Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151734.roa
File: AS151734.roa (raw, json)
Hash identifier: 9UCN2GFUPfZG6vWcCt3h1RorNN9jP3+iw7UDQoRkXhI=
Subject key identifier: 80:E5:AA:EF:59:2B:E5:63:15:79:C0:04:D7:B7:D9:9D:18:1D:87:07
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 59736146BC354BAAF2D0441213B21564FECB489F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151734.roa
Signing time: Sat 02 May 2026 07:47:07 +0000
ROA not before: Sat 02 May 2026 07:42:07 +0000
ROA not after: Sat 01 May 2027 07:47:07 +0000
asID: 151734
IP address blocks: 2a13:9500:78::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:73:61:46:bc:35:4b:aa:f2:d0:44:12:13:b2:15:64:fe:cb:48:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 2 07:42:07 2026 GMT
Not After : May 1 07:47:07 2027 GMT
Subject: CN=80E5AAEF592BE5631579C004D7B7D99D181D8707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:22:d7:b9:3d:d4:d6:4f:cf:4c:28:61:08:66:
7d:77:14:05:c2:1d:36:77:72:e1:61:1e:d1:cf:b6:
bf:5d:c8:d1:0b:f0:b7:0c:fc:d6:69:12:39:52:e8:
5d:47:9e:a5:55:0f:95:2d:e8:b4:02:ad:35:3e:e5:
a4:c5:98:39:47:7a:4e:3f:06:b9:56:fb:1b:f9:bf:
c8:a9:c3:d2:3a:70:3c:21:3f:19:d4:0c:ba:5e:a8:
fb:67:80:52:1f:dc:78:e3:d2:ae:33:17:c8:c6:87:
bb:3a:04:0c:12:58:a3:90:66:c4:f9:57:97:21:f0:
3d:5f:5b:22:f5:08:c0:b6:b0:5f:6b:a1:a8:7c:b3:
d6:84:c1:66:32:85:45:c9:25:41:a4:f5:e4:d2:7c:
57:34:43:ea:e2:c8:1b:28:8e:d0:12:e1:52:43:2e:
82:cc:64:d9:1b:34:e0:d3:f4:da:64:1d:5d:7c:71:
de:0c:3c:86:05:9b:19:99:35:c7:b0:92:b8:f7:c7:
97:a9:09:1f:f1:de:73:32:7d:b9:11:3a:3d:0d:a0:
38:37:1b:43:bc:b4:94:61:e6:1f:93:f8:3f:6b:4b:
47:4d:68:b5:4e:9c:8f:f2:a3:82:38:0e:47:a7:65:
38:96:9d:69:57:5a:7d:4a:c2:15:c8:a9:c2:ea:19:
27:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E5:AA:EF:59:2B:E5:63:15:79:C0:04:D7:B7:D9:9D:18:1D:87:07
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:78::/48
Signature Algorithm: sha256WithRSAEncryption
3b:2c:bb:5f:ec:a7:a7:2d:38:d9:7e:b5:94:be:fd:69:9a:5b:
ba:d3:6c:89:52:cc:be:d4:bf:fd:da:cf:98:32:87:73:46:5b:
64:bf:25:da:63:de:c2:11:8c:62:43:cb:a0:53:ec:ea:ca:7c:
77:65:20:30:bd:a2:55:54:bc:f5:06:9b:e1:ba:a5:44:39:fa:
f9:3b:95:96:d8:f8:68:87:03:a5:0c:c9:62:67:8e:3d:2b:e7:
a7:73:f9:f0:48:2c:dc:fe:5a:d3:1b:43:98:ed:38:a6:db:da:
8e:c5:7a:0a:9f:fc:2a:a4:e3:ce:89:f0:31:1c:5a:aa:02:ae:
80:20:fa:ec:6c:a6:f2:64:6f:b7:31:0c:c1:1a:ce:c3:98:3b:
56:de:96:70:88:18:ee:f7:23:2a:8c:52:cb:36:39:81:a1:d3:
b5:48:0b:f8:6d:1a:8b:b0:23:67:cc:68:0d:4c:3f:7f:a5:7f:
70:a8:2e:0c:b6:78:b1:3d:10:1e:5d:af:68:b5:3a:54:9f:fc:
63:38:9c:26:0e:9a:c5:1a:49:cf:e7:40:a6:44:e5:e2:c4:0d:
f1:82:23:91:59:e5:9b:be:fa:47:1b:7a:95:ad:d0:db:d3:fd:
c8:5b:17:0b:83:a8:d5:07:20:8e:e6:de:4d:60:73:f1:81:9f:
21:2e:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:42:11 2026 by rpki-client