:7b:c1:f7:
ee:80:25:bf:67:9a:e3:7c:68:45:0b:d0:58:71:da:
65:36:d5:7c:9b:ff:82:fc:ef:77:2c:63:64:14:be:
49:1f:83:01:73:df:67:8b:4b:e5:69:b7:7c:3a:b2:
8f:a3:36:20:cc:8e:94:35:e3:54:c3:81:5c:77:7e:
b3:f2:70:90:a4:1f:5b:f5:e0:da:d1:12:b9:93:b5:
b0:50:35:c6:d7:37:88:c3:dd:2a:30:78:6d:80:a5:
52:aa:1c:7a:a7:82:2b:84:a1:20:d9:0f:2d:c0:20:
75:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:24:02:2F:95:DB:DF:4A:35:F9:FD:38:90:C9:0B:9C:D3:5F:1E:88
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.133.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d6:41:9d:9b:1d:a2:29:95:3f:a1:2f:03:1f:f9:d6:55:2a:
9c:03:c0:94:c1:87:21:99:1b:75:0b:0f:2a:ce:77:d0:c2:86:
ae:1d:41:4b:1b:20:e6:15:3a:8a:25:93:4b:a7:ca:c7:e2:ef:
c6:f8:e8:6a:42:d0:fc:1b:d5:6c:34:2e:f3:29:55:61:22:ec:
3b:d9:99:25:81:bb:48:17:a2:66:c9:b2:d1:b0:ba:54:a5:4c:
f5:c7:d6:66:b9:c9:55:08:bf:f2:f0:e6:7f:99:1a:dc:59:3a:
64:c4:44:04:66:20:1b:12:84:4c:54:a3:8d:8a:e7:5a:3e:8c:
e3:2f:41:07:68:5a:e3:fc:49:96:87:1e:a8:4b:bf:24:bd:50:
91:7c:c9:b2:d9:99:fb:dd:6e:f5:c7:3e:00:45:c3:5e:05:bb:
5f:4c:92:45:d1:ef:c8:94:db:c3:70:e5:aa:fc:c9:0a:03:91:
20:27:fb:59:74:b9:25:e0:76:e9:f3:05:03:8d:b2:43:b1:32:
fa:86:3d:78:52:37:84:10:04:4c:82:0b:e0:4c:28:6b:95:29:
69:8a:a4:39:1d:53:2e:0e:61:37:44:e4:89:da:73:3b:d7:e1:
8e:a5:49:c0:32:4f:60:19:f7:0d:63:41:ee:9d:69:ae:d2:5b:
fa:79:60:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:51:28 2026 by rpki-client