Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154834.roa
File: AS154834.roa (raw, json)
Hash identifier: BP66XJsyPDC9efQDeXdbOzs9CLEwV35im+SceGy3jPA=
Subject key identifier: FC:13:A0:19:E0:DA:49:76:0D:34:17:52:79:98:E0:0D:92:E6:5D:12
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 653C9BB37AEB36D13294D5E8D908ECA02132BF7C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154834.roa
Signing time: Wed 04 Nov 2026 14:23:56 +0000
ROA not before: Wed 04 Nov 2026 14:18:56 +0000
ROA not after: Wed 03 Nov 2027 14:23:56 +0000
asID: 154834
IP address blocks: 2a13:9500:1fe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:3c:9b:b3:7a:eb:36:d1:32:94:d5:e8:d9:08:ec:a0:21:32:bf:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 4 14:18:56 2026 GMT
Not After : Nov 3 14:23:56 2027 GMT
Subject: CN=FC13A019E0DA49760D3417527998E00D92E65D12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:fa:93:5b:04:24:25:da:cd:f1:27:4b:07:
f2:96:99:04:cd:9f:55:23:ae:7c:cc:4c:66:74:27:
05:75:3c:75:6b:7f:c5:20:7a:df:42:6d:e3:8c:1d:
a0:81:46:95:10:e6:04:cb:b8:c5:07:ba:7d:dc:5c:
d7:7f:2f:36:90:32:88:d8:dc:f3:4b:e7:c5:0f:4c:
ca:2c:08:9f:9c:36:f1:93:22:7f:8c:73:d0:3f:7e:
46:85:c0:ca:b9:f7:1c:98:69:59:30:78:66:ec:16:
ac:79:5a:27:50:c0:cf:47:07:de:30:70:b8:1c:3d:
59:40:ad:d2:0b:2a:7d:ae:5d:c6:72:13:fd:23:a5:
62:7c:f8:45:36:9c:3f:80:0f:d1:bf:ed:3c:e3:ef:
91:f2:11:78:23:14:64:d9:b8:ba:99:93:61:74:15:
c0:f7:70:7c:6b:81:40:61:9e:62:ce:42:14:75:4f:
26:5b:93:de:4e:fd:01:5a:47:95:f0:c1:6b:c5:df:
85:99:b1:f4:c9:21:68:bb:49:4e:04:0c:83:67:87:
a7:8f:41:53:50:e5:de:09:85:e1:2b:9b:68:86:5c:
56:00:bf:53:75:79:f0:6a:e0:23:4a:ce:66:ea:51:
ed:a9:a2:c3:1c:51:08:f3:5c:e9:f8:79:57:7b:c9:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:13:A0:19:E0:DA:49:76:0D:34:17:52:79:98:E0:0D:92:E6:5D:12
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1fe::/48
Signature Algorithm: sha256WithRSAEncryption
2a:4b:51:e7:a8:74:7f:2b:a3:72:aa:84:fd:31:ad:c3:01:e6:
44:ac:1f:7e:0a:35:eb:18:b2:77:fc:b3:78:66:c0:c8:c2:ab:
0a:89:ac:c5:1f:f1:22:6e:58:7a:9e:a6:fc:30:ff:a6:e8:7b:
0c:4e:2c:97:41:59:9d:dc:0c:76:4d:1a:9f:0e:ba:6c:33:7d:
6f:b3:cf:31:cd:3e:65:84:a2:c1:51:c8:0b:a2:1a:cb:ef:5b:
64:bb:e1:dc:86:23:8c:3f:cd:bb:a8:cc:50:83:b8:ef:0a:87:
0d:1a:5f:85:db:43:fd:9e:4c:ec:2c:19:f4:83:67:95:87:e9:
d8:30:08:05:2a:4a:ba:08:bb:c6:31:1c:1e:96:69:85:ba:ad:
89:f8:75:00:d8:21:37:b5:42:fd:2f:06:1a:81:e1:32:57:b8:
70:ef:16:5f:1c:f0:bf:08:ad:9a:df:27:e7:5e:6e:7b:87:c7:
76:b0:54:10:24:35:55:59:c2:08:d8:7a:d7:b4:f7:65:7c:08:
cf:64:f2:46:04:9a:16:9f:c0:e0:73:01:e9:2b:5c:f0:b2:81:
2b:9a:68:59:8e:19:ad:d6:31:da:d2:aa:b5:e2:41:bc:08:1b:
08:0a:e6:15:48:69:05:93:73:ef:f5:a1:d1:bd:63:46:5e:5e:
52:86:d0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 07:45:48 2026 by rpki-client