Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153786.roa
File: AS153786.roa (raw, json)
Hash identifier: uPDoxOo5H3PSbakFdWQndqJO5Q+g7QM0vv/LvOfQc/c=
Subject key identifier: 00:0D:F1:7E:53:28:05:D2:CF:D2:A2:BE:11:B8:F5:7D:7E:60:CB:CC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6E1E5C158D825262C0DFDA2A8CDB708B02F384E8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153786.roa
Signing time: Sun 26 Jul 2026 18:37:53 +0000
ROA not before: Sun 26 Jul 2026 18:32:53 +0000
ROA not after: Sun 25 Jul 2027 18:37:53 +0000
asID: 153786
IP address blocks: 178.83.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:1e:5c:15:8d:82:52:62:c0:df:da:2a:8c:db:70:8b:02:f3:84:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 26 18:32:53 2026 GMT
Not After : Jul 25 18:37:53 2027 GMT
Subject: CN=000DF17E532805D2CFD2A2BE11B8F57D7E60CBCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:50:6d:56:f3:8f:a8:47:e8:56:1e:6d:08:
55:82:f2:d0:7e:c7:b1:09:83:db:ac:67:df:f7:b0:
0d:dd:95:27:9f:cb:2e:92:a7:65:39:d2:57:5e:ce:
f8:1d:7b:fb:be:77:27:06:e3:af:e6:79:be:0d:ca:
12:93:48:b8:91:0c:4a:97:83:d5:74:2a:61:68:25:
d0:20:cf:c7:37:59:df:4e:46:95:16:86:e8:95:03:
86:05:61:dd:a7:1d:f7:51:5a:c2:37:be:d6:0c:90:
30:b8:4c:f4:a2:c5:ba:e7:c4:db:d1:66:be:43:7a:
7c:c5:ae:2a:b9:f5:f5:64:e9:4a:e5:44:6a:48:cb:
9a:5f:ab:e0:46:02:aa:6a:2a:d0:9e:2d:35:ba:b1:
e0:b6:cc:da:d5:93:bb:25:8d:b1:64:fc:c8:97:5a:
0e:fa:15:3c:d5:c0:e2:2b:c8:7f:dd:17:f3:32:47:
61:ed:22:d9:08:99:2c:65:04:77:cc:4a:95:33:fe:
0c:05:73:25:46:b0:6c:c1:a8:87:25:6b:e2:1e:a8:
bf:e9:00:aa:1a:cf:6c:5c:28:cb:4d:a2:44:e2:73:
e8:ce:cd:18:c3:dd:4c:05:c7:8d:85:63:5a:14:ff:
71:8a:51:bb:ba:3e:cb:95:ae:8e:87:21:78:1f:f6:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0D:F1:7E:53:28:05:D2:CF:D2:A2:BE:11:B8:F5:7D:7E:60:CB:CC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153786.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.86.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b3:3d:47:63:e5:9c:74:f5:06:e1:f0:4c:b0:26:23:c6:e6:
e7:16:bc:6c:4d:29:2e:b3:2c:06:19:1d:8c:69:0e:e0:ab:e0:
47:09:74:d9:d7:fd:11:4e:e2:7b:6e:f3:3e:33:36:a6:4d:71:
30:82:b6:3d:29:c1:39:b4:68:a8:2a:11:e8:cc:4c:1f:ad:ce:
88:06:82:c1:ed:46:6f:03:07:f4:22:b8:4c:83:cc:8b:0e:3a:
db:ba:6e:09:d8:a0:36:c8:9b:d3:fe:1c:c9:52:f2:9a:c3:d5:
1a:ff:3a:68:61:b9:4e:20:89:5f:1e:a9:8d:c2:72:be:cf:56:
57:61:2b:17:38:0c:1f:81:87:d0:64:92:7c:09:7c:10:f4:d4:
0e:8d:1d:40:09:8f:19:05:c3:dd:d4:e2:3e:67:d6:22:aa:af:
8e:74:7b:c6:47:79:93:22:c2:50:f7:c6:d8:3c:1f:f2:78:b8:
4f:0a:ea:43:3a:52:11:75:f1:d1:74:28:e2:f0:b4:78:8a:9e:
6b:9b:85:20:16:3f:ad:00:73:bc:31:74:6d:33:25:65:de:5d:
8d:43:e9:85:05:96:58:25:1b:cc:7f:9c:84:a6:1f:54:22:14:
08:48:dd:48:57:91:10:c6:97:71:b5:fa:74:62:34:49:5d:d6:
87:f0:56:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:00:12 2026 by rpki-client