Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS149513.roa
File: AS149513.roa (raw, json)
Hash identifier: nczNAnEPoVEwiTMNoqwz077XeHCepoy8X48DWQA9nGs=
Subject key identifier: 60:B0:1F:1F:FC:01:1F:E6:90:76:D8:35:2F:6D:3B:FC:F8:F1:33:8A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4123A7ACF82AB225663AC0C765F2637E3B155735
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS149513.roa
Signing time: Tue 28 Apr 2026 08:47:06 +0000
ROA not before: Tue 28 Apr 2026 08:42:06 +0000
ROA not after: Tue 27 Apr 2027 08:47:06 +0000
asID: 149513
IP address blocks: 2a13:9500:67::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:23:a7:ac:f8:2a:b2:25:66:3a:c0:c7:65:f2:63:7e:3b:15:57:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 28 08:42:06 2026 GMT
Not After : Apr 27 08:47:06 2027 GMT
Subject: CN=60B01F1FFC011FE69076D8352F6D3BFCF8F1338A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:92:a8:e2:b0:aa:ac:e4:9d:5e:6e:8f:cb:
f5:e4:77:11:db:76:ed:e8:95:ba:18:7c:b3:ab:ff:
da:da:49:2f:36:73:47:bb:f2:ea:ad:41:80:88:f4:
54:5a:11:8a:e0:66:81:df:c1:f2:e2:f8:13:5b:18:
0a:e9:8c:02:a3:c8:78:41:f5:fc:d4:a2:85:61:88:
36:3f:61:d3:02:29:8a:0b:64:65:d7:98:fb:34:04:
69:fa:c3:78:99:9a:65:18:61:67:5b:e7:a8:ce:fa:
f3:f8:53:6e:8a:df:f4:75:17:82:f5:6f:82:3f:11:
31:41:a8:b0:64:fc:1f:ce:07:57:e6:30:99:3d:b2:
4a:a4:98:51:b8:ab:76:15:4b:8a:36:82:15:2d:94:
63:5a:b1:9c:67:47:ef:5b:d1:4c:fd:ce:45:99:a5:
b4:4a:a2:f1:4b:d1:70:18:0b:53:1a:4f:1b:27:b8:
ab:50:7a:de:7a:b4:2f:ab:52:6d:52:d4:7d:10:98:
73:f1:b8:1a:c6:56:1d:1f:56:35:16:d5:f6:32:04:
e5:0e:82:0e:47:39:87:93:be:55:e3:1d:f9:e4:e5:
87:08:67:b7:a6:d4:b0:af:cf:bf:0b:30:bb:09:9d:
1c:f5:f4:5d:5a:c7:ea:37:dd:45:06:ae:9a:b7:ea:
7f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B0:1F:1F:FC:01:1F:E6:90:76:D8:35:2F:6D:3B:FC:F8:F1:33:8A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS149513.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:67::/48
Signature Algorithm: sha256WithRSAEncryption
20:40:b8:0f:a4:10:d7:7f:71:88:dd:cb:09:f1:f0:31:bf:f7:
f1:a4:4b:4b:6e:f6:bf:e8:4d:89:0d:c8:c2:c7:a4:04:6f:fa:
19:66:41:5f:23:11:f0:73:f1:23:04:e2:28:2a:b8:cf:1b:9f:
59:66:0a:18:e1:c4:6e:df:a4:51:2f:be:6e:c4:2e:7d:9a:1e:
c7:9f:64:b4:99:9c:1f:44:5e:a3:6a:12:35:b8:5e:4e:62:a5:
e9:0f:c5:84:6d:da:68:a6:7e:e8:cc:6b:0d:6d:fe:54:98:d4:
e2:7b:6c:fe:27:a9:d5:20:97:f1:ca:66:0a:46:0d:b1:5e:a6:
ae:bb:0c:94:e6:ce:a4:51:91:18:e4:78:b3:3a:bd:2e:b8:b8:
6b:d0:c3:9f:21:eb:ab:86:18:7e:79:0b:41:2e:62:a8:6d:8a:
b3:43:88:4c:c1:54:a8:0a:ea:4e:1f:77:2e:f5:63:4f:1e:36:
cc:b7:ef:cb:0c:61:02:21:66:35:ec:ee:f1:20:0a:54:0d:fb:
83:95:65:15:c1:8a:56:f2:c9:d9:79:81:63:b9:ff:89:3e:33:
e4:88:98:8c:88:82:81:0f:35:6b:52:19:ed:64:66:47:ab:a0:
71:b3:83:b1:1f:85:a9:f7:89:cb:a3:25:3b:d6:bf:c6:0f:15:
e7:11:0d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:40:17 2026 by rpki-client