Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS149981.roa
File: AS149981.roa (raw, json)
Hash identifier: lvQ8dmMmPAWqKSIYuzPySJJSNn4Ra6bvdMuTTxDdnI0=
Subject key identifier: F5:1D:D9:7C:6A:06:5C:A7:E5:ED:E8:13:4A:61:E0:03:D9:30:44:99
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 38DA08BCEB09EA6B67AD5FAC38B1D4EEBCC009DB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS149981.roa
Signing time: Mon 23 Mar 2026 08:46:51 +0000
ROA not before: Mon 23 Mar 2026 08:41:51 +0000
ROA not after: Mon 22 Mar 2027 08:46:51 +0000
asID: 149981
IP address blocks: 82.27.189.0/24 maxlen: 24
82.27.190.0/24 maxlen: 24
82.27.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:da:08:bc:eb:09:ea:6b:67:ad:5f:ac:38:b1:d4:ee:bc:c0:09:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 23 08:41:51 2026 GMT
Not After : Mar 22 08:46:51 2027 GMT
Subject: CN=F51DD97C6A065CA7E5EDE8134A61E003D9304499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:51:bb:49:c5:4d:95:1a:e9:7c:80:71:d0:
2b:dc:29:06:f6:eb:a8:f0:c9:2c:2d:27:c1:da:27:
64:4e:75:ef:70:4f:45:4e:03:88:e6:d2:3e:3c:9f:
64:ed:ec:5c:ae:3e:a4:cd:63:5e:c2:b4:35:21:f0:
35:f4:cd:53:1d:bd:a9:af:01:01:10:bc:d6:94:3f:
8e:f9:5e:f8:37:c9:27:bc:63:04:54:29:ae:d3:0b:
f2:b0:0f:d3:7e:c7:4e:d4:da:df:54:c6:34:4e:5d:
cc:c3:73:8d:cb:ac:3b:be:c3:69:6e:c2:94:d1:1e:
58:09:9d:d8:bb:50:49:e8:5d:1c:0f:d2:93:29:20:
58:94:34:df:89:0b:20:2b:35:9f:79:23:2d:87:da:
9f:c4:ac:bb:c6:59:f9:3a:9e:ea:22:ae:82:98:ff:
74:68:d2:00:ca:47:ed:6d:0e:9b:9c:44:07:28:ae:
2d:8a:df:0f:9b:18:c4:e1:f1:db:42:e8:82:da:af:
be:84:d3:28:b5:44:fd:f1:ce:b9:45:ae:fe:1d:d2:
76:78:49:dd:5e:67:ee:10:78:2f:01:f3:59:68:d3:
3c:e7:f1:9f:8e:49:d5:ba:20:ca:b7:46:eb:d1:44:
7d:95:ca:0c:c1:ea:47:15:6a:7c:97:9f:b7:06:4a:
85:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1D:D9:7C:6A:06:5C:A7:E5:ED:E8:13:4A:61:E0:03:D9:30:44:99
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS149981.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.189.0-82.27.191.255
Signature Algorithm: sha256WithRSAEncryption
57:6d:35:c0:da:07:c7:a2:44:a5:93:88:3f:31:03:4c:6a:ee:
be:3f:83:7c:c6:6e:d1:72:e2:81:26:8a:e0:6d:54:03:4a:cd:
b7:fd:87:fd:e4:50:93:e0:09:a9:39:9d:d2:dd:79:09:34:a2:
c7:5f:2f:f6:79:ee:b6:13:c2:65:01:1c:87:95:5e:4b:53:59:
2e:d9:4f:ad:34:b5:9a:db:ca:7d:b7:02:f0:b2:63:4b:5e:b5:
01:cf:f3:3f:8b:92:2c:58:f5:01:de:04:cc:51:6a:15:9c:f2:
59:58:a1:bc:c5:d6:70:23:75:df:dc:33:10:ad:3c:a6:64:e7:
20:5c:32:e5:2d:d1:4f:ff:79:49:c4:43:03:cc:06:17:f5:f2:
40:15:b9:a4:d8:7b:53:ed:6b:bb:0b:83:bc:9e:bd:3c:76:b4:
00:4d:bc:61:03:16:e1:e1:45:20:b5:b6:79:a8:d2:fe:bb:0b:
76:60:95:18:08:66:e2:3a:af:13:5a:76:c2:f4:6e:96:ef:b5:
4d:c8:08:62:5e:14:57:45:7c:00:6e:3f:08:e3:3a:22:57:fe:
5b:7d:93:21:83:42:bd:64:7f:3c:a9:52:fb:95:23:f0:e3:3b:
32:3c:4e:c2:38:d5:ad:9a:47:2c:c3:57:eb:1d:59:47:97:99:
a8:e7:9c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:29:12 2026 by rpki-client