Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: sRUzFfilaDHTBwM2ad1fDKd42C288pmdTPfIgo5n0C8=
Subject key identifier: FB:3B:01:82:4B:1C:3C:1C:D8:95:2D:23:8C:56:47:41:93:DB:2C:E5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0B451A16A8E28E2561B5296EC4129A8B771BCE92
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
Signing time: Tue 22 Sep 2026 16:44:54 +0000
ROA not before: Tue 22 Sep 2026 16:39:54 +0000
ROA not after: Tue 21 Sep 2027 16:44:54 +0000
asID: 152179
IP address blocks: 82.21.80.0/23 maxlen: 24
82.29.51.0/24 maxlen: 24
82.38.212.0/24 maxlen: 24
82.39.150.0/24 maxlen: 24
82.39.170.0/24 maxlen: 24
82.39.205.0/24 maxlen: 24
82.47.146.0/24 maxlen: 24
84.75.2.0/24 maxlen: 24
84.75.10.0/24 maxlen: 24
84.75.82.0/24 maxlen: 24
178.83.128.0/24 maxlen: 24
2a13:9500:57::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:45:1a:16:a8:e2:8e:25:61:b5:29:6e:c4:12:9a:8b:77:1b:ce:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 22 16:39:54 2026 GMT
Not After : Sep 21 16:44:54 2027 GMT
Subject: CN=FB3B01824B1C3C1CD8952D238C56474193DB2CE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:15:a2:f5:ee:a9:f0:a0:85:4d:ae:33:b6:
96:fc:77:13:c7:3b:b9:fc:c0:c3:90:f3:03:77:56:
ff:d9:94:d6:1e:cb:87:48:f6:35:d7:e2:c4:52:c4:
22:e5:ed:59:45:eb:43:98:a2:f3:ff:ce:f7:8c:7d:
36:69:ef:eb:4c:43:7d:e1:53:50:28:78:8a:54:d5:
2f:1e:65:b4:b7:c1:63:32:e4:74:c7:85:58:7f:16:
a8:74:94:bd:4d:78:59:75:c0:51:0a:f3:0d:eb:46:
a6:e7:f8:f9:c2:61:e4:35:71:bb:8e:03:42:d2:43:
4e:83:b1:06:6c:b5:dc:54:a1:24:27:cc:52:da:fd:
03:55:3b:65:82:de:3d:1c:eb:b5:90:30:c3:ec:ad:
d8:24:fc:70:8c:c8:19:34:31:5e:33:1f:54:99:3e:
28:d3:01:87:ae:ae:79:df:94:b1:11:da:4e:dd:66:
1b:d5:05:e9:2a:cd:ea:5f:96:f4:82:16:bd:fd:4f:
4b:31:17:90:26:01:c8:0c:79:f8:d5:95:7e:fa:08:
42:fd:fe:e5:7f:cc:b3:5b:88:67:56:ed:57:a6:c7:
40:11:4b:4d:88:ab:d3:17:18:3a:65:d1:88:c5:01:
9b:ce:2e:4f:dc:f7:c7:d9:82:2b:48:0d:63:58:49:
e3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3B:01:82:4B:1C:3C:1C:D8:95:2D:23:8C:56:47:41:93:DB:2C:E5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.80.0/23
82.29.51.0/24
82.38.212.0/24
82.39.150.0/24
82.39.170.0/24
82.39.205.0/24
82.47.146.0/24
84.75.2.0/24
84.75.10.0/24
84.75.82.0/24
178.83.128.0/24
IPv6:
2a13:9500:57::/48
