Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154648.roa
File: AS154648.roa (raw, json)
Hash identifier: Axn6v/xZqfQRitBtEO6V/mW/6osDRFMxyFZuI/EDgLs=
Subject key identifier: E6:35:DA:0D:95:A6:B8:43:73:77:EF:0F:68:B5:64:C1:BB:2C:6A:2E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2081F36C1135CD2B54C65CBE6958F0334D0D4D8A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154648.roa
Signing time: Tue 16 Jun 2026 08:18:51 +0000
ROA not before: Tue 16 Jun 2026 08:13:51 +0000
ROA not after: Tue 15 Jun 2027 08:18:51 +0000
asID: 154648
IP address blocks: 2a13:9500:194::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:81:f3:6c:11:35:cd:2b:54:c6:5c:be:69:58:f0:33:4d:0d:4d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 16 08:13:51 2026 GMT
Not After : Jun 15 08:18:51 2027 GMT
Subject: CN=E635DA0D95A6B8437377EF0F68B564C1BB2C6A2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:71:bc:90:5e:51:14:9b:bd:98:ce:6f:43:
b0:97:c4:5d:ac:89:80:bc:3c:9c:03:4f:00:11:b0:
d1:84:56:28:e4:6a:0d:5f:e7:14:04:72:41:60:6f:
69:cb:1a:5b:3d:6f:81:4f:16:27:dc:1b:18:9a:07:
fa:21:fa:59:a8:71:2d:a3:9e:20:f3:dd:6c:d8:02:
bf:b2:2c:0d:e0:75:d4:c6:cf:ab:e4:7a:3b:e3:d8:
21:b1:73:da:c1:9a:aa:ba:cb:5d:6e:09:d2:7f:29:
01:9c:46:cc:53:68:a0:fb:3c:ff:36:19:5c:00:f4:
e0:cf:72:df:91:e1:55:00:12:b8:40:d5:61:e5:6a:
d0:8a:5e:db:89:3a:11:7e:cf:56:b2:23:23:8a:fb:
06:a6:53:86:22:75:5a:75:84:01:f0:c8:5b:a3:60:
5f:91:6c:a7:72:ce:40:db:b7:ba:3f:0e:9b:ab:a4:
87:fe:01:8b:9c:1f:b2:7d:fe:cc:45:e7:4e:d7:01:
1a:0a:83:a5:4f:87:7b:09:b8:dc:ef:5c:28:1d:cf:
2b:e8:c4:60:8d:5f:55:76:ab:0b:0b:54:2f:6a:d5:
58:34:9b:a4:6a:21:f2:90:d0:9b:35:6e:36:2f:b7:
9b:79:9a:d3:aa:47:34:43:8b:d6:de:98:93:11:2d:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:35:DA:0D:95:A6:B8:43:73:77:EF:0F:68:B5:64:C1:BB:2C:6A:2E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154648.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:194::/48
Signature Algorithm: sha256WithRSAEncryption
8b:84:58:98:37:7b:19:b4:12:53:2c:f9:67:67:dd:f4:4d:7b:
bd:90:73:85:78:36:52:43:6e:b0:05:c4:95:0f:8b:f2:3a:18:
3a:80:00:5f:96:e9:0d:74:04:8d:21:31:8b:80:81:e5:f9:6e:
b6:68:f1:63:06:ef:44:6a:a4:7a:5a:4a:f1:eb:00:40:30:7f:
de:21:24:ca:a2:63:0f:50:29:d9:c5:2c:e2:de:cf:32:82:8b:
8a:41:bd:ae:bf:cc:40:78:8e:e4:39:8e:bf:a7:78:7a:06:c4:
c5:7f:b9:f2:82:5d:15:cb:a6:b4:2d:f4:55:bd:b6:e7:a8:39:
6e:fe:cc:08:6a:65:79:9d:63:a0:93:7c:aa:13:41:94:20:76:
2f:be:8c:96:15:ec:79:9c:5a:9b:9a:a4:b5:c9:d3:65:f3:1b:
1e:dc:5c:c2:99:24:d2:6d:63:31:d8:e0:a3:fc:a0:6f:0f:09:
21:39:01:ba:48:8c:21:99:aa:b0:3b:53:46:58:69:f8:be:94:
fb:6b:ba:db:a7:21:50:19:df:50:61:21:60:f0:7d:b1:3d:b5:
91:c5:65:64:9a:fa:7c:3a:33:f5:1c:07:28:b2:51:91:17:e2:
1d:64:21:89:79:c4:38:90:7d:ef:a7:14:82:fd:b4:f6:c6:7a:
26:0d:f9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:55 2026 by rpki-client