Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153259.roa
File: AS153259.roa (raw, json)
Hash identifier: QaQIshl0jmRKbQqKXkzWnHGe//v3C4ItT6+h2O9YdSE=
Subject key identifier: CB:AA:10:7E:D0:22:AD:C4:83:10:10:9F:AF:17:26:FE:B5:1F:BC:0D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 01D9EF3A9AC3A58E109C90D57D29888BACEEAAA3
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153259.roa
Signing time: Thu 17 Sep 2026 05:43:32 +0000
ROA not before: Thu 17 Sep 2026 05:38:32 +0000
ROA not after: Thu 16 Sep 2027 05:43:32 +0000
asID: 153259
IP address blocks: 82.22.13.0/24 maxlen: 24
82.38.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:d9:ef:3a:9a:c3:a5:8e:10:9c:90:d5:7d:29:88:8b:ac:ee:aa:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 17 05:38:32 2026 GMT
Not After : Sep 16 05:43:32 2027 GMT
Subject: CN=CBAA107ED022ADC48310109FAF1726FEB51FBC0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a9:fa:82:ac:af:da:56:cc:c9:fa:7c:fa:49:
a2:ba:97:94:20:62:87:95:4b:8a:f6:d9:d0:8a:cf:
38:14:c8:63:a3:68:fb:8f:5c:2d:e2:18:f6:0e:1c:
13:73:15:c7:8f:9a:11:bd:cd:0b:3d:81:33:ec:e4:
12:aa:db:ab:02:8b:30:1e:a5:63:12:81:94:17:d8:
e4:6f:21:a4:ed:80:be:bd:f6:60:dd:66:fb:2e:fd:
03:0e:26:ea:0b:5a:37:21:46:5b:21:29:cb:31:c8:
19:b5:e7:f8:e5:a3:a6:65:24:8a:42:e5:9a:a8:08:
df:06:50:0c:b5:65:95:f2:b6:3c:98:87:81:bf:b6:
48:9d:cd:04:27:f1:fa:37:84:c4:8e:9c:ee:c5:b8:
25:7e:65:64:15:a1:d7:84:52:a1:b2:09:19:5f:b9:
4f:1f:dc:71:7a:aa:4c:74:96:45:30:88:1a:35:9f:
de:e0:2d:f9:fa:f7:ac:5b:f9:39:47:0c:4c:1d:5a:
aa:28:48:1f:0a:31:ab:8e:da:24:1e:94:91:7f:23:
1f:6a:39:65:b4:0a:e9:b6:1d:c6:76:15:f6:2a:f8:
5d:40:85:bf:70:4d:f7:67:3e:c5:77:86:af:bd:1a:
5a:76:9f:be:c8:59:00:8a:9c:75:89:69:57:da:6c:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AA:10:7E:D0:22:AD:C4:83:10:10:9F:AF:17:26:FE:B5:1F:BC:0D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153259.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.13.0/24
82.38.104.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:88:9d:16:1f:70:c4:b6:02:7b:47:cd:7b:0a:57:ee:5b:7d:
eb:df:e3:23:55:2a:25:74:71:cf:9f:97:a8:a9:44:3a:ba:f4:
73:55:03:62:19:fb:66:1e:5d:4d:44:bb:78:6c:64:bb:2e:aa:
68:f1:07:26:8d:c7:30:7e:08:7c:8c:9d:bd:5e:65:5a:b6:11:
48:44:94:64:97:22:c0:75:cc:af:5a:5c:04:ba:1b:76:95:ab:
72:31:2f:eb:19:8d:47:88:b2:7b:04:d9:45:eb:d4:ff:5f:f6:
1f:b1:2e:ad:1a:b5:74:66:a2:3b:5b:79:4d:96:b5:3f:a2:21:
dc:f8:d6:c6:4a:80:8d:cf:8d:8b:7d:ac:b6:e1:38:75:7f:d0:
57:c5:15:72:94:2b:1e:11:09:13:94:b0:30:47:8f:82:c0:4f:
fb:8d:cb:42:d1:58:ad:20:19:79:0f:b6:89:c5:62:e8:9d:f4:
b5:4b:0f:a8:c6:72:09:23:96:db:54:18:cb:13:3b:fd:18:9d:
7a:6b:bb:e8:8f:85:c3:06:f9:33:ff:7b:02:5d:c4:55:55:eb:
13:9b:a5:35:45:4e:e7:21:df:73:48:67:eb:03:0f:a7:61:ca:
75:9e:e0:1c:b1:99:74:a9:d0:5d:72:7b:f0:a3:40:90:87:ad:
0a:13:64:56
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUAdnvOprDpY4QnJDVfSmIi6zuqqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MTcwNTM4MzJaFw0yNzA5MTYwNTQzMzJaMDMxMTAvBgNV
BAMTKENCQUExMDdFRDAyMkFEQzQ4MzEwMTA5RkFGMTcyNkZFQjUxRkJDMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqfqCrK/aVszJ+nz6SaK6l5Qg
YoeVS4r22dCKzzgUyGOjaPuPXC3iGPYOHBNzFcePmhG9zQs9gTPs5BKq26sCizAe
pWMSgZQX2ORvIaTtgL699mDdZvsu/QMOJuoLWjchRlshKcsxyBm15/jlo6ZlJIpC
5ZqoCN8GUAy1ZZXytjyYh4G/tkidzQQn8fo3hMSOnO7FuCV+ZWQVodeEUqGyCRlf
uU8f3HF6qkx0lkUwiBo1n97gLfn696xb+TlHDEwdWqooSB8KMauO2iQelJF/Ix9q
OWW0Cum2HcZ2FfYq+F1Ahb9wTfdnPsV3hq+9Glp2n77IWQCKnHWJaVfabAlhAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUy6oQftAircSDEBCfrxcm/rUfvA0wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTUzMjU5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUhYN
AwQAUiZoMA0GCSqGSIb3DQEBCwUAA4IBAQCeiJ0WH3DEtgJ7R817ClfuW33r3+Mj
VSoldHHPn5eoqUQ6uvRzVQNiGftmHl1NRLt4bGS7Lqpo8Qcmjccwfgh8jJ29XmVa
thFIRJRklyLAdcyvWlwEuht2latyMS/rGY1HiLJ7BNlF69T/X/YfsS6tGrV0ZqI7
W3lNlrU/oiHc+NbGSoCNz42Lfay24Th1f9BXxRVylCseEQkTlLAwR4+CwE/7jctC
0VitIBl5D7aJxWLonfS1Sw+oxnIJI5bbVBjLEzv9GJ16a7voj4XDBvkz/3sCXcRV
VesTm6U1RU7nId9zSGfrAw+nYcp1nuAcsZl0qdBdcnvwo0CQh60KE2RW
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:30:51 2026 by rpki-client