Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS15169.roa
File: AS15169.roa (raw, json)
Hash identifier: Dbdw/z/SkpuF0T4Vc/9ZkwwaIDySWLNfqu4o3TK7/u8=
Subject key identifier: 47:04:2A:B1:58:8D:0F:D7:95:AB:EC:B2:01:79:FD:52:52:58:CC:CA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 72E48522B5426910849117BCF72B1376BCC1AD21
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS15169.roa
Signing time: Sun 18 Oct 2026 11:47:06 +0000
ROA not before: Sun 18 Oct 2026 11:42:06 +0000
ROA not after: Sun 17 Oct 2027 11:47:06 +0000
asID: 15169
IP address blocks: 82.39.118.0/24 maxlen: 24
2a13:9500:1f5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:e4:85:22:b5:42:69:10:84:91:17:bc:f7:2b:13:76:bc:c1:ad:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 18 11:42:06 2026 GMT
Not After : Oct 17 11:47:06 2027 GMT
Subject: CN=47042AB1588D0FD795ABECB20179FD525258CCCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f6:05:fc:3d:7e:41:7a:3a:a5:0a:28:1e:d7:
1d:9c:11:60:d3:71:02:81:51:3a:98:34:75:48:8b:
6f:9d:9f:fb:d5:13:35:9f:51:b6:55:37:70:3b:5a:
b9:6e:28:7c:4c:0f:27:de:2e:7e:f4:e9:ab:fb:61:
5f:0e:50:c2:8d:53:c0:44:b9:98:28:ba:e5:f8:ca:
1f:86:e9:95:e1:06:7b:1d:02:8b:31:6f:47:6b:0a:
e4:18:dd:fe:5b:cd:86:e0:e9:58:82:3a:21:c7:82:
bf:1a:0f:ce:24:e2:b0:09:83:96:3b:78:6d:4a:8e:
38:ab:2f:2a:c7:6f:76:f5:a7:6f:5d:e9:8e:ad:52:
3e:63:b1:7b:19:fb:14:db:90:2b:50:23:30:4d:82:
1a:51:c3:d6:89:b3:95:91:d2:ec:5a:03:9e:f2:f5:
f7:49:92:0a:4d:d2:62:67:c1:93:a4:84:81:65:64:
1b:71:70:c5:75:35:03:3f:8f:ec:a1:f9:0e:88:6e:
f2:13:f6:3b:8d:98:70:01:66:dc:e9:0d:f7:40:2c:
06:c7:7d:2b:1e:bf:bd:71:1a:f2:1c:3a:c8:9a:cd:
59:43:4d:d2:57:c8:f0:07:c8:dd:af:da:ae:ea:f6:
84:83:a7:74:ee:f1:50:3b:d8:2b:99:e2:03:17:5a:
33:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:04:2A:B1:58:8D:0F:D7:95:AB:EC:B2:01:79:FD:52:52:58:CC:CA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS15169.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.118.0/24
IPv6:
2a13:9500:1f5::/48
Signature Algorithm: sha256WithRSAEncryption
5d:f5:ad:17:66:b0:6a:6d:cf:01:aa:51:7f:f7:f2:8b:a6:c6:
38:e8:b5:80:b5:29:1c:3e:3f:7b:4d:88:2d:4f:ce:71:e8:38:
4f:ed:bb:3a:7a:d0:9f:39:60:4d:77:c9:66:e0:30:d7:0f:66:
f6:cc:3d:46:65:c2:53:34:c6:36:a1:39:da:ad:94:d9:87:96:
55:1b:ef:de:d3:1f:66:34:bd:2b:fa:2c:e3:69:ac:54:2d:03:
20:50:2a:39:8d:bc:30:74:e7:3f:cc:ee:52:1d:40:23:d5:72:
7b:00:cc:f2:80:6f:f6:f2:d9:92:bb:18:55:ec:9a:09:1b:87:
6c:0e:fc:db:10:af:27:50:ad:18:19:d1:97:c7:a3:bf:bb:3e:
b9:a0:6e:47:39:8f:89:61:7a:ba:cd:2a:cd:39:16:81:44:41:
6a:8b:bc:69:b0:a5:61:75:d0:34:65:cc:51:25:03:be:50:f4:
8b:82:af:26:b9:6a:b3:e7:58:8a:b3:19:90:59:01:53:ef:e1:
40:c2:c7:3b:7f:90:69:93:89:40:e9:8f:1c:ed:12:82:f5:f0:
3f:e1:17:1a:81:df:d4:7b:08:16:dd:14:0e:a9:1f:5d:ce:03:
85:36:92:b3:be:01:e1:16:aa:19:f2:1a:dc:4c:15:d0:f6:45:
74:38:11:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 07:45:32 2026 by rpki-client