Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4593.roa
File: AS4593.roa (raw, json)
Hash identifier: +IkqMPY4dwBx6jc7fnReWrh36jhTrEX9e/3GXaEFaZ0=
Subject key identifier: DE:AC:19:45:3D:03:AC:B4:45:78:F4:D6:A0:E1:9E:F8:DE:2A:6D:B2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 59D73FA0A5EE2446D32480ADBC58A21798F43E87
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4593.roa
Signing time: Sun 06 Sep 2026 00:05:08 +0000
ROA not before: Sun 06 Sep 2026 00:00:08 +0000
ROA not after: Sun 05 Sep 2027 00:05:08 +0000
asID: 4593
IP address blocks: 178.83.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d7:3f:a0:a5:ee:24:46:d3:24:80:ad:bc:58:a2:17:98:f4:3e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 6 00:00:08 2026 GMT
Not After : Sep 5 00:05:08 2027 GMT
Subject: CN=DEAC19453D03ACB44578F4D6A0E19EF8DE2A6DB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:a6:2e:b4:b9:c5:be:2a:c8:4d:33:5d:c4:
dd:d0:a0:16:f4:fd:70:c6:8a:27:89:5f:68:87:8a:
e2:71:a5:b2:9a:c6:f3:06:6c:c0:bd:16:41:70:91:
aa:2f:e9:8a:b8:f9:1a:71:c1:c5:ea:41:77:06:c0:
de:b7:4b:d3:4b:88:24:a9:8a:bb:0b:47:dd:1b:d2:
0d:01:50:57:06:6b:b2:fe:72:a9:27:55:62:c8:7b:
f3:a0:04:46:0c:98:47:bf:ae:76:e4:84:8e:b1:9d:
e4:2b:a9:84:a2:1d:e4:32:fd:91:5a:91:1a:9c:d4:
b8:19:72:f2:1a:74:9f:0f:aa:fb:35:66:30:a2:19:
a2:38:6a:4e:d2:70:84:0d:78:6c:01:eb:bf:f9:8d:
45:fb:45:a4:9e:41:5c:46:0b:0f:9a:4a:fe:db:a4:
57:75:2d:cf:6a:0a:93:9f:78:63:b8:66:86:ce:a9:
80:ef:7f:fa:46:32:b6:63:2a:e9:f4:b9:bf:fa:54:
e7:ae:84:58:96:f6:e5:f7:d6:e0:c7:2b:72:76:3b:
e7:86:94:52:78:98:a9:02:5f:fb:f7:11:3f:fb:30:
04:e3:07:1e:a4:57:91:e8:90:d5:bf:7b:77:40:fa:
11:1a:df:1b:b6:ca:97:aa:c6:1e:be:d5:1b:44:1a:
87:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AC:19:45:3D:03:AC:B4:45:78:F4:D6:A0:E1:9E:F8:DE:2A:6D:B2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4593.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.153.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:94:71:1c:da:8e:5a:1e:70:4c:d6:0d:11:59:18:a4:50:32:
5a:c3:80:f5:b3:6f:d0:eb:dd:c0:03:fa:01:bc:31:33:7e:75:
e5:1a:aa:96:ae:5c:e3:fd:80:a0:ca:e1:60:27:60:af:78:5d:
01:76:d0:de:9b:48:24:99:54:e9:6e:8c:e9:8e:a9:e2:dd:51:
b4:e3:c8:47:53:ad:80:16:c6:bb:fd:1c:19:f4:00:41:ab:b6:
25:bb:76:ab:7f:99:10:72:cf:b5:c7:59:e7:cb:bc:c1:4c:b7:
f6:e5:36:8a:22:f5:31:4e:8d:59:81:15:27:00:88:a2:cf:e0:
b6:5d:14:35:e2:61:7c:17:46:c6:6a:9a:6a:c3:b2:bd:75:eb:
5a:6b:12:3d:b9:b1:5d:ce:52:22:ba:3b:19:45:de:2c:65:bc:
68:63:bb:40:b8:93:29:48:92:19:1c:8f:95:cf:f3:7e:2a:ec:
e7:2a:3f:dc:8a:49:ea:c7:1f:3a:83:84:0d:64:4a:06:75:b1:
6d:2a:73:10:80:08:71:98:3b:05:32:5d:52:ee:eb:81:e2:40:
cd:f0:de:6c:a9:45:27:1f:14:86:fb:43:74:31:71:35:fb:b7:
6c:e0:e9:c8:6a:c1:fa:62:e1:23:96:46:47:e4:c2:47:54:38:
d1:6e:63:f3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUWdc/oKXuJEbTJICtvFiiF5j0PocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MDYwMDAwMDhaFw0yNzA5MDUwMDA1MDhaMDMxMTAvBgNV
BAMTKERFQUMxOTQ1M0QwM0FDQjQ0NTc4RjRENkEwRTE5RUY4REUyQTZEQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqh6YutLnFvirITTNdxN3QoBb0
/XDGiieJX2iHiuJxpbKaxvMGbMC9FkFwkaov6Yq4+RpxwcXqQXcGwN63S9NLiCSp
irsLR90b0g0BUFcGa7L+cqknVWLIe/OgBEYMmEe/rnbkhI6xneQrqYSiHeQy/ZFa
kRqc1LgZcvIadJ8Pqvs1ZjCiGaI4ak7ScIQNeGwB67/5jUX7RaSeQVxGCw+aSv7b
pFd1Lc9qCpOfeGO4ZobOqYDvf/pGMrZjKun0ub/6VOeuhFiW9uX31uDHK3J2O+eG
lFJ4mKkCX/v3ET/7MATjBx6kV5HokNW/e3dA+hEa3xu2ypeqxh6+1RtEGoePAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQU3qwZRT0DrLRFePTWoOGe+N4qbbIwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDU5My5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALJTmTAN
BgkqhkiG9w0BAQsFAAOCAQEAf5RxHNqOWh5wTNYNEVkYpFAyWsOA9bNv0OvdwAP6
AbwxM3515Rqqlq5c4/2AoMrhYCdgr3hdAXbQ3ptIJJlU6W6M6Y6p4t1RtOPIR1Ot
gBbGu/0cGfQAQau2Jbt2q3+ZEHLPtcdZ58u8wUy39uU2iiL1MU6NWYEVJwCIos/g
tl0UNeJhfBdGxmqaasOyvXXrWmsSPbmxXc5SIro7GUXeLGW8aGO7QLiTKUiSGRyP
lc/zfirs5yo/3IpJ6scfOoOEDWRKBnWxbSpzEIAIcZg7BTJdUu7rgeJAzfDebKlF
Jx8UhvtDdDFxNfu3bODpyGrB+mLhI5ZGR+TCR1Q40W5j8w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 03:13:42 2026 by rpki-client