Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152606.roa
File: AS152606.roa (raw, json)
Hash identifier: qiV5o/4L3V0IdxI/mAhiR/sWCN7REDJtJm42/Fey04g=
Subject key identifier: B8:F8:B5:84:99:FA:46:EA:F0:19:F2:56:B4:FC:5E:3C:41:34:26:7D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: F3310B55529F3F5D4BA481979492C7C53A968D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152606.roa
Signing time: Fri 09 Oct 2026 10:07:31 +0000
ROA not before: Fri 09 Oct 2026 10:02:31 +0000
ROA not after: Fri 08 Oct 2027 10:07:31 +0000
asID: 152606
IP address blocks: 51.146.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 04:05:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
f3:31:0b:55:52:9f:3f:5d:4b:a4:81:97:94:92:c7:c5:3a:96:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 9 10:02:31 2026 GMT
Not After : Oct 8 10:07:31 2027 GMT
Subject: CN=B8F8B58499FA46EAF019F256B4FC5E3C4134267D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:f9:77:cb:70:1b:97:25:12:ea:fe:34:da:
4d:4d:2f:a0:c4:8e:8b:c2:97:8e:04:61:45:c7:ca:
59:64:e6:64:8b:8a:60:7c:c2:1a:83:a5:95:aa:59:
60:f2:88:be:a7:a5:9e:00:e0:6c:c6:66:bb:3b:0a:
ec:22:ac:a5:bf:33:1b:6d:9a:b9:05:aa:e9:86:18:
42:27:32:cb:05:9c:8a:8f:bc:4c:fd:af:2c:09:de:
01:48:13:ca:dd:c4:f9:b6:35:28:1d:d7:8d:af:13:
fd:b8:9c:ce:42:3b:5e:af:f6:64:c9:3c:e8:9f:6f:
99:8e:34:0a:a1:d3:e9:ed:e4:a0:f6:91:ee:b9:a4:
5f:ad:6c:e0:97:99:cc:75:fc:82:48:57:5d:63:dd:
4f:65:d5:03:a2:6e:83:60:71:c5:0a:37:61:a4:d7:
bb:20:b8:f3:c4:2a:02:e4:97:65:6f:ba:c2:b7:cf:
56:a2:f4:f2:78:e3:6a:97:21:0f:70:18:51:4b:fa:
0b:f5:ec:ee:4e:a9:a2:0a:69:10:60:2d:70:a5:3b:
b1:f6:d1:f6:c6:29:24:b2:54:49:1b:ce:5f:3e:13:
e6:3d:cc:a4:62:b3:84:50:b3:72:8f:7f:d5:d3:0b:
2a:bc:50:1f:db:08:f2:29:e9:3c:47:d9:1e:cd:84:
b1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F8:B5:84:99:FA:46:EA:F0:19:F2:56:B4:FC:5E:3C:41:34:26:7D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152606.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.67.0/24
Signature Algorithm: sha256WithRSAEncryption
53:dc:00:4c:1a:74:b7:b9:f8:fb:66:97:d3:cd:77:e2:41:8f:
55:b9:97:29:1d:de:05:c1:53:50:b4:fb:2e:9f:38:ba:a1:d6:
c6:a0:96:9a:dc:d6:15:fc:fd:86:6a:ac:a9:45:03:71:17:14:
86:ac:94:47:a1:df:c9:ca:a6:19:5b:e7:a3:e0:fd:8b:05:2b:
01:82:13:53:51:b3:17:17:09:14:3f:75:a0:f0:4a:90:8c:9b:
26:61:c2:29:8a:0e:b2:f0:d9:3f:25:72:19:9a:d0:24:d0:9c:
bf:02:9f:05:b5:b1:bc:6f:8c:c5:d1:d4:6f:a5:31:bf:93:7c:
2f:5d:c1:62:f8:77:46:a3:19:40:2b:07:e9:cd:2f:ac:08:7f:
d6:6b:57:63:3a:5e:a0:1c:06:f6:fc:27:03:21:42:b9:ef:76:
30:d1:cb:38:c3:9c:db:95:a0:14:64:51:22:f6:13:26:44:2a:
5a:1b:ba:21:7d:7e:42:65:13:10:dd:43:a6:bb:f2:de:f3:47:
8d:7f:75:67:e7:06:bb:fb:b9:2a:8f:46:0d:c0:47:6f:89:ff:
1a:71:0d:18:93:4a:75:d9:5e:22:97:8a:7a:2a:a5:8b:f8:92:
11:58:f4:23:bf:62:f0:f5:84:6c:6a:a7:00:60:93:43:f9:ce:
49:88:bf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:56:34 2026 by rpki-client