Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151389.roa
File: AS151389.roa (raw, json)
Hash identifier: L5VFt7T/Qhvcp1sMq1SHEs+ssOUOnNLluf2aywiTfhA=
Subject key identifier: 8A:26:0B:53:48:62:E0:40:7D:DA:09:2E:1F:3A:6E:D0:2E:6A:D3:FB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 427453C8937AFD46C2163EB27D71CA673DF65CE1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151389.roa
Signing time: Mon 08 Jun 2026 06:06:48 +0000
ROA not before: Mon 08 Jun 2026 06:01:48 +0000
ROA not after: Mon 07 Jun 2027 06:06:48 +0000
asID: 151389
IP address blocks: 82.39.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:74:53:c8:93:7a:fd:46:c2:16:3e:b2:7d:71:ca:67:3d:f6:5c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 8 06:01:48 2026 GMT
Not After : Jun 7 06:06:48 2027 GMT
Subject: CN=8A260B534862E0407DDA092E1F3A6ED02E6AD3FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:21:28:92:91:2b:03:a0:4a:54:f5:57:2f:
c2:14:e8:4d:f0:7b:9f:f4:39:47:bb:34:9a:a5:e3:
57:46:4c:0f:f1:0b:a4:67:20:fb:4d:1c:52:79:83:
ce:fe:0e:49:2b:50:cc:86:42:b1:da:49:f0:05:1e:
e9:9c:22:ab:18:e2:14:da:fd:20:86:84:23:51:1b:
f7:19:d1:c6:5b:cf:7c:64:fd:b1:59:99:d9:57:33:
43:73:ed:e9:16:f4:0c:bc:5c:65:fe:25:f5:28:36:
f8:30:5b:ce:4c:ec:0c:5b:9f:be:bc:5a:19:8d:a7:
dc:57:c3:fe:20:f9:f9:3f:30:93:ae:ed:cd:9a:b0:
6d:c5:06:82:ec:0e:37:3f:dd:4b:3f:33:94:a8:a6:
95:1f:7c:1f:9a:16:5e:c6:12:67:11:19:9b:90:ad:
89:12:4e:8b:e4:74:1d:38:58:66:27:c3:1a:b2:52:
65:46:ae:c3:dc:bc:d3:de:d2:bb:57:7e:c8:41:3e:
a9:31:af:68:d8:82:9c:ff:dd:f2:97:47:86:b9:fe:
63:dc:87:99:b5:71:4f:29:74:04:70:59:8f:e2:10:
49:4b:64:4b:ef:75:61:27:dd:dd:7b:32:89:d5:12:
a4:f7:f4:53:75:25:4d:8a:87:fd:84:86:b9:40:a1:
88:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:26:0B:53:48:62:E0:40:7D:DA:09:2E:1F:3A:6E:D0:2E:6A:D3:FB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151389.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.131.0/24
Signature Algorithm: sha256WithRSAEncryption
41:28:75:e5:0a:bc:7e:fe:06:fe:75:db:bb:7a:97:95:64:43:
6b:0e:c0:fd:fc:06:3a:68:bb:82:87:0b:37:34:c5:18:42:f7:
18:94:1e:8e:a1:1c:06:65:cd:75:bf:3d:36:3e:e4:55:65:cd:
ff:1c:6e:c5:0b:7d:85:13:ad:86:a7:f7:ed:d3:6d:51:e3:b4:
64:ba:a2:81:17:cd:9d:73:7e:54:f4:e6:89:92:bf:90:d8:22:
bd:73:11:31:2c:9c:4a:3c:dc:85:a0:b5:10:e3:ab:9a:88:7d:
68:d2:05:fc:5f:47:c8:79:0c:48:3d:79:46:43:00:42:40:d1:
d8:89:8f:11:6f:cc:89:17:7e:be:24:0c:40:33:01:e1:1f:4a:
57:50:14:1e:ed:c5:42:a0:25:c4:4b:2a:97:8a:a3:c2:de:9c:
c6:19:ad:80:97:f1:6b:2f:f0:98:b4:7d:74:11:69:ae:bf:23:
c1:0c:9b:f3:75:66:2a:86:b5:79:5d:5f:aa:93:72:b0:36:35:
33:80:ad:78:b2:b7:17:1e:68:a1:6c:09:5d:f0:7a:1c:ab:07:
40:68:9f:f1:65:b8:d5:33:e3:86:07:7a:54:a5:ab:c1:21:4b:
84:c6:6f:6a:31:91:1c:cc:f4:2d:3c:08:f0:4c:9d:6f:16:5b:
18:5b:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:13:55 2026 by rpki-client