Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153719.roa
File: AS153719.roa (raw, json)
Hash identifier: dxaOeW/6ywYoSFJdwzgpbBYHvPXWFFwMgvnsC5KheO0=
Subject key identifier: CF:BA:86:9C:A8:8B:B9:56:22:9F:FE:48:29:31:A4:63:9C:33:C7:B0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7EF14D79D697F65645FF2FAF29DF4A1263E19785
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153719.roa
Signing time: Fri 04 Sep 2026 08:38:07 +0000
ROA not before: Fri 04 Sep 2026 08:33:07 +0000
ROA not after: Fri 03 Sep 2027 08:38:07 +0000
asID: 153719
IP address blocks: 82.22.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:f1:4d:79:d6:97:f6:56:45:ff:2f:af:29:df:4a:12:63:e1:97:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 4 08:33:07 2026 GMT
Not After : Sep 3 08:38:07 2027 GMT
Subject: CN=CFBA869CA88BB956229FFE482931A4639C33C7B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:d7:0b:36:42:93:b6:71:24:de:9b:d6:9d:
a4:dd:fc:3b:6e:bd:64:b8:72:e8:dc:88:ea:88:a7:
84:b3:b2:05:b1:64:f2:f6:0b:ce:a4:c9:f9:4f:59:
ad:2c:27:99:54:b2:cb:c8:6a:9e:9c:73:ef:d3:0a:
b1:ff:32:85:57:6a:f8:69:be:15:79:92:c9:d5:66:
b1:96:4e:e0:a3:6c:bf:59:3c:db:c7:be:d9:7b:ca:
d6:84:80:b5:40:76:f7:44:a6:82:7c:41:7d:93:90:
71:d5:2f:d5:c2:a7:53:86:06:74:6f:26:50:d3:9c:
1a:89:c7:e5:d1:3f:6b:49:3e:0d:ee:63:34:82:46:
ec:2b:0b:34:51:14:21:88:39:a4:1f:e1:39:34:bf:
0e:ce:ef:83:8f:9f:e5:62:16:64:8b:3c:6b:62:a1:
01:dc:fa:6d:a0:5b:3a:32:f6:74:51:59:12:04:66:
da:be:fa:09:77:c2:b8:5a:a8:13:96:d9:e2:2b:bd:
8a:8c:28:34:3f:c4:fa:3f:02:20:c4:93:fc:42:30:
e3:8f:40:6c:b0:c3:be:f4:a9:64:bb:db:b0:cc:7d:
0b:30:22:72:1f:f5:85:17:78:f2:b6:3c:8c:3d:b2:
82:a6:d0:3d:91:a0:72:5f:81:e0:d6:4d:db:88:8d:
71:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BA:86:9C:A8:8B:B9:56:22:9F:FE:48:29:31:A4:63:9C:33:C7:B0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153719.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.54.0/24
Signature Algorithm: sha256WithRSAEncryption
95:1b:0c:97:d7:69:90:fe:98:d8:dd:01:2d:01:11:61:7f:c3:
c2:7e:a1:a2:6c:d7:39:d1:37:4c:9c:f3:f8:05:88:bf:7c:e9:
b5:6c:ab:e3:bb:9a:a6:0c:d8:45:ee:70:02:e3:7e:10:44:95:
34:08:19:5a:24:cb:ca:92:99:5c:8d:c0:c4:a8:56:5c:fc:8e:
fd:1c:5b:21:52:87:d7:b5:cc:a9:82:49:fa:13:57:89:59:91:
6c:76:f0:e2:1c:2d:3b:c4:d8:b7:44:34:b6:2f:e7:e8:e4:8d:
e7:f8:93:45:3d:f0:ca:83:39:28:eb:c3:0e:2d:f3:2c:ad:59:
a7:fb:2d:98:20:99:ef:41:6d:b0:c9:ca:17:1a:0f:07:6e:9e:
36:b2:91:7b:82:ea:24:e8:b6:b8:b1:cb:39:dc:c6:ab:27:20:
5b:46:86:21:1b:4c:df:cc:81:e3:f5:4c:6c:78:88:d6:b6:2b:
83:82:24:e2:ed:75:29:a2:5a:f4:2d:78:1f:08:a1:04:1d:98:
90:70:53:80:6e:62:2f:0b:35:f5:1e:98:8c:9e:93:3e:4c:8d:
42:fd:3d:72:49:81:61:ce:ee:d5:fd:e3:3d:5c:9b:c2:41:84:
7d:38:57:f3:c6:88:1e:0a:93:86:99:fb:53:6b:ca:0a:8f:83:
5b:dd:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:25:52 2026 by rpki-client