Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153060.roa
File: AS153060.roa (raw, json)
Hash identifier: TM7pOnwDaUJ0SwnhWbnlq4YG2LZeh1Zykin/ch791lI=
Subject key identifier: 26:55:0D:FA:7E:3F:C3:68:C0:FA:97:D0:2B:74:3F:D1:68:74:B5:12
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 385327DADBC722AECC22338574C3045ED0124D21
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153060.roa
Signing time: Tue 21 Jul 2026 10:49:14 +0000
ROA not before: Tue 21 Jul 2026 10:44:14 +0000
ROA not after: Tue 20 Jul 2027 10:49:14 +0000
asID: 153060
IP address blocks: 2a13:9500:c8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:53:27:da:db:c7:22:ae:cc:22:33:85:74:c3:04:5e:d0:12:4d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 21 10:44:14 2026 GMT
Not After : Jul 20 10:49:14 2027 GMT
Subject: CN=26550DFA7E3FC368C0FA97D02B743FD16874B512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:21:16:04:74:bc:9a:a1:bf:fa:ba:11:e5:
2d:87:b4:3d:89:63:2d:f7:da:07:9f:89:d2:b3:5f:
a4:18:77:26:e3:53:77:da:3a:ce:b3:75:46:7b:9d:
ac:b4:51:56:a7:6a:e8:62:b4:27:07:40:23:14:0f:
8b:73:6a:17:40:45:8b:e8:26:d6:77:ad:99:9d:c7:
1d:84:52:8e:7d:78:4d:80:ef:ef:11:b7:f7:35:c1:
95:9f:da:c0:f2:36:85:06:87:23:5b:5e:23:64:0c:
92:25:fd:58:98:2e:de:af:c2:37:71:83:de:87:2d:
93:ab:02:6b:7e:ae:73:66:d8:94:83:05:49:21:46:
ac:38:a6:bc:9f:85:e3:96:49:1d:85:76:53:a7:ea:
43:35:99:38:ce:51:ca:03:46:fe:37:cd:bd:73:bb:
a0:ee:46:7f:6d:fd:8f:57:53:a9:62:ea:35:3b:c8:
03:cb:65:f6:76:b9:ab:1e:fe:7f:b4:e1:8c:18:8e:
3d:08:2f:93:33:9b:44:d7:ee:cc:69:38:38:c0:73:
c9:c9:6b:04:1f:93:3b:92:33:57:29:30:55:00:e5:
61:45:f8:79:b6:51:9a:08:17:64:bc:ce:04:d0:26:
9d:ca:3e:47:a6:1b:c8:9f:8e:24:5a:1b:a3:30:81:
2e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:55:0D:FA:7E:3F:C3:68:C0:FA:97:D0:2B:74:3F:D1:68:74:B5:12
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153060.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:c8::/48
Signature Algorithm: sha256WithRSAEncryption
95:4e:7d:87:3b:c7:61:57:04:ca:f2:b9:20:83:ae:41:ad:65:
e5:3c:28:72:4a:d3:3d:d5:e8:8f:56:0f:97:9e:19:ca:41:6e:
28:f7:24:ea:cc:d6:60:f9:61:4c:d7:0b:55:31:31:42:1c:3c:
d6:e9:fa:74:a9:73:ac:a9:d3:f8:2c:ca:21:80:9b:d4:f0:0f:
16:b7:cf:42:59:97:fa:c6:4c:d1:e8:84:4b:3d:17:63:90:1f:
50:b5:6e:1b:be:5e:aa:ae:52:a3:cf:1e:f4:3c:35:f0:aa:e5:
b4:56:33:2f:5c:99:9e:84:cf:40:76:f4:53:c4:bb:2c:99:7a:
e0:67:37:2c:16:f9:d7:10:3f:87:fe:e7:23:44:9c:8e:b3:eb:
25:35:3f:65:91:d1:bb:c0:f5:0f:f0:04:77:ed:b7:b1:24:f2:
c6:c6:ae:3a:2e:75:22:7d:31:4d:d7:bc:12:55:b6:99:dc:f6:
31:c2:fc:b6:13:d7:af:5d:ce:79:1d:99:50:4d:d8:60:13:f5:
79:85:21:3f:23:6b:fe:51:bc:4f:ce:38:a7:43:f2:98:17:86:
ce:f1:28:4a:ff:21:18:b4:1b:15:d1:da:95:f5:9a:a0:ec:71:
40:3a:37:d1:66:fe:c3:ad:f3:5f:d8:f4:ac:1f:91:ac:2e:0b:
2e:fe:70:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:16:52 2026 by rpki-client