Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153717.roa
File: AS153717.roa (raw, json)
Hash identifier: q1GL5sGuUWgKcujeArmBgm05lpJd8snmvM4VfdFG1Hg=
Subject key identifier: 68:98:3C:FA:53:C8:EC:5C:A1:25:9A:05:29:E2:9B:90:A7:BA:EB:99
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4502EA035A3B1811C27122AAE17C7564C33357D4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153717.roa
Signing time: Mon 14 Sep 2026 11:33:03 +0000
ROA not before: Mon 14 Sep 2026 11:28:03 +0000
ROA not after: Mon 13 Sep 2027 11:33:03 +0000
asID: 153717
IP address blocks: 2a13:9500:b9::/48 maxlen: 48
2a13:9500:1da::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:02:ea:03:5a:3b:18:11:c2:71:22:aa:e1:7c:75:64:c3:33:57:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 14 11:28:03 2026 GMT
Not After : Sep 13 11:33:03 2027 GMT
Subject: CN=68983CFA53C8EC5CA1259A0529E29B90A7BAEB99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:b1:63:c7:c9:4c:bd:a6:8a:fa:e0:c9:bd:
61:88:ce:eb:9b:33:32:c0:02:89:48:b5:19:ea:4c:
98:e9:13:6a:15:73:f6:a5:3d:0a:f7:ec:ec:83:c2:
41:ed:3d:52:57:b7:36:a2:08:ae:21:14:c5:b6:49:
68:c6:d9:7b:0b:4f:d3:0b:cd:bd:60:51:d6:41:20:
c1:84:c9:50:17:cb:21:49:96:5d:30:52:7b:45:a0:
16:ff:78:a7:ce:44:67:21:eb:9b:f0:ec:a8:7e:f3:
8f:14:e8:a1:8e:c3:03:1b:93:e6:b3:cb:21:7d:7a:
55:13:c2:70:e2:2f:d8:5c:04:49:6f:b0:da:82:03:
8f:9c:6e:1a:e4:15:4e:96:10:12:9d:87:e2:df:f0:
2d:5e:e7:d6:ed:15:9c:35:b2:d8:e5:f6:10:cd:c1:
64:33:8c:98:b6:23:41:19:cb:f7:23:c3:2a:81:8c:
04:60:09:d9:a9:e8:52:20:14:b6:07:77:65:c3:0a:
88:9b:f2:5f:a7:97:2c:c3:9c:5b:8b:10:d8:34:5b:
0d:56:06:79:c4:80:f2:3e:6e:42:02:31:84:a6:cd:
69:60:c5:b3:ae:2f:6a:57:cc:4e:02:1a:ee:33:e4:
7d:cb:d3:d3:c6:42:93:38:3c:0a:2c:e2:fc:61:58:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:98:3C:FA:53:C8:EC:5C:A1:25:9A:05:29:E2:9B:90:A7:BA:EB:99
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153717.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:b9::/48
2a13:9500:1da::/48
Signature Algorithm: sha256WithRSAEncryption
43:2d:15:54:0a:cb:4f:56:f4:11:c0:20:27:4b:d9:06:0b:ea:
8e:1d:6b:b1:aa:0a:01:81:95:2f:aa:f0:17:f8:20:7e:1a:00:
db:6a:16:89:95:6a:9c:2b:b3:ae:c5:29:4a:86:79:18:ea:bc:
09:04:14:55:21:1c:fd:26:0c:dc:79:97:9d:9d:07:9a:da:36:
81:dd:32:21:3a:df:d1:fc:d4:64:01:48:8c:7b:60:35:ee:99:
ad:80:c2:46:86:cb:3d:7a:7d:5d:2f:00:33:c4:97:cd:87:81:
cc:9c:e7:91:c0:94:65:02:d5:cc:bc:09:cc:11:b5:1b:49:c2:
35:3d:f9:fe:0e:32:3e:9c:ed:b0:1c:95:94:b7:cb:6b:f0:ff:
e8:8e:cc:31:80:d2:83:29:b2:76:51:0a:51:ed:86:2f:54:c2:
ff:75:74:86:6f:ab:cd:c1:d0:4e:1e:7c:4b:6d:5d:a5:90:96:
07:7f:6e:78:a8:9f:25:60:1f:02:2d:25:94:14:f1:75:95:1a:
dc:e9:33:d3:79:aa:5e:d6:aa:63:9b:2b:88:1c:d7:91:90:23:
99:ab:ee:21:cb:36:97:e3:e4:d6:e2:33:00:f8:75:88:25:49:
1b:16:a3:31:46:2e:a4:33:d5:ae:b1:cf:86:ef:31:aa:ed:b1:
01:d0:07:82
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIURQLqA1o7GBHCcSKq4Xx1ZMMzV9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MTQxMTI4MDNaFw0yNzA5MTMxMTMzMDNaMDMxMTAvBgNV
BAMTKDY4OTgzQ0ZBNTNDOEVDNUNBMTI1OUEwNTI5RTI5QjkwQTdCQUVCOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0TLFjx8lMvaaK+uDJvWGIzuub
MzLAAolItRnqTJjpE2oVc/alPQr37OyDwkHtPVJXtzaiCK4hFMW2SWjG2XsLT9ML
zb1gUdZBIMGEyVAXyyFJll0wUntFoBb/eKfORGch65vw7Kh+848U6KGOwwMbk+az
yyF9elUTwnDiL9hcBElvsNqCA4+cbhrkFU6WEBKdh+Lf8C1e59btFZw1stjl9hDN
wWQzjJi2I0EZy/cjwyqBjARgCdmp6FIgFLYHd2XDCoib8l+nlyzDnFuLENg0Ww1W
BnnEgPI+bkICMYSmzWlgxbOuL2pXzE4CGu4z5H3L09PGQpM4PAos4vxhWF/vAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUaJg8+lPI7FyhJZoFKeKbkKe665kwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTUzNzE3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhOV
AAC5AwcAKhOVAAHaMA0GCSqGSIb3DQEBCwUAA4IBAQBDLRVUCstPVvQRwCAnS9kG
C+qOHWuxqgoBgZUvqvAX+CB+GgDbahaJlWqcK7OuxSlKhnkY6rwJBBRVIRz9Jgzc
eZednQea2jaB3TIhOt/R/NRkAUiMe2A17pmtgMJGhss9en1dLwAzxJfNh4HMnOeR
wJRlAtXMvAnMEbUbScI1Pfn+DjI+nO2wHJWUt8tr8P/ojswxgNKDKbJ2UQpR7YYv
VML/dXSGb6vNwdBOHnxLbV2lkJYHf254qJ8lYB8CLSWUFPF1lRrc6TPTeape1qpj
myuIHNeRkCOZq+4hyzaX4+TW4jMA+HWIJUkbFqMxRi6kM9Wusc+G7zGq7bEB0AeC
-----END CERTIFICATE-----
Generated at Mon Sep 21 03:14:14 2026 by rpki-client