Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154410.roa
File: AS154410.roa (raw, json)
Hash identifier: cXqIp+fXWwTAuG54hASI+w0HwrrpSYsygK9N4ZyK7Tg=
Subject key identifier: 89:3D:F2:DF:0D:50:A7:12:61:61:B9:93:86:E6:26:B6:B1:E3:0A:61
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4EE7F1A55CC7BE4ED9B8D0115990F73D9F85C54E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154410.roa
Signing time: Mon 01 Jun 2026 21:34:29 +0000
ROA not before: Mon 01 Jun 2026 21:29:29 +0000
ROA not after: Mon 31 May 2027 21:34:29 +0000
asID: 154410
IP address blocks: 82.21.29.0/24 maxlen: 24
82.21.30.0/24 maxlen: 24
82.21.31.0/24 maxlen: 24
82.24.175.0/24 maxlen: 24
178.83.178.0/24 maxlen: 24
2a13:9500:12e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e7:f1:a5:5c:c7:be:4e:d9:b8:d0:11:59:90:f7:3d:9f:85:c5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 1 21:29:29 2026 GMT
Not After : May 31 21:34:29 2027 GMT
Subject: CN=893DF2DF0D50A7126161B99386E626B6B1E30A61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:29:62:c3:b5:2a:a0:e0:19:be:ef:52:b4:b5:
80:b8:7a:cc:b9:1e:bd:c3:31:bf:87:6d:fa:3a:13:
93:cc:bb:9d:67:1b:56:79:18:71:23:de:3b:af:bb:
96:eb:14:81:cf:df:95:0a:89:d0:37:d1:fc:16:75:
cb:a4:dc:eb:5d:9e:18:e3:3c:8e:a9:c6:f0:ff:d2:
cd:19:11:14:1d:6e:21:25:e0:da:e1:22:7d:a7:2c:
3a:0d:65:9d:17:d4:a6:f7:aa:1f:9b:69:aa:84:1c:
f5:5c:46:be:30:74:40:40:05:25:d3:85:9a:b1:7c:
52:ff:af:96:65:88:57:ab:22:c1:f3:b7:79:19:99:
bb:1c:8e:d3:66:0f:0e:5e:eb:21:df:9a:a9:d7:d2:
a0:8c:3e:31:b5:eb:b9:7c:11:98:9a:f4:fd:de:b6:
34:f6:e7:87:41:e8:ae:3a:e9:eb:5c:d1:5b:1b:f5:
eb:3a:d5:24:8b:aa:c0:0b:28:3c:e5:3d:2a:81:d7:
72:c2:a5:4a:35:53:34:73:87:66:c5:15:12:f3:e2:
f9:da:50:cd:f9:62:5c:17:0a:d4:0a:54:b7:22:ef:
41:7d:19:d1:e2:4b:1e:25:22:94:6c:a0:9b:26:a7:
d1:7c:30:6b:fd:d7:d0:71:3b:3e:78:b9:0c:71:f8:
d9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3D:F2:DF:0D:50:A7:12:61:61:B9:93:86:E6:26:B6:B1:E3:0A:61
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154410.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.29.0-82.21.31.255
82.24.175.0/24
178.83.178.0/24
IPv6:
2a13:9500:12e::/48
Signature Algorithm: sha256WithRSAEncryption
84:5b:bc:ab:e8:88:e4:e7:99:c2:de:16:a1:02:c4:a7:aa:1e:
6a:0c:e4:c9:7b:91:b8:69:b0:14:f4:f5:90:3c:c5:f5:01:af:
fc:a9:28:03:25:b1:4d:71:cc:1c:f3:de:54:a1:45:35:44:55:
f2:c0:ec:59:ec:ca:2a:90:1f:43:88:d7:57:22:b9:88:bc:54:
28:06:85:f6:b4:a5:92:c4:3f:4e:73:ef:78:6e:6a:6c:ee:16:
14:33:db:36:9b:c3:0f:50:32:f1:ab:c3:34:f6:ed:fa:23:4a:
ba:6f:c1:81:26:51:89:62:c1:7a:11:a9:8a:fe:a1:2d:da:8b:
50:d4:24:84:e4:be:a1:df:78:68:f1:37:40:b6:0e:12:a2:c2:
6c:61:08:cc:5a:75:80:34:cc:ac:0e:2d:64:6d:ad:28:16:e3:
8e:4a:ce:cb:75:b8:88:48:37:12:5f:e1:71:ef:de:4d:47:c2:
f3:fa:60:19:1d:2d:9e:4b:89:d0:97:25:cc:15:c5:ad:77:ba:
07:98:d2:7a:c8:3e:7e:2a:49:a9:60:5d:67:1b:47:1d:a0:a8:
49:43:9d:39:85:66:d7:49:d7:df:ed:8f:e0:17:5d:41:18:57:
8a:69:34:cb:8f:85:bd:18:b6:9e:86:f9:81:3f:b7:8e:e7:2d:
d3:d2:f5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:52 2026 by rpki-client