Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154132.roa
File: AS154132.roa (raw, json)
Hash identifier: VIHEHreO++4Q49zaW+lw+qewYD4THt6n5gfZXNupGJs=
Subject key identifier: 35:0D:B8:44:57:6F:3C:02:0B:23:9B:2A:8A:FA:1A:A9:C5:3E:F4:4B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3A5D1EC85F8979E931DD0BDA6AEA9A485B6908A6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154132.roa
Signing time: Thu 23 Jul 2026 07:21:56 +0000
ROA not before: Thu 23 Jul 2026 07:16:56 +0000
ROA not after: Thu 22 Jul 2027 07:21:56 +0000
asID: 154132
IP address blocks: 82.38.122.0/24 maxlen: 24
84.75.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:5d:1e:c8:5f:89:79:e9:31:dd:0b:da:6a:ea:9a:48:5b:69:08:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 23 07:16:56 2026 GMT
Not After : Jul 22 07:21:56 2027 GMT
Subject: CN=350DB844576F3C020B239B2A8AFA1AA9C53EF44B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:71:3a:33:62:e6:a6:a1:7c:1f:06:bd:2e:
2c:c0:91:92:c2:52:01:36:6c:68:de:77:14:28:bf:
23:71:4b:1f:9d:68:1a:00:04:e2:2d:7b:97:8e:9e:
8d:18:3a:86:ff:61:cd:c9:a4:dc:7f:dc:01:fc:bd:
32:62:84:66:58:34:1a:58:ad:d7:06:15:52:5c:f4:
4e:75:f1:4a:26:b9:10:71:30:ed:36:ad:ab:af:ab:
40:79:90:dc:a5:57:64:a7:f9:68:51:9c:86:68:9a:
b9:34:43:8a:cb:f9:1e:1c:4c:76:f7:b5:b7:d5:73:
9a:30:e1:db:ff:d7:af:50:a1:af:bc:3d:ef:ed:7a:
1f:2d:a7:cb:e7:4d:cd:c0:cb:4f:01:64:74:88:7a:
02:ce:d9:91:70:55:64:b1:b2:9b:f4:bf:a1:26:3a:
b4:43:39:13:87:d7:c6:a6:87:fd:e4:ac:bd:5d:9e:
67:96:ba:94:82:ec:9c:32:33:4e:1d:9e:8a:02:9c:
de:dc:9c:8a:48:ab:0a:54:1d:af:c9:c8:8c:23:76:
a0:af:8b:e3:4c:92:9e:27:39:5c:07:8e:f4:e4:b8:
5d:a1:ba:cc:89:92:d9:ce:c9:7a:1e:a6:e4:22:06:
60:ee:4c:5c:39:ad:26:b8:f1:b0:8c:95:93:12:34:
d6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0D:B8:44:57:6F:3C:02:0B:23:9B:2A:8A:FA:1A:A9:C5:3E:F4:4B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.122.0/24
84.75.149.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:58:73:94:95:09:c1:0c:1b:e3:6a:06:bd:47:4a:34:b3:af:
9c:15:bd:b5:73:d5:23:80:a9:27:02:14:75:3c:31:25:9b:8a:
63:f5:82:e9:56:10:bd:69:db:a4:93:63:b6:de:3a:27:24:da:
83:67:47:d2:1f:f8:2d:3b:22:28:8d:f4:fb:37:e0:d9:16:3e:
af:6d:0e:c3:8b:58:ce:7a:3c:70:65:a7:98:9b:e9:d1:7b:76:
ab:41:6f:31:9b:f5:36:46:b2:81:13:49:ba:a7:3d:41:4f:1b:
54:2a:bc:63:a9:0b:70:54:ee:1d:45:de:fe:d6:0a:7b:a5:f2:
2f:b3:01:4d:a3:f9:66:67:88:f0:ea:d1:be:c9:3e:51:8c:fa:
b5:04:43:dd:9f:c3:5c:fe:2c:16:34:4a:e1:85:30:11:ca:06:
b6:8e:a0:31:b6:c0:ce:d3:c7:b4:16:21:43:ef:44:72:84:0f:
19:34:2c:c7:64:4b:73:56:8f:97:f2:80:c9:fd:26:d4:aa:6c:
fd:6f:6b:1d:48:35:72:de:a9:1f:29:bc:74:6f:a6:29:61:2e:
06:4c:77:90:1d:2f:75:53:83:00:b7:a2:2a:3f:76:72:de:01:
c5:2d:44:55:86:11:13:07:9e:37:39:38:9a:02:d3:fb:cd:43:
88:bd:3b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:16:42 2026 by rpki-client