Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS150293.roa
File: AS150293.roa (raw, json)
Hash identifier: WpaSrc47kMpKRrapYsqXtrnEqhhQgV2tUat5AksjLdU=
Subject key identifier: C6:E1:CE:5E:0D:F7:2E:29:90:05:AE:40:1A:3E:23:D5:C0:33:27:7F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7CECE96210C08D932DD36D05F44CF7AF8A979192
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS150293.roa
Signing time: Wed 25 Mar 2026 09:47:02 +0000
ROA not before: Wed 25 Mar 2026 09:42:02 +0000
ROA not after: Wed 24 Mar 2027 09:47:02 +0000
asID: 150293
IP address blocks: 82.23.14.0/24 maxlen: 24
82.27.94.0/24 maxlen: 24
84.75.11.0/24 maxlen: 24
178.83.138.0/24 maxlen: 24
178.83.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:ec:e9:62:10:c0:8d:93:2d:d3:6d:05:f4:4c:f7:af:8a:97:91:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 25 09:42:02 2026 GMT
Not After : Mar 24 09:47:02 2027 GMT
Subject: CN=C6E1CE5E0DF72E299005AE401A3E23D5C033277F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:13:8a:28:dd:01:5a:9e:3e:72:cf:d7:7c:
c8:d1:31:84:1e:07:48:e7:1e:17:97:0c:87:e6:56:
9f:86:b7:94:3a:2f:69:b2:4b:9f:35:f2:4c:47:47:
17:28:c4:34:d7:73:6d:f8:f2:f5:bf:39:e3:e9:b1:
fd:90:39:dc:e4:a4:39:57:3a:a7:7d:5e:ad:9f:fa:
68:3f:7a:d0:d9:72:b4:35:e0:dc:c0:f7:bf:aa:d1:
88:46:b7:af:4c:14:5e:2f:bc:59:a1:80:2f:ac:4f:
7c:78:b9:80:3a:6a:c3:63:6e:5c:3a:6e:2b:83:39:
53:b0:d4:cc:d2:38:3b:05:7c:77:ef:23:62:a9:08:
82:19:ae:95:6c:e6:62:cf:b3:ee:62:f8:85:b8:a4:
4c:25:a2:53:72:74:55:bd:8d:d0:f6:28:02:f5:ba:
44:05:19:9e:78:43:2e:38:a5:56:89:60:1a:11:c2:
66:e3:9c:48:94:0b:9e:3c:ef:cc:3e:0f:c8:6f:92:
a9:7e:01:5b:bc:b3:46:b4:d6:8a:5f:16:2b:eb:7d:
81:f1:cd:0f:b1:19:8c:40:38:fc:98:df:43:86:4e:
64:04:7f:c0:1c:8f:8f:27:d6:b3:06:52:e4:f2:f7:
96:cf:39:d3:98:76:e4:a4:33:38:49:db:83:a0:98:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E1:CE:5E:0D:F7:2E:29:90:05:AE:40:1A:3E:23:D5:C0:33:27:7F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS150293.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.14.0/24
82.27.94.0/24
84.75.11.0/24
178.83.138.0/24
178.83.150.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:71:b0:71:70:4a:96:0d:5b:42:85:d6:b1:20:fd:c3:3e:8e:
08:74:bd:99:75:f4:63:1c:5e:1c:f1:e5:f5:d6:a0:74:44:75:
31:33:b4:72:9e:72:4f:da:25:88:ef:44:6c:b5:39:30:bb:67:
50:31:e4:05:2a:82:34:2d:e8:82:51:c8:6a:83:91:4d:09:c2:
e1:d9:5d:0d:11:80:56:05:6f:2d:a0:af:62:a8:90:71:6a:d9:
e6:4d:ae:16:03:bc:78:7a:7b:32:06:69:96:52:b4:56:fb:14:
0d:aa:0e:b5:89:ea:0b:a9:be:21:25:10:a3:59:ba:fa:4f:d6:
76:1b:04:44:12:90:59:cb:97:9d:65:4c:1a:c2:e8:17:a0:23:
94:37:bf:73:62:c5:ea:09:06:ba:4c:40:e7:15:b6:cb:cc:b3:
96:ef:62:c8:0f:82:11:87:34:d3:8e:73:d4:72:50:0d:00:d7:
48:5c:fd:3c:de:d7:53:b8:a8:cc:78:d0:f3:1f:7b:3b:da:05:
1f:ff:9c:06:9a:a6:d9:83:d7:bc:68:47:f4:50:36:8c:1b:c3:
9e:47:c6:0e:90:71:77:80:e4:4e:35:62:67:b2:39:c1:d0:9a:
12:27:f2:ad:8d:38:3d:55:26:a9:4a:ea:7f:cf:44:fb:d1:34:
bd:30:c1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:46 2026 by rpki-client