Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153376.roa
File: AS153376.roa (raw, json)
Hash identifier: U775IbGbVzdS9Q4fb3RCOq4MowtUMGKFW8mJS1piEis=
Subject key identifier: F5:7F:81:03:F0:2D:FF:A0:4E:D8:67:6D:27:76:37:D3:3C:42:C3:CD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 53248B4F2DBC212BDB95F558B92A0D2180CD30A7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153376.roa
Signing time: Tue 16 Jun 2026 08:22:41 +0000
ROA not before: Tue 16 Jun 2026 08:17:41 +0000
ROA not after: Tue 15 Jun 2027 08:22:41 +0000
asID: 153376
IP address blocks: 2a13:9500:195::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:24:8b:4f:2d:bc:21:2b:db:95:f5:58:b9:2a:0d:21:80:cd:30:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 16 08:17:41 2026 GMT
Not After : Jun 15 08:22:41 2027 GMT
Subject: CN=F57F8103F02DFFA04ED8676D277637D33C42C3CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0f:9d:1c:5d:74:3d:ea:c8:8c:f5:71:8c:c1:
42:4e:99:a3:7a:4c:13:9c:9f:b5:95:22:92:45:e0:
51:c1:da:fb:c3:7d:2d:23:80:d8:fe:e3:28:d8:7c:
ea:75:87:f0:72:18:b6:aa:4e:64:94:a5:40:01:bc:
3b:b7:ca:d5:12:19:c0:59:e8:8d:24:56:19:c5:35:
06:c0:19:ea:45:1c:a5:66:0e:4f:ea:00:61:99:af:
37:33:40:93:50:26:01:58:8a:ba:51:1b:5f:70:d0:
9b:c4:b3:76:14:8b:d1:80:06:5c:e4:83:1f:bd:03:
1f:47:53:81:d9:7c:dd:13:92:7a:57:1f:c1:e4:fd:
47:a3:9e:a1:db:5e:9c:bd:9e:31:5a:d5:76:a6:da:
7f:a1:9c:e6:c3:f2:5e:76:5c:77:a0:0a:a3:85:40:
73:f4:56:89:bb:ae:5e:21:28:9b:b2:59:2b:2e:c0:
e6:5e:ee:e6:ae:ad:8b:9e:dc:c8:20:2d:ee:d8:43:
ce:2d:37:1f:b7:4d:de:b4:41:59:81:19:97:62:66:
62:03:19:ca:41:66:1b:2e:85:0e:1f:05:da:8c:d7:
c2:60:65:ff:13:69:8b:47:23:47:9e:2d:2e:a9:b2:
43:7c:f8:f1:50:cd:ff:9f:97:0b:d4:07:8a:f0:3e:
30:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7F:81:03:F0:2D:FF:A0:4E:D8:67:6D:27:76:37:D3:3C:42:C3:CD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153376.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:195::/48
Signature Algorithm: sha256WithRSAEncryption
20:e1:cb:a6:c9:52:c4:d0:3e:26:ad:28:4e:71:8d:ae:35:ec:
cc:37:94:ad:de:f6:50:f3:f2:70:50:67:4d:c2:0b:bd:23:24:
8f:a7:b9:84:b3:42:92:8c:66:23:bf:71:56:a1:b8:bb:0c:f1:
e9:ed:97:3e:dc:8a:81:9e:ce:06:79:34:23:1c:be:28:f3:63:
50:5f:69:39:bb:d5:ed:c0:fe:62:2a:8a:15:9e:ce:ed:c5:9a:
b2:d5:b6:79:a7:06:0b:61:7f:d2:eb:14:c6:9b:a5:fc:9c:3d:
63:23:9f:0e:f2:ab:4c:bb:03:68:c9:38:5a:50:55:26:fd:dc:
ef:0d:fa:f7:11:f6:9f:0d:f1:81:03:cc:2c:ae:41:55:8f:c8:
7b:d1:57:e4:e5:f8:ff:da:bc:cf:07:37:44:82:12:bd:e2:de:
08:77:44:83:2b:5b:50:ec:52:f0:46:88:7c:83:b3:aa:22:66:
c2:39:25:31:f9:5c:1a:14:93:d7:82:d3:ff:6f:f4:ee:ec:6e:
14:ab:13:c6:ee:63:ce:8f:b8:a4:0d:98:aa:f0:f6:72:66:8d:
67:3a:a6:7d:6b:31:7d:31:a3:36:f5:b7:52:85:43:66:ea:e8:
b6:e4:15:b0:4c:0f:f5:0e:df:bd:f0:4c:98:48:45:89:65:19:
3f:53:d8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:06:42 2026 by rpki-client