Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152606.roa
File: AS152606.roa (raw, json)
Hash identifier: K1j7tzWCpnfsfe3I2sE5DfrvxRF6mI+ymQYXgJfR8pg=
Subject key identifier: 4D:5B:A2:56:B0:66:CC:70:0D:80:9B:93:74:71:C4:24:51:C9:24:BB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 10E6EF0C40458C780BE6EA1DEEEA1C0486C55D27
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152606.roa
Signing time: Sun 08 Nov 2026 03:16:57 +0000
ROA not before: Sun 08 Nov 2026 03:11:57 +0000
ROA not after: Sun 07 Nov 2027 03:16:57 +0000
asID: 152606
IP address blocks: 82.38.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e6:ef:0c:40:45:8c:78:0b:e6:ea:1d:ee:ea:1c:04:86:c5:5d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 8 03:11:57 2026 GMT
Not After : Nov 7 03:16:57 2027 GMT
Subject: CN=4D5BA256B066CC700D809B937471C42451C924BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:b7:5a:77:cc:72:d0:cf:43:51:06:f9:15:
c6:b5:73:0d:bf:d3:57:ed:d4:b5:d4:28:9f:77:ca:
5f:d2:f0:f0:b6:c4:cc:78:f9:f9:23:71:c1:78:54:
dd:61:01:b5:12:5c:a1:ac:d3:a6:46:02:23:bc:fc:
3e:ed:58:dd:ca:56:a5:e6:c6:af:d1:37:3a:42:fa:
c8:ea:c7:2f:7a:e9:6f:4d:d9:0c:7b:40:82:ae:5a:
cd:28:8f:ff:e4:b3:0d:73:94:cd:d5:4a:32:db:2d:
e2:5d:65:23:be:8e:63:de:e1:ba:86:4c:e4:40:eb:
d1:f1:0e:d8:d7:12:b7:c9:cc:39:a6:1f:88:70:58:
a9:fa:b8:46:16:e6:42:4a:aa:59:6d:ef:4e:7b:91:
96:f2:c4:c7:1c:f8:46:58:91:1b:44:78:13:37:a1:
a4:ed:ed:f7:5c:e5:02:ae:13:dc:21:1f:24:9f:86:
0b:b7:5f:20:04:5d:f3:ec:a9:f8:83:50:60:d4:4f:
2d:6a:9d:d5:42:1c:6e:43:62:e8:a1:13:b3:9d:89:
59:56:9d:6c:b2:f2:1a:bf:0b:4a:85:f4:8c:28:1f:
b0:37:df:18:ab:50:21:90:8e:76:67:f1:04:65:80:
33:f5:77:83:c9:e2:0f:f2:c4:6a:58:3e:04:63:a6:
33:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5B:A2:56:B0:66:CC:70:0D:80:9B:93:74:71:C4:24:51:C9:24:BB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152606.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.170.0/24
Signature Algorithm: sha256WithRSAEncryption
48:af:47:bc:05:b5:82:9e:fb:ba:ff:44:e7:31:b0:ce:93:eb:
b2:3f:a9:44:b3:3e:b9:a5:88:0c:05:c1:26:75:12:70:21:63:
0e:68:07:80:14:0d:1c:5c:6a:d5:e3:58:5e:45:7f:00:81:b7:
88:2a:c0:1e:f5:f5:4e:44:b6:f0:24:b9:df:80:77:00:4d:70:
a0:05:24:96:3e:49:d5:64:98:b3:7e:d4:00:29:7d:c9:6d:99:
6e:c6:ab:03:a7:8d:55:6d:74:17:b4:16:9c:fc:75:ab:df:74:
00:96:c2:7a:47:01:0d:af:7b:30:a4:e8:49:2d:e4:0a:40:3d:
69:1a:ab:a5:ab:eb:8c:e5:eb:78:6a:d3:61:60:73:9b:00:04:
a0:56:c4:e2:34:39:f2:81:79:37:0b:86:67:f0:4a:b5:9d:9c:
f2:1b:5d:a6:cf:b9:ec:c6:28:ab:75:9a:69:eb:99:f8:e6:8a:
9a:7c:02:d0:ff:20:ff:7f:c1:bd:dc:30:a0:14:b5:44:74:5e:
64:30:3e:85:52:ff:93:9e:0e:0d:4c:13:c5:ea:34:85:65:24:
e3:f2:ea:26:c2:1f:e3:f0:49:8e:42:ca:cf:e4:38:ed:09:e6:
a4:f5:39:1e:33:01:6d:99:c5:ed:a0:af:a2:2f:36:ea:a1:1d:
4e:d5:d6:3d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUEObvDEBFjHgL5uod7uocBIbFXScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjExMDgwMzExNTdaFw0yNzExMDcwMzE2NTdaMDMxMTAvBgNV
BAMTKDRENUJBMjU2QjA2NkNDNzAwRDgwOUI5Mzc0NzFDNDI0NTFDOTI0QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1NLdad8xy0M9DUQb5Fca1cw2/
01ft1LXUKJ93yl/S8PC2xMx4+fkjccF4VN1hAbUSXKGs06ZGAiO8/D7tWN3KVqXm
xq/RNzpC+sjqxy966W9N2Qx7QIKuWs0oj//ksw1zlM3VSjLbLeJdZSO+jmPe4bqG
TORA69HxDtjXErfJzDmmH4hwWKn6uEYW5kJKqllt7057kZbyxMcc+EZYkRtEeBM3
oaTt7fdc5QKuE9whHySfhgu3XyAEXfPsqfiDUGDUTy1qndVCHG5DYuihE7OdiVlW
nWyy8hq/C0qF9IwoH7A33xirUCGQjnZn8QRlgDP1d4PJ4g/yxGpYPgRjpjMDAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUTVuiVrBmzHANgJuTdHHEJFHJJLswHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTUyNjA2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUiaq
MA0GCSqGSIb3DQEBCwUAA4IBAQBIr0e8BbWCnvu6/0TnMbDOk+uyP6lEsz65pYgM
BcEmdRJwIWMOaAeAFA0cXGrV41heRX8AgbeIKsAe9fVORLbwJLnfgHcATXCgBSSW
PknVZJizftQAKX3JbZluxqsDp41VbXQXtBac/HWr33QAlsJ6RwENr3swpOhJLeQK
QD1pGqulq+uM5et4atNhYHObAASgVsTiNDnygXk3C4Zn8Eq1nZzyG12mz7nsxiir
dZpp65n45oqafALQ/yD/f8G93DCgFLVEdF5kMD6FUv+Tng4NTBPF6jSFZSTj8uom
wh/j8EmOQsrP5DjtCeak9TkeMwFtmcXtoK+iLzbqoR1O1dY9
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:34:38 2026 by rpki-client