Signature Algorithm: sha256WithRSAEncryption
96:ea:33:86:4a:ab:62:c7:cd:45:15:d9:8d:02:d1:7c:ec:03:
7b:de:81:c9:5d:9c:e0:0d:46:84:52:8c:10:7a:9a:c5:95:f4:
91:a5:d9:12:ec:76:fc:fd:48:a3:73:12:06:5f:26:27:3e:5a:
28:8e:67:c1:ce:e5:32:dc:82:84:39:17:57:a3:58:c2:13:b9:
10:91:9b:18:2f:9b:e1:d1:b4:cd:83:ae:64:86:9b:04:56:59:
52:2f:d1:84:0d:9f:4a:c8:a4:43:bd:51:ad:ff:e9:82:37:c3:
22:18:53:a2:5a:d7:3d:b8:dd:6c:3a:a1:80:1a:1a:c5:ad:6d:
35:96:f5:6e:e2:5b:c5:95:86:61:f3:00:09:b1:17:19:c6:bb:
c3:47:61:26:55:14:4e:33:56:f8:5f:20:32:d5:d7:b9:17:8e:
b4:a5:25:3a:69:79:01:28:ca:49:53:0d:49:9c:5c:43:35:e4:
85:d8:5f:7f:7b:30:ce:46:06:70:e0:ca:50:b0:f0:e1:a1:d8:
13:84:42:13:bb:a7:d3:04:a4:28:8a:d7:ba:11:14:c6:82:53:
ed:c2:d9:61:a2:2f:ca:0f:b4:e4:32:4d:5b:9c:cc:a6:9f:80:
0f:3b:e2:bd:2e:fe:56:24:f5:f7:89:e9:c2:e1:66:4c:cf:fa:
f4:78:49:1e
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUC0UaFqjijiVhtSluxBKai3cbzpIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MjIxNjM5NTRaFw0yNzA5MjExNjQ0NTRaMDMxMTAvBgNV
BAMTKEZCM0IwMTgyNEIxQzNDMUNEODk1MkQyMzhDNTY0NzQxOTNEQjJDRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgTRWi9e6p8KCFTa4ztpb8dxPH
O7n8wMOQ8wN3Vv/ZlNYey4dI9jXX4sRSxCLl7VlF60OYovP/zveMfTZp7+tMQ33h
U1AoeIpU1S8eZbS3wWMy5HTHhVh/Fqh0lL1NeFl1wFEK8w3rRqbn+PnCYeQ1cbuO
A0LSQ06DsQZstdxUoSQnzFLa/QNVO2WC3j0c67WQMMPsrdgk/HCMyBk0MV4zH1SZ
PijTAYeurnnflLER2k7dZhvVBekqzepflvSCFr39T0sxF5AmAcgMefjVlX76CEL9
/uV/zLNbiGdW7Vemx0ARS02Iq9MXGDpl0YjFAZvOLk/c98fZgitIDWNYSeNVAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQU+zsBgkscPBzYlS0jjFZHQZPbLOUwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTUyMTc5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBIBAIAATBCAwQBUhVQ
AwQAUh0zAwQAUibUAwQAUieWAwQAUieqAwQAUifNAwQAUi+SAwQAVEsCAwQAVEsK
AwQAVEtSAwQAslOAMA8EAgACMAkDBwAqE5UAAFcwDQYJKoZIhvcNAQELBQADggEB
AJbqM4ZKq2LHzUUV2Y0C0XzsA3vegcldnOANRoRSjBB6msWV9JGl2RLsdvz9SKNz
EgZfJic+WiiOZ8HO5TLcgoQ5F1ejWMITuRCRmxgvm+HRtM2DrmSGmwRWWVIv0YQN
n0rIpEO9Ua3/6YI3wyIYU6Ja1z243Ww6oYAaGsWtbTWW9W7iW8WVhmHzAAmxFxnG
u8NHYSZVFE4zVvhfIDLV17kXjrSlJTppeQEoyklTDUmcXEM15IXYX397MM5GBnDg
ylCw8OGh2BOEQhO7p9MEpCiK17oRFMaCU+3C2WGiL8oPtOQyTVuczKafgA874r0u
/lYk9feJ6cLhZkzP+vR4SR4=
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:20:43 2026 by rpki-client