Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154612.roa
File: AS154612.roa (raw, json)
Hash identifier: o+wa0DS/dre7I2tua+tCN4RfoTjsNuTkjnfO0U8vXFI=
Subject key identifier: BD:72:14:AB:AC:64:81:C6:A3:39:0D:E8:57:FF:F4:79:72:0A:24:F3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1A0641CD902FDF3192698EA62CE458DB576E4B1D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154612.roa
Signing time: Thu 21 May 2026 06:36:25 +0000
ROA not before: Thu 21 May 2026 06:31:25 +0000
ROA not after: Thu 20 May 2027 06:36:25 +0000
asID: 154612
IP address blocks: 82.47.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:06:41:cd:90:2f:df:31:92:69:8e:a6:2c:e4:58:db:57:6e:4b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 21 06:31:25 2026 GMT
Not After : May 20 06:36:25 2027 GMT
Subject: CN=BD7214ABAC6481C6A3390DE857FFF479720A24F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:1b:b7:37:92:a2:71:5a:da:0c:61:76:c5:
86:02:23:25:d3:50:81:8a:3d:df:7b:6a:ff:c0:89:
bb:14:49:79:21:03:9e:7a:9c:2b:bb:c9:8a:d5:95:
15:94:9e:e4:a5:12:1f:b1:11:f4:d8:79:37:85:c7:
14:86:eb:43:4b:eb:c1:2b:18:20:66:17:c0:d0:6b:
ad:7f:f4:b5:b8:08:c9:d2:f3:cd:56:19:77:7c:ba:
62:8c:31:33:67:c1:0f:08:73:eb:15:6f:51:0d:92:
0f:af:73:b1:fc:d5:dc:89:8e:65:5c:40:3e:65:e0:
2b:53:80:b8:c4:c1:1d:59:b8:f5:8b:e6:9e:13:34:
30:d3:42:87:e3:da:b5:a6:f0:c6:83:ab:5d:a5:be:
d6:de:7f:20:cd:4c:8a:e1:71:d4:4a:f8:a8:06:9a:
24:4f:89:e7:96:26:71:f0:15:3a:ab:3c:0a:04:97:
1e:c2:bc:26:29:bb:76:9a:74:f5:4b:30:99:90:a0:
a2:2e:fc:dc:47:5b:1e:61:26:6a:c3:48:d7:79:eb:
b7:7d:8b:72:6e:e1:0e:6a:f5:0b:a6:b7:3f:2b:0c:
78:75:35:04:52:95:fc:dd:e8:ac:90:cb:7d:85:85:
01:e5:d4:a1:31:71:36:b4:93:10:9f:41:1a:2b:e6:
ca:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:72:14:AB:AC:64:81:C6:A3:39:0D:E8:57:FF:F4:79:72:0A:24:F3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154612.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.38.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e7:20:ea:95:43:a7:19:61:9b:ef:4d:07:ae:d4:5a:68:47:
6c:12:70:be:ee:88:d9:cc:3c:a4:8f:34:26:57:ce:98:b8:1b:
2f:d2:95:51:e3:bc:8e:24:41:a2:00:09:ff:82:48:90:25:5d:
68:49:80:5f:80:13:7b:ce:3a:b0:89:9a:82:d2:67:52:27:e5:
f3:a9:73:cc:38:3b:30:e2:15:b4:70:81:cc:99:47:2b:80:6c:
7a:fb:eb:12:ff:66:33:75:6a:7f:e6:99:39:40:17:50:d8:a1:
d5:2a:f9:30:6f:db:e0:43:3f:eb:4d:84:57:50:d8:03:1d:2b:
d2:e5:3b:76:af:16:88:08:47:f3:d8:c3:5a:e1:96:f6:e6:2b:
a1:e4:c3:ec:79:32:6d:45:54:b3:bf:41:2d:1e:d8:85:06:19:
02:72:dc:85:b1:31:44:aa:42:99:d1:61:6b:2f:2d:39:9a:a3:
5c:da:f8:c8:d6:a2:9b:17:79:a5:87:9f:b5:42:c9:c9:26:b6:
27:63:c8:f7:2c:99:8e:96:3e:3c:57:07:a1:6a:3d:b9:e7:34:
38:74:17:65:ec:50:a3:f2:2f:82:2b:5f:86:d6:bb:1c:9e:e1:
2b:1d:5f:e0:b7:6b:ce:a7:42:d3:47:84:fd:ef:6a:6a:b4:d4:
cb:cf:07:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:35 2026 by rpki-client