Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: PeMDvn21laynju/0cIXlvVW5Va7ovkbALIO0kCzqnCA=
Subject key identifier: 8D:6E:B6:4E:23:F0:F2:F2:51:D2:E5:A2:30:2A:1A:B7:33:0E:A0:28
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 434FCF59F02A62FADD3302273EFE52116AEE8410
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
Signing time: Thu 23 Apr 2026 11:47:05 +0000
ROA not before: Thu 23 Apr 2026 11:42:05 +0000
ROA not after: Thu 22 Apr 2027 11:47:05 +0000
asID: 152179
IP address blocks: 82.21.80.0/23 maxlen: 24
2a13:9500:57::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:4f:cf:59:f0:2a:62:fa:dd:33:02:27:3e:fe:52:11:6a:ee:84:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 23 11:42:05 2026 GMT
Not After : Apr 22 11:47:05 2027 GMT
Subject: CN=8D6EB64E23F0F2F251D2E5A2302A1AB7330EA028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:c2:08:58:d4:02:6e:6d:67:dc:52:a9:f2:
25:b4:3d:d8:49:7f:19:bf:2b:61:f2:4f:bb:85:79:
71:8d:94:7a:eb:9e:0c:fb:a9:b1:da:b9:45:03:e6:
c4:ab:9c:02:0b:fa:a0:3c:fe:59:d8:fc:5b:b0:19:
dc:6c:7a:ef:9c:f5:4e:fe:73:cf:78:4a:04:e5:41:
b5:c4:1e:8f:bd:82:70:07:c3:27:17:67:80:24:65:
81:c6:5a:b0:5c:04:4d:db:41:a7:c3:1e:ad:dd:d5:
e9:2a:c3:04:6f:29:b3:c8:7c:a3:26:98:0f:7d:04:
53:e6:fb:1d:0f:14:67:85:12:a0:40:49:32:6d:7a:
ba:d1:e0:91:9c:d2:9d:59:19:7e:10:51:aa:f7:73:
36:ef:b0:2d:38:ce:54:66:b1:77:ae:14:ef:c4:2c:
fc:57:48:c7:5e:64:20:59:c0:63:f7:a2:43:4b:9a:
18:16:de:ef:01:6c:6c:ae:9d:fb:54:52:4e:fb:12:
ff:fc:7e:51:3e:35:31:13:cd:47:0b:a7:7d:ab:07:
bd:34:dc:af:26:00:42:c6:c9:55:9f:79:da:e9:4c:
9c:bc:95:ec:4a:13:d5:da:2e:0f:3a:01:a3:3d:3f:
05:69:cf:4d:27:7d:fe:66:fd:97:a4:2e:cd:a2:00:
f9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6E:B6:4E:23:F0:F2:F2:51:D2:E5:A2:30:2A:1A:B7:33:0E:A0:28
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.80.0/23
IPv6:
2a13:9500:57::/48
Signature Algorithm: sha256WithRSAEncryption
77:86:e9:ba:e9:fd:d8:d0:93:05:03:93:46:81:0e:bd:b1:74:
96:ff:df:ca:8f:b0:88:13:19:94:83:10:98:c5:7c:7a:b9:42:
fd:75:b5:f6:3b:1a:96:f3:eb:21:60:c1:83:33:da:7c:a4:6f:
ca:a4:e6:f8:1c:d1:4c:dc:25:f2:47:ca:17:8c:8d:d9:09:8b:
72:29:ce:d2:0f:86:c2:1a:21:29:62:26:39:ea:10:89:cf:f3:
b5:f6:72:74:ed:27:d6:ad:b9:93:ed:92:e3:d7:f6:19:f2:e3:
ad:57:de:f1:b3:a6:e4:ed:29:8a:a0:6f:0c:5a:73:a0:d4:68:
c9:2f:9b:07:aa:f1:cb:cd:d9:ca:22:22:53:76:23:7a:4e:fe:
e8:56:c5:26:90:a0:07:c9:8d:5e:71:ac:3d:94:84:96:68:73:
00:8c:68:7b:82:8a:f9:73:39:ab:52:26:55:16:f6:e1:4a:5d:
42:18:67:3f:7a:03:fc:c4:81:4c:ef:3d:6e:75:15:89:b5:2f:
e4:4d:d3:9a:5a:d4:17:93:63:35:ee:a2:a4:17:2a:6f:71:2d:
bf:6c:31:bc:98:ba:bb:dd:01:05:f3:b0:cd:a7:f6:f4:fa:3f:
9a:65:63:f3:5a:42:86:7e:57:28:ed:e5:db:0c:56:10:e7:19:
53:de:ca:37
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUQ0/PWfAqYvrdMwInPv5SEWruhBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA0MjMxMTQyMDVaFw0yNzA0MjIxMTQ3MDVaMDMxMTAvBgNV
BAMTKDhENkVCNjRFMjNGMEYyRjI1MUQyRTVBMjMwMkExQUI3MzMwRUEwMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4MIIWNQCbm1n3FKp8iW0PdhJ
fxm/K2HyT7uFeXGNlHrrngz7qbHauUUD5sSrnAIL+qA8/lnY/FuwGdxseu+c9U7+
c894SgTlQbXEHo+9gnAHwycXZ4AkZYHGWrBcBE3bQafDHq3d1ekqwwRvKbPIfKMm
mA99BFPm+x0PFGeFEqBASTJterrR4JGc0p1ZGX4QUar3czbvsC04zlRmsXeuFO/E
LPxXSMdeZCBZwGP3okNLmhgW3u8BbGyunftUUk77Ev/8flE+NTETzUcLp32rB700
3K8mAELGyVWfedrpTJy8lexKE9XaLg86AaM9PwVpz00nff5m/ZekLs2iAPntAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUjW62TiPw8vJR0uWiMCoatzMOoCgwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTUyMTc5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBUhVQ
MA8EAgACMAkDBwAqE5UAAFcwDQYJKoZIhvcNAQELBQADggEBAHeG6brp/djQkwUD
k0aBDr2xdJb/38qPsIgTGZSDEJjFfHq5Qv11tfY7Gpbz6yFgwYMz2nykb8qk5vgc
0UzcJfJHyheMjdkJi3IpztIPhsIaISliJjnqEInP87X2cnTtJ9atuZPtkuPX9hny
461X3vGzpuTtKYqgbwxac6DUaMkvmweq8cvN2coiIlN2I3pO/uhWxSaQoAfJjV5x
rD2UhJZocwCMaHuCivlzOatSJlUW9uFKXUIYZz96A/zEgUzvPW51FYm1L+RN05pa
1BeTYzXuoqQXKm9xLb9sMbyYurvdAQXzsM2n9vT6P5plY/NaQoZ+Vyjt5dsMVhDn
GVPeyjc=
-----END CERTIFICATE-----
Generated at Wed May 13 01:25:35 2026 by rpki-client