Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154523.roa
File: AS154523.roa (raw, json)
Hash identifier: Qlv8xPLwU+NuFNftINR/oYcHlStdE5hVZTkwHCE+ztI=
Subject key identifier: B6:37:3A:87:EA:00:93:A2:17:6B:CA:7E:6E:61:D3:85:04:5B:2F:E5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 109C7D515D0BCC77B762B8EC0A4DC80366F2E3D4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154523.roa
Signing time: Sun 30 Aug 2026 12:26:40 +0000
ROA not before: Sun 30 Aug 2026 12:21:40 +0000
ROA not after: Sun 29 Aug 2027 12:26:40 +0000
asID: 154523
IP address blocks: 2a13:9500:1ca::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:9c:7d:51:5d:0b:cc:77:b7:62:b8:ec:0a:4d:c8:03:66:f2:e3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 30 12:21:40 2026 GMT
Not After : Aug 29 12:26:40 2027 GMT
Subject: CN=B6373A87EA0093A2176BCA7E6E61D385045B2FE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:3a:43:ec:a0:d7:ea:96:10:32:5a:c1:f0:
d3:e6:01:74:b9:17:1a:37:00:01:40:4a:aa:8f:46:
62:5e:13:09:f5:15:64:6c:2f:4e:a1:bc:08:18:6a:
c2:60:1d:49:e3:ed:c0:9b:3b:15:58:7a:b7:2d:fc:
0f:fd:1e:3f:ba:bf:f9:27:88:6d:3f:d6:a9:38:54:
02:83:56:80:e8:4b:25:20:43:2e:92:e9:3f:0d:89:
e9:f6:07:ea:d0:b3:4a:9a:0b:d4:db:45:1c:da:64:
1d:22:1d:33:c8:45:d7:b3:b5:c2:70:c1:b9:9e:03:
a1:e4:e0:48:66:39:a8:2e:25:3f:61:d6:be:7f:8f:
ef:eb:51:17:a8:51:7e:24:ed:3a:6c:d7:78:b7:54:
8c:5f:62:fa:8a:d6:66:57:5a:7f:2e:df:14:06:17:
c6:41:a3:9b:7d:e6:b4:72:fb:a6:b3:44:d4:31:f6:
d1:96:97:11:e8:ef:bb:e2:07:19:d6:3f:0f:b5:fe:
01:04:1e:a3:b8:5a:05:a9:de:b3:96:54:2e:18:b0:
d4:d6:88:22:54:8f:3d:79:51:25:62:89:ab:25:46:
b5:3b:ea:aa:86:50:5c:95:f9:e2:41:6a:db:5e:6a:
c2:d6:cf:07:b0:f6:f7:73:ea:17:f3:1a:fb:3e:b6:
e5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:37:3A:87:EA:00:93:A2:17:6B:CA:7E:6E:61:D3:85:04:5B:2F:E5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154523.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1ca::/48
Signature Algorithm: sha256WithRSAEncryption
95:f8:2e:54:6b:ce:db:6c:aa:2e:40:a7:bd:e8:eb:bb:37:31:
68:98:44:45:2f:87:c6:fc:65:07:32:f7:79:1b:01:83:17:a9:
d3:b1:bd:8c:58:a2:6f:a6:07:cd:a5:e0:dc:1b:5c:d8:8c:a0:
f6:09:88:40:48:87:99:7d:1b:cb:09:78:10:8b:bd:8d:bd:66:
66:49:62:cd:8e:2a:e4:da:bf:f0:59:14:4a:85:1d:1b:40:99:
9c:67:68:8b:b1:83:a8:46:a2:af:e2:99:1f:c3:bf:e8:20:00:
b2:69:b9:e5:d7:8e:1a:26:4a:46:d4:e2:60:ec:09:68:07:e7:
37:6d:4d:78:79:68:62:a2:1d:3d:c0:aa:3b:d8:ed:60:2a:0c:
c5:32:7b:e8:9d:1f:d6:2d:05:88:04:44:bc:bb:cf:f3:86:07:
e1:2b:35:5e:83:9c:8c:7e:4c:8d:7e:93:8a:44:26:d0:bb:3c:
47:8c:c2:09:dc:e6:db:c6:2a:52:56:1d:4e:44:0d:08:b9:e8:
8b:ac:d9:cb:3c:1d:61:27:b9:36:55:89:51:9f:b4:e3:78:42:
d1:c8:75:36:fd:cd:85:c0:02:b3:50:e9:7d:7d:cb:7e:02:57:
1a:35:03:39:8b:be:c2:ad:b1:6c:70:b0:0d:d2:db:d6:27:a6:
3a:87:69:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:02 2026 by rpki-client