Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153568.roa
File: AS153568.roa (raw, json)
Hash identifier: aqFPOIY7WRaeiEpP21vMDaQxuAqdnEevqavWuF7e6sc=
Subject key identifier: 09:14:82:43:52:49:6F:6A:CE:04:03:F4:B3:4C:37:2D:88:D0:F1:8D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7448E3A109A4216463C8916F087BCBAEFA566F5B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153568.roa
Signing time: Wed 27 May 2026 05:35:18 +0000
ROA not before: Wed 27 May 2026 05:30:18 +0000
ROA not after: Wed 26 May 2027 05:35:18 +0000
asID: 153568
IP address blocks: 82.25.52.0/24 maxlen: 24
84.75.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:48:e3:a1:09:a4:21:64:63:c8:91:6f:08:7b:cb:ae:fa:56:6f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 27 05:30:18 2026 GMT
Not After : May 26 05:35:18 2027 GMT
Subject: CN=0914824352496F6ACE0403F4B34C372D88D0F18D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1d:65:4c:e7:49:a7:2e:79:1c:a8:47:56:2e:
05:93:4a:f4:62:cb:18:86:24:1e:10:36:cc:30:4b:
bf:b2:f8:86:d9:f0:ec:59:f2:35:9b:2f:4e:b1:80:
8a:f9:a2:c3:31:ce:c3:eb:bf:e9:aa:77:b8:d0:49:
7c:14:54:ee:bb:03:b8:61:14:6e:a9:63:c0:e1:4e:
aa:56:b3:5b:33:f8:0e:40:ef:ab:b4:5d:51:d0:02:
83:4c:30:c2:c1:4f:0e:72:34:91:42:69:4d:5d:83:
b1:9d:ab:bd:3b:57:f9:a3:31:22:bd:46:41:05:05:
15:73:f0:60:74:5e:5f:f8:46:35:bb:c2:55:24:5f:
2c:93:97:42:cd:9c:95:4e:a3:5c:63:d1:7f:69:7c:
dd:80:6f:a6:f4:f1:e6:99:1c:7a:c0:02:59:42:ff:
5e:bd:a3:49:30:d7:cd:2a:86:e7:97:6d:a2:a4:9d:
f0:77:7c:1d:b1:a7:5c:bb:6e:4a:a1:ba:48:88:3c:
03:fa:4f:f5:ff:a0:13:c1:dd:8a:0b:be:18:11:a9:
2e:10:22:4c:c1:81:a9:64:f1:e3:34:29:94:0c:b7:
88:34:18:bc:69:fa:ce:65:99:99:19:9f:94:5d:ee:
57:75:ca:8c:66:b5:06:07:7b:88:f8:7a:f7:3f:ab:
4d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:14:82:43:52:49:6F:6A:CE:04:03:F4:B3:4C:37:2D:88:D0:F1:8D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153568.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.52.0/24
84.75.145.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ae:22:1e:79:44:31:60:7e:39:63:f8:82:47:db:53:a5:49:
3f:99:94:12:49:0a:fb:31:03:d7:ae:05:53:30:e8:dc:7e:03:
2a:89:0d:57:16:50:a4:65:f8:09:4c:e6:2b:8b:50:35:84:b5:
f1:52:76:4a:04:d3:83:d1:42:3d:a4:2c:2a:62:2f:ec:76:f8:
37:dd:cb:a9:46:ff:c1:61:97:9c:a8:9a:b5:75:63:08:bf:e2:
7e:d7:64:56:3f:c5:a1:74:da:5d:5f:92:85:1b:46:68:79:1e:
03:00:81:95:b5:c1:2d:db:b4:9e:48:95:40:f7:9e:6e:46:6d:
74:c8:bb:c4:09:c7:71:01:0d:50:91:46:25:5c:13:1c:85:6b:
b8:63:f4:58:19:9f:f3:f4:63:b6:85:00:f3:00:be:6e:23:73:
b6:9b:cf:c4:e7:df:f7:06:bf:6f:2b:fe:b3:5e:f6:38:ff:56:
be:1b:44:df:d1:85:4d:1d:04:71:49:4b:6c:6e:30:36:72:07:
11:1a:38:aa:49:cb:61:f5:72:41:92:5a:99:b1:d8:09:2e:d7:
af:9b:42:cd:47:0e:7e:32:79:44:ad:b0:cf:97:c1:b7:4b:ee:
6e:61:60:04:68:8d:9e:dd:09:16:16:18:bf:b0:8d:d6:23:07:
a6:19:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:01 2026 by rpki-client