Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152697.roa
File: AS152697.roa (raw, json)
Hash identifier: dWQ2lTby4dI1C1j4/FJs86lSW7QbAOKWorIx21z8bFM=
Subject key identifier: E4:58:3D:7E:E9:F2:1F:28:D3:A3:E8:15:C8:A7:6C:29:F1:4A:78:23
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 69EF4BAE0DE5BC3CEA7D83B8B348626173F80BCB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152697.roa
Signing time: Mon 22 Jun 2026 02:13:30 +0000
ROA not before: Mon 22 Jun 2026 02:08:30 +0000
ROA not after: Mon 21 Jun 2027 02:13:30 +0000
asID: 152697
IP address blocks: 155.117.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ef:4b:ae:0d:e5:bc:3c:ea:7d:83:b8:b3:48:62:61:73:f8:0b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 22 02:08:30 2026 GMT
Not After : Jun 21 02:13:30 2027 GMT
Subject: CN=E4583D7EE9F21F28D3A3E815C8A76C29F14A7823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:7e:43:a9:00:c7:db:64:e2:fa:32:47:cb:
17:dd:2e:c6:07:07:e2:52:db:06:4d:8f:7e:22:fd:
e9:1c:e9:34:5a:6d:9f:d3:44:74:79:9f:16:07:63:
ed:73:e8:ac:c0:31:cc:26:8d:30:47:3e:a2:05:c8:
c6:23:00:cf:99:da:ce:54:80:6e:16:01:5e:39:8e:
31:61:9d:42:b2:45:fc:cd:0a:1d:cb:11:4a:25:3b:
b9:bd:37:0c:12:21:22:1f:92:26:1b:6a:fd:4d:26:
f9:e3:70:6d:04:d8:cc:3d:55:ed:ee:5f:c2:3e:17:
02:ad:b0:65:a2:18:82:72:fc:3d:48:f3:0c:7a:25:
37:91:fb:d3:70:86:c4:5c:0b:f8:6a:d8:fe:8c:f8:
06:b9:bd:0c:9b:ed:36:78:b8:32:26:17:ad:85:6f:
00:e5:16:b2:d0:de:72:60:b6:c1:74:f2:cb:2c:46:
b3:6f:b1:a7:7c:7a:ab:69:14:86:df:01:9d:70:27:
8e:94:65:66:cc:0a:47:e5:db:ce:e2:1e:00:d0:2a:
bf:a7:69:2a:9d:74:0d:dd:de:42:ed:a9:30:d4:9f:
f1:8b:8a:f9:fc:cb:eb:c9:c5:99:7b:dd:30:3b:e2:
aa:e4:f8:da:3b:46:85:1b:e4:46:95:bf:a2:b7:4c:
79:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:58:3D:7E:E9:F2:1F:28:D3:A3:E8:15:C8:A7:6C:29:F1:4A:78:23
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152697.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.242.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:31:5e:9b:8a:a8:b7:ce:b0:02:a4:79:19:ec:8e:33:d3:90:
f2:df:77:88:41:7d:bd:63:ab:1a:ba:26:85:b1:20:b4:60:29:
4d:fa:af:7e:5a:27:f6:f1:1c:bd:80:4f:2c:4b:1f:36:43:fe:
b3:01:69:94:16:d8:35:de:50:e5:5e:cd:90:7f:fe:0d:79:6b:
9a:84:68:7c:de:d0:01:45:55:1e:85:44:46:6f:c3:8e:a5:5e:
8f:83:f2:be:6b:dc:59:0e:47:86:51:52:fb:a8:84:77:05:f9:
49:85:93:e2:9a:b1:08:39:d1:21:57:68:5a:80:5c:38:24:a3:
4e:33:a7:cd:e8:ff:94:88:fd:f0:95:cb:1b:b4:62:3d:88:15:
cb:8b:94:a1:73:2a:1c:30:14:e2:a6:f3:c4:db:3a:be:df:66:
dd:0b:b6:4c:fd:6b:33:e3:4c:10:13:74:39:e7:17:94:f9:b1:
16:db:12:be:ac:16:97:d9:7a:7c:5c:20:2d:49:c0:5a:ba:e5:
b3:ef:93:5d:8f:56:af:24:e3:1c:0a:93:16:e7:a8:bb:31:51:
38:e2:86:8f:1e:01:37:fd:d6:f8:d4:db:c1:54:a1:87:3b:fb:
92:5d:c1:4a:13:2e:e4:85:20:35:be:c5:8f:01:43:d8:cb:6d:
56:5a:8d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:31 2026 by rpki-client