Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154317.roa
File: AS154317.roa (raw, json)
Hash identifier: pCkA4t++uIU3us2V17lcL8MKlwtCEV89+8dNjF1FzRk=
Subject key identifier: 6E:86:FE:5D:FA:4F:1C:BA:B1:CF:62:53:47:5F:0D:16:94:F4:CC:B1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 66E867DED78820DFED5779542C007A9A6DD12396
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154317.roa
Signing time: Wed 03 Jun 2026 14:35:11 +0000
ROA not before: Wed 03 Jun 2026 14:30:11 +0000
ROA not after: Wed 02 Jun 2027 14:35:11 +0000
asID: 154317
IP address blocks: 178.83.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e8:67:de:d7:88:20:df:ed:57:79:54:2c:00:7a:9a:6d:d1:23:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 3 14:30:11 2026 GMT
Not After : Jun 2 14:35:11 2027 GMT
Subject: CN=6E86FE5DFA4F1CBAB1CF6253475F0D1694F4CCB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:e7:bc:af:70:22:5c:93:04:ca:9c:29:24:
17:ec:45:05:eb:91:81:21:82:9c:e6:21:07:85:23:
cb:12:fa:2a:86:52:00:16:d6:9a:08:6e:65:1f:c2:
11:d9:4b:5a:dd:2f:58:54:a2:2e:30:b5:2c:53:58:
7b:fb:ec:fc:64:ce:60:47:9e:d2:f1:01:79:f6:f4:
f6:1f:04:ab:79:90:52:39:75:e3:1e:54:63:fb:47:
fd:62:83:60:25:26:41:ff:66:4c:2d:62:2e:e7:fe:
66:94:63:46:d8:ff:3d:3f:da:ab:0b:27:ce:a8:bd:
ef:ba:b4:c4:d1:41:bc:06:13:3f:57:a5:f9:5a:44:
41:82:1f:46:1b:80:e0:4b:2a:b9:70:eb:d0:8a:d1:
13:91:75:d2:f6:f3:40:ee:60:44:dc:02:0d:9e:90:
56:89:b7:78:58:33:d6:5c:d6:fe:0a:73:ad:8e:4e:
48:11:4b:76:22:09:9a:d2:af:d4:65:42:13:49:5e:
a7:f2:bd:8c:2c:e7:ad:33:18:b9:4d:03:5f:7f:cb:
4a:4c:2c:c4:d0:8f:5e:2e:a3:6e:de:77:e5:8d:ed:
f6:bd:99:b2:78:02:68:86:8b:f8:58:73:89:7b:2c:
8d:29:da:56:96:63:d1:5c:bd:61:09:d8:4f:a5:5d:
4d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:86:FE:5D:FA:4F:1C:BA:B1:CF:62:53:47:5F:0D:16:94:F4:CC:B1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154317.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.59.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b3:cf:6c:50:b6:38:a2:f5:79:d3:b1:ad:4f:f5:d0:79:d6:
01:cd:74:3c:d4:6a:d5:2a:80:92:e5:5b:13:77:28:1e:52:c7:
27:9a:89:5c:52:fd:d2:77:12:30:57:f7:53:a8:3a:de:9b:34:
d2:f8:98:32:4e:3f:99:7d:07:b8:07:16:17:fa:37:d7:a5:91:
5f:05:f7:28:1a:fa:10:27:71:ac:fa:66:88:4d:1a:2e:61:af:
85:ef:c9:2b:4f:ce:b6:f7:d5:70:22:93:0e:db:ee:74:e3:23:
a0:53:ae:1e:39:26:71:32:4c:25:82:e2:62:86:b9:93:a5:31:
e6:54:7f:f8:94:de:a6:19:46:0b:17:ec:da:14:bd:1a:2a:d5:
d9:89:12:1c:78:db:49:b8:ca:d3:c3:99:0c:cd:44:d1:46:4c:
8d:48:3e:b4:ef:38:56:1b:1f:34:64:bb:cd:93:59:de:96:32:
3d:5e:07:26:ac:6b:c0:ad:e4:e6:3e:91:90:72:b6:27:82:eb:
cd:e5:56:cc:b2:91:fe:4c:b1:f0:29:d6:3d:b7:b1:03:da:72:
da:e5:93:05:01:46:74:2e:92:0d:06:96:c2:45:f9:82:a7:3b:
b7:51:d2:7c:d8:0a:4b:7b:49:c9:5a:7f:f2:c4:70:0e:8b:bb:
8c:f3:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:34:51 2026 by rpki-client