Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151389.roa
File: AS151389.roa (raw, json)
Hash identifier: CCXlUw9TxpbsNcF+DkIkDgCBRYCKn39UXIV8QuJECzg=
Subject key identifier: D2:84:E0:8E:2E:63:80:55:69:AF:60:1D:ED:E6:68:9C:EF:B1:9B:D2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 12FF2D78C3797D78B9DFE1D80BD05AD25A64436D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151389.roa
Signing time: Fri 08 May 2026 06:06:59 +0000
ROA not before: Fri 08 May 2026 06:01:59 +0000
ROA not after: Fri 07 May 2027 06:06:59 +0000
asID: 151389
IP address blocks: 82.23.197.0/24 maxlen: 24
82.24.52.0/24 maxlen: 24
82.25.4.0/24 maxlen: 24
82.25.7.0/24 maxlen: 24
82.25.14.0/24 maxlen: 24
82.25.53.0/24 maxlen: 24
82.25.138.0/24 maxlen: 24
82.25.140.0/24 maxlen: 24
82.26.197.0/24 maxlen: 24
82.27.119.0/24 maxlen: 24
82.47.2.0/24 maxlen: 24
82.47.50.0/24 maxlen: 24
82.47.133.0/24 maxlen: 24
82.47.165.0/24 maxlen: 24
82.47.216.0/24 maxlen: 24
178.83.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ff:2d:78:c3:79:7d:78:b9:df:e1:d8:0b:d0:5a:d2:5a:64:43:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 8 06:01:59 2026 GMT
Not After : May 7 06:06:59 2027 GMT
Subject: CN=D284E08E2E63805569AF601DEDE6689CEFB19BD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:a9:a4:2e:ff:5d:6b:e3:b2:97:55:ad:7b:
72:7b:c0:a4:f3:08:6b:bf:d7:3f:59:50:50:ac:6b:
72:cf:76:a6:91:9b:5b:77:47:09:90:d6:7e:d0:1c:
ec:5e:4b:e7:e5:aa:96:dc:51:eb:91:c8:ca:53:c2:
30:5f:b3:ba:db:b9:f1:26:f3:93:43:61:be:76:dd:
13:9d:77:bc:3b:09:14:1b:3e:ba:f5:b5:e9:af:71:
87:de:a7:9a:a2:36:88:a7:31:a4:4e:f7:98:8f:7c:
95:b3:80:37:a9:a9:b9:72:e6:e3:68:96:bb:5a:4b:
f1:1f:b7:1a:f4:d6:ca:03:a5:15:bd:13:f2:71:48:
30:a1:2f:42:79:f7:5c:16:76:b1:5f:f5:92:e7:87:
7d:2d:d0:62:77:60:fe:4b:87:8d:96:b9:3d:f9:94:
9e:a5:b1:80:cc:ba:d8:1a:23:3a:c7:5d:6b:27:40:
db:4e:91:3c:c2:f4:42:0d:69:f4:f8:5f:8a:77:c5:
76:80:9d:34:06:08:08:e0:57:2e:d2:e0:7e:90:43:
5f:32:0f:e7:de:30:a5:02:cd:1c:de:68:a7:20:77:
b4:35:11:aa:e1:b3:62:07:b2:65:c5:a0:83:10:43:
a5:72:6d:4b:7f:8a:cb:b3:7c:c3:ff:57:23:05:ca:
f5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:84:E0:8E:2E:63:80:55:69:AF:60:1D:ED:E6:68:9C:EF:B1:9B:D2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151389.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.197.0/24
82.24.52.0/24
82.25.4.0/24
82.25.7.0/24
82.25.14.0/24
82.25.53.0/24
82.25.138.0/24
82.25.140.0/24
82.26.197.0/24
82.27.119.0/24
82.47.2.0/24
82.47.50.0/24
82.47.133.0/24
82.47.165.0/24
82.47.216.0/24
178.83.175.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ee:d2:8f:32:b9:2a:15:f0:3e:b3:19:08:ee:79:45:0e:00:
b0:57:d3:68:45:68:c7:f5:d8:18:e7:f3:e2:1a:36:2a:5b:cc:
87:c7:4e:2c:68:30:e3:8d:cb:61:5b:27:75:8a:86:92:01:7c:
38:da:1f:31:e9:fc:89:b0:1d:d7:b3:49:cc:89:15:80:c0:2d:
15:20:32:2f:a2:58:54:73:77:ab:50:40:d6:54:06:c4:b6:f4:
d5:e1:37:d8:cd:80:4c:d9:ad:c6:42:40:68:2a:07:2b:2a:95:
36:22:30:57:94:71:c9:c9:6e:df:f9:d4:0c:75:39:bd:c7:8b:
ca:fc:38:19:e2:ff:ce:b0:a8:70:4c:bd:82:a9:db:49:af:a1:
d8:55:68:f0:61:8d:fb:eb:44:86:41:6e:7b:aa:f5:14:f0:c8:
f5:d8:96:d1:10:c3:b7:d2:b5:f4:56:87:e8:87:93:03:35:c1:
a9:44:f5:64:23:50:b3:ef:c1:4a:08:b5:7e:07:78:a3:74:8f:
1f:ee:2f:74:63:c9:cd:51:e9:1e:e7:77:81:84:49:1c:81:a9:
16:74:f0:12:b6:c8:d4:3b:16:f9:ec:a7:9c:ba:c6:44:11:e5:
f6:16:73:2f:42:32:0d:b3:02:19:88:a4:2c:5e:c2:b9:3c:39:
28:4e:b9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:54 2026 by rpki-client