Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: U7vMF3IqzY+yeTQZHHuyeB6aLxJS0T+ZS2lVX3T2nl8=
Subject key identifier: 5B:69:DA:DB:59:85:03:73:EB:65:0D:C0:B7:72:81:76:35:DE:2F:1F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5CDD0E3F9E79FCB67C4525A53305BF3196FB1763
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
Signing time: Wed 04 Nov 2026 10:29:37 +0000
ROA not before: Wed 04 Nov 2026 10:24:37 +0000
ROA not after: Wed 03 Nov 2027 10:29:37 +0000
asID: 152179
IP address blocks: 82.21.80.0/23 maxlen: 24
82.21.149.0/24 maxlen: 24
82.24.164.0/24 maxlen: 24
82.24.165.0/24 maxlen: 24
82.24.166.0/24 maxlen: 24
82.24.167.0/24 maxlen: 24
82.39.150.0/24 maxlen: 24
2a13:9500:57::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:dd:0e:3f:9e:79:fc:b6:7c:45:25:a5:33:05:bf:31:96:fb:17:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 4 10:24:37 2026 GMT
Not After : Nov 3 10:29:37 2027 GMT
Subject: CN=5B69DADB59850373EB650DC0B772817635DE2F1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:0d:0c:08:f6:0e:6a:3a:25:83:8b:ee:e8:
50:e9:b9:3e:53:28:47:08:cc:8e:c8:dd:00:0e:51:
49:ae:d3:1c:a2:c9:f6:03:e5:2c:8f:24:41:9c:e3:
df:60:c2:f8:8c:5e:20:db:36:d6:0c:05:42:13:97:
e3:0f:9f:3b:ac:f7:2e:79:94:8a:c3:6a:72:16:98:
17:49:20:67:f4:60:d3:5e:28:e1:dc:09:bb:1e:e4:
a4:31:bb:94:b2:f8:29:35:0f:44:a2:8c:96:ee:94:
27:e1:72:45:f4:af:7f:3d:4a:a4:b7:39:df:b3:5f:
34:b2:9a:51:47:bf:ec:d2:8f:b7:22:f7:a9:a6:b9:
c0:fc:60:4a:11:67:5f:7f:44:87:c5:df:96:77:ec:
09:95:c1:78:17:75:6c:a3:15:d3:4f:d1:c0:15:e5:
0d:4e:fe:8f:cd:1e:63:61:2f:3d:f6:70:4f:fe:67:
3d:8d:9f:00:b8:96:0b:02:5b:9d:37:40:94:f0:20:
ef:91:19:6b:96:43:4d:90:b2:b8:f6:cd:2f:6a:2f:
92:66:c0:20:fb:a5:9f:e7:8f:a1:b9:07:30:88:4d:
5e:ba:8a:17:30:21:79:23:9e:c8:65:e9:8b:8f:61:
c9:26:bf:71:95:02:7e:e5:f6:9d:6f:83:1c:0d:ec:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:69:DA:DB:59:85:03:73:EB:65:0D:C0:B7:72:81:76:35:DE:2F:1F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.80.0/23
82.21.149.0/24
82.24.164.0/22
82.39.150.0/24
IPv6:
2a13:9500:57::/48
Signature Algorithm: sha256WithRSAEncryption
5d:9a:a3:7a:ce:bd:46:ba:be:94:a9:25:05:91:af:f0:5e:ca:
23:c9:cc:b4:32:e5:27:b4:a0:ca:ea:87:1c:96:3c:05:0a:e4:
43:25:bd:82:1b:09:6c:da:0e:46:7d:64:72:d4:07:c6:3d:5f:
2c:6c:dc:ff:12:32:04:62:7d:d1:f1:eb:da:62:ba:af:b3:d6:
1c:30:b8:7c:41:10:37:5c:6b:bf:c0:36:8e:f0:a9:17:ed:20:
bd:d9:8e:58:0e:f7:24:09:5c:1d:ed:79:1e:c6:83:8e:e3:4e:
8f:e6:be:b9:9e:22:6e:0c:2c:fc:ac:88:63:c6:88:9a:27:ab:
ad:a4:92:cc:5a:76:c9:37:c3:d7:aa:23:02:53:34:6b:49:f4:
49:a6:f5:d6:75:0d:ce:47:93:3c:77:bb:2e:58:1c:d0:43:06:
f9:68:6a:d8:f2:59:a9:31:b7:53:87:84:21:d1:a0:c2:33:e0:
62:d7:f7:7f:65:a6:40:c8:76:af:78:a2:c6:df:5d:ad:15:72:
5f:f4:81:c2:2f:bb:5d:68:82:a9:e4:0a:26:55:d8:bd:d8:b1:
68:63:e1:d6:56:83:15:ec:29:fc:d6:62:e5:99:b0:fb:5c:10:
a6:0f:8e:fd:70:bf:d7:d0:92:b4:4d:22:cf:3a:06:59:bc:d5:
28:2a:17:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:26:18 2026 by rpki-client