Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154408.roa
File: AS154408.roa (raw, json)
Hash identifier: 6A4YqzEdqCFpEXg/8YXHNTCHMeDN82Akx7B/YAv75Yg=
Subject key identifier: 8E:19:95:0F:BD:E5:DA:0A:18:86:60:B3:38:2C:65:E9:6F:D7:D5:CF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 52C16210C1FF393F88D666FDFED4F6D40E641144
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154408.roa
Signing time: Mon 27 Jul 2026 18:56:17 +0000
ROA not before: Mon 27 Jul 2026 18:51:17 +0000
ROA not after: Mon 26 Jul 2027 18:56:17 +0000
asID: 154408
IP address blocks: 2a13:9500:192::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c1:62:10:c1:ff:39:3f:88:d6:66:fd:fe:d4:f6:d4:0e:64:11:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 27 18:51:17 2026 GMT
Not After : Jul 26 18:56:17 2027 GMT
Subject: CN=8E19950FBDE5DA0A188660B3382C65E96FD7D5CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:7e:12:09:24:9d:c1:2e:1c:48:2f:35:3f:
ea:bb:5c:b0:37:32:a3:b6:4d:81:3e:e7:d1:b2:08:
39:6b:2f:02:4d:92:a5:58:a8:99:76:7c:41:53:11:
e1:15:4a:15:19:36:0f:30:72:67:0d:75:97:ab:10:
3f:88:e2:13:19:7e:a3:db:87:8b:e9:e0:18:3a:62:
f8:1f:58:69:3a:6b:10:96:7e:7c:46:b9:f8:b5:64:
e7:26:dd:00:7b:11:aa:3d:05:66:c7:15:6e:30:66:
a3:a2:98:ea:35:17:8f:93:3b:a1:5f:58:9d:2e:05:
ba:6a:9c:36:7d:15:1f:8a:3f:bd:97:9c:e9:4b:06:
6d:25:2c:26:44:ed:0c:8d:64:52:81:a1:10:6f:28:
c1:03:e5:a7:3b:16:8e:1c:a5:9f:b9:56:f4:28:6c:
3b:08:7f:87:d3:bf:ed:44:91:42:10:8f:59:bf:0c:
94:06:70:b8:af:06:a4:de:12:7d:c7:3c:e2:2a:9f:
28:20:50:13:94:16:55:18:40:c7:fe:62:4d:50:ff:
57:71:cd:0f:5b:03:16:cb:f7:98:53:62:08:08:dc:
8b:a9:37:04:ce:8b:86:cd:d7:b1:01:45:c6:0b:7d:
b0:c6:bb:7a:cb:de:f0:8c:ba:ad:b7:cc:29:a0:34:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:19:95:0F:BD:E5:DA:0A:18:86:60:B3:38:2C:65:E9:6F:D7:D5:CF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154408.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:192::/48
Signature Algorithm: sha256WithRSAEncryption
4e:db:8a:ec:93:7d:34:0d:2a:7d:5b:0e:61:68:98:94:c7:5d:
9f:b4:c5:2c:be:73:99:9c:de:67:12:e5:3d:7e:26:6d:12:41:
49:21:b3:3a:43:18:a2:5e:28:a4:cf:b3:bc:8f:bb:f3:cd:4a:
82:1c:36:61:f3:4e:49:38:04:bd:e8:8f:19:dd:cd:ba:eb:84:
ae:37:1b:09:f1:f3:49:b5:78:18:fb:5c:74:3d:f1:55:09:88:
fb:f2:f9:e5:cc:a5:b7:be:d8:fe:4f:d7:fe:88:8e:8e:9e:a2:
7f:6a:a7:71:3a:87:db:86:47:ed:9e:c7:74:7b:ec:4e:21:3c:
0b:ac:3e:da:82:d1:dc:b6:46:30:e1:46:ff:d6:0b:7a:99:13:
56:c6:6d:b8:43:e2:7f:bb:8e:28:87:7c:1c:d2:b3:c6:de:48:
d3:6e:4e:62:af:56:5c:cb:46:4f:e5:36:ac:a9:ff:bf:6b:cc:
96:b4:53:74:7b:33:a1:11:c8:0f:c3:21:d1:5d:5e:ce:f4:c6:
78:22:08:68:a2:1c:a2:0d:0b:f9:db:7d:3e:b6:14:21:2c:f0:
27:8c:8d:75:5c:b1:44:8d:35:90:ca:c3:7a:23:34:bf:4b:df:
0f:ad:94:d7:23:fb:c3:75:91:cf:2f:b1:00:10:81:e6:37:e0:
2d:27:33:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:59:57 2026 by rpki-client