Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154049.roa
File: AS154049.roa (raw, json)
Hash identifier: jCryjNmKd84cbfgnqEIcAQZI+aXg6vGxy+WCixCi3sw=
Subject key identifier: 6A:99:55:C2:61:46:80:47:A9:73:D8:AD:6E:F5:DA:F3:E9:F3:12:D5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5983EFD48EE7545C5EF7DD7F7298F311E49D0196
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154049.roa
Signing time: Mon 04 Aug 2025 17:27:03 +0000
ROA not before: Mon 04 Aug 2025 17:22:03 +0000
ROA not after: Mon 03 Aug 2026 17:27:03 +0000
asID: 154049
IP address blocks: 82.21.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 00:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:83:ef:d4:8e:e7:54:5c:5e:f7:dd:7f:72:98:f3:11:e4:9d:01:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 4 17:22:03 2025 GMT
Not After : Aug 3 17:27:03 2026 GMT
Subject: CN=6A9955C261468047A973D8AD6EF5DAF3E9F312D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:d0:83:9b:86:d9:b7:db:87:44:37:40:fb:
5a:1a:f6:b7:63:d0:e8:6e:4a:76:b1:b2:74:e1:69:
8c:0c:b6:bd:28:61:d5:d6:31:c1:e2:45:4d:9d:44:
f5:f0:51:ed:28:4a:ae:00:d8:a0:38:d8:d0:cc:22:
a2:60:ce:5e:95:37:d7:29:a0:e0:30:f0:61:93:ad:
82:ad:ab:62:14:ac:a3:1f:5d:0d:6d:5b:fb:e1:0b:
df:8c:b7:ce:82:51:60:fc:39:f6:28:45:f3:d9:99:
23:8b:f2:4e:ba:2f:e0:13:d9:cb:e9:db:46:34:87:
80:fc:12:77:4e:78:bf:2b:98:3f:e7:be:28:a8:f0:
47:86:45:08:7f:1f:ce:77:c4:a9:f7:53:ca:72:73:
f8:39:9d:9e:93:d8:5b:f3:3c:36:a3:23:0f:aa:50:
15:8e:a9:25:d1:ed:d3:7f:6b:28:b5:55:53:f7:c7:
69:bb:7b:23:a8:5f:ed:67:62:63:bb:0b:76:84:1e:
f9:b8:e4:10:b8:e6:70:32:e7:a3:47:f3:9c:47:8e:
1b:df:fb:dc:60:f9:3e:ad:10:d7:f4:94:95:db:70:
a3:1f:19:cd:c6:cd:53:4e:8d:64:a6:bd:2f:ff:4f:
1f:0e:1e:3c:38:5c:02:b2:a2:e5:8c:b4:60:05:c5:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:99:55:C2:61:46:80:47:A9:73:D8:AD:6E:F5:DA:F3:E9:F3:12:D5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.187.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:34:58:ec:49:eb:67:47:18:04:95:e2:fb:40:29:e9:9d:95:
36:0a:71:64:22:5e:4d:40:d8:c0:b7:60:30:de:c6:90:15:66:
cd:2b:7b:5a:43:31:99:2b:12:74:db:8e:87:70:4c:17:24:a0:
a1:32:a9:82:c5:60:23:2b:5d:80:2e:85:5f:88:2d:06:75:46:
8d:0a:0a:a9:4f:95:fe:8d:79:f1:8d:bf:54:1d:9b:b7:fa:8c:
1f:15:31:17:b3:90:44:80:7d:82:8c:a1:17:bd:44:57:50:d9:
e1:aa:5b:76:78:78:9f:2d:3a:7d:82:ab:92:11:40:2b:d8:af:
d0:c2:79:d1:96:3b:90:12:df:39:5b:35:22:6f:5f:b3:7c:d1:
b1:00:23:73:a7:a0:5a:cc:77:67:b9:1d:7e:64:e2:5b:17:72:
a6:70:75:35:de:ae:4f:9f:86:46:8c:fa:c6:68:0c:57:88:34:
59:c6:ca:a4:b0:e7:c8:8a:4a:fb:c4:24:31:d5:6b:79:a9:c4:
4f:59:d1:65:48:ca:42:c4:c4:01:08:c5:65:07:14:e6:3f:80:
4b:10:75:95:02:95:d7:b0:f8:f2:ad:11:61:43:bc:1b:ef:d2:
62:b7:b6:20:1b:18:00:a4:18:0b:0a:4a:43:d1:fc:3c:61:fb:
7f:0a:d8:06
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUWYPv1I7nVFxe991/cpjzEeSdAZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA4MDQxNzIyMDNaFw0yNjA4MDMxNzI3MDNaMDMxMTAvBgNV
BAMTKDZBOTk1NUMyNjE0NjgwNDdBOTczRDhBRDZFRjVEQUYzRTlGMzEyRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoCNCDm4bZt9uHRDdA+1oa9rdj
0OhuSnaxsnThaYwMtr0oYdXWMcHiRU2dRPXwUe0oSq4A2KA42NDMIqJgzl6VN9cp
oOAw8GGTrYKtq2IUrKMfXQ1tW/vhC9+Mt86CUWD8OfYoRfPZmSOL8k66L+AT2cvp
20Y0h4D8EndOeL8rmD/nviio8EeGRQh/H853xKn3U8pyc/g5nZ6T2FvzPDajIw+q
UBWOqSXR7dN/ayi1VVP3x2m7eyOoX+1nYmO7C3aEHvm45BC45nAy56NH85xHjhvf
+9xg+T6tENf0lJXbcKMfGc3GzVNOjWSmvS//Tx8OHjw4XAKyouWMtGAFxRR/AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUaplVwmFGgEepc9itbvXa8+nzEtUwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTU0MDQ5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhW7
MA0GCSqGSIb3DQEBCwUAA4IBAQB7NFjsSetnRxgEleL7QCnpnZU2CnFkIl5NQNjA
t2Aw3saQFWbNK3taQzGZKxJ0246HcEwXJKChMqmCxWAjK12ALoVfiC0GdUaNCgqp
T5X+jXnxjb9UHZu3+owfFTEXs5BEgH2CjKEXvURXUNnhqlt2eHifLTp9gquSEUAr
2K/QwnnRljuQEt85WzUib1+zfNGxACNzp6BazHdnuR1+ZOJbF3KmcHU13q5Pn4ZG
jPrGaAxXiDRZxsqksOfIikr7xCQx1Wt5qcRPWdFlSMpCxMQBCMVlBxTmP4BLEHWV
ApXXsPjyrRFhQ7wb79Jit7YgGxgApBgLCkpD0fw8Yft/CtgG
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:35:46 2025 by rpki-client