Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153787.roa
File: AS153787.roa (raw, json)
Hash identifier: a67sv0dPKILnp72tWvWfzeQbDPbU/U1UD4TGEuPQY80=
Subject key identifier: A4:44:31:3B:EE:D9:68:50:24:D5:2A:A9:BE:0C:D0:A2:F9:B6:9C:B3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 631B4B01B575E5CFD5DC1E50745D7EFC03208CA1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153787.roa
Signing time: Thu 30 Apr 2026 18:47:07 +0000
ROA not before: Thu 30 Apr 2026 18:42:07 +0000
ROA not after: Thu 29 Apr 2027 18:47:07 +0000
asID: 153787
IP address blocks: 2a13:9500:71::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:1b:4b:01:b5:75:e5:cf:d5:dc:1e:50:74:5d:7e:fc:03:20:8c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 30 18:42:07 2026 GMT
Not After : Apr 29 18:47:07 2027 GMT
Subject: CN=A444313BEED9685024D52AA9BE0CD0A2F9B69CB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ce:c3:2c:fd:df:b5:4f:6e:49:f9:7b:fa:6f:
90:41:9a:03:f3:ea:07:1d:5d:30:8e:d1:43:cb:bc:
a8:81:6c:dc:42:8b:e8:26:bc:06:2c:3d:40:1b:c3:
74:1d:27:bb:3e:48:43:2d:c0:0c:ff:dd:61:f2:74:
d0:7d:a2:b7:7e:ae:e8:bd:b2:95:d7:bb:81:dc:88:
e1:b5:c3:19:0b:71:9e:59:0e:38:0c:88:39:dd:b3:
bd:84:37:a8:57:69:53:fa:a5:17:b6:07:d5:83:03:
b2:90:87:77:e6:03:c2:c3:75:f6:ea:e8:b4:6d:1f:
d7:1d:52:d3:86:42:23:df:86:7e:ce:72:53:8a:1b:
47:60:fb:04:29:09:95:82:80:02:30:dd:c9:53:cf:
bc:de:40:e8:64:87:2d:c5:85:45:3f:8e:ee:6b:75:
c9:8e:83:9d:50:ed:b6:db:97:9f:8d:8a:1e:90:a9:
31:6a:6a:80:ea:d8:81:9e:6e:c8:c7:87:84:7d:01:
a8:55:c7:28:a3:91:f7:e3:03:9c:c2:57:17:89:86:
45:52:79:be:b5:d7:ac:0c:b5:48:41:c9:ca:a6:12:
69:cb:76:72:d9:44:82:4e:c6:5b:57:55:4c:cd:21:
f5:1a:38:cd:ef:99:cd:fa:70:08:04:d4:a6:49:a7:
a4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:44:31:3B:EE:D9:68:50:24:D5:2A:A9:BE:0C:D0:A2:F9:B6:9C:B3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153787.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:71::/48
Signature Algorithm: sha256WithRSAEncryption
72:38:9f:c5:9f:7e:7e:1b:b3:8e:31:59:93:ab:ea:f9:c8:22:
be:0d:a5:c1:e5:df:0f:4d:7d:ea:8a:5a:65:2a:b0:60:4d:0c:
6e:d7:46:2e:73:ad:3d:04:99:1e:79:fa:a3:ed:11:80:06:2f:
51:e6:27:d0:88:36:6d:65:ab:00:0a:d9:84:a1:7b:2e:b0:24:
c9:26:48:fc:22:d2:3f:d7:e0:fe:88:55:c8:3f:18:7e:4c:1d:
de:ca:1f:dd:51:45:00:0f:00:c1:81:6e:00:78:d7:37:17:4f:
cb:ca:cb:76:95:1c:78:09:9a:2e:ef:3e:4e:c0:b9:9f:ed:fe:
e6:b8:f8:8d:9f:37:3b:92:d2:64:f4:12:d4:90:f8:4c:1c:fa:
00:78:c8:bc:f9:a4:4a:35:ba:ef:3e:c1:99:66:c2:10:f8:aa:
0b:f5:2b:0f:6a:7a:f6:0f:84:8c:87:5e:e2:11:0a:e0:b8:c9:
8d:43:08:02:83:ce:7a:de:d6:eb:76:05:77:59:88:1a:a0:e7:
c6:fd:58:18:c9:0d:4f:48:ad:cb:d8:c1:34:50:03:84:04:5b:
2f:44:7e:08:0c:28:1f:a9:35:5e:d3:4a:5b:67:49:b8:0e:bd:
be:43:03:6b:dc:42:84:4c:73:98:02:fe:71:70:2f:7f:ce:f3:
40:92:03:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:42:27 2026 by rpki-client