Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152868.roa
File: AS152868.roa (raw, json)
Hash identifier: aNSNAEbk3x0sjM6IksEQ8q8xihn1FA9YilCxn8Dv/Y0=
Subject key identifier: 17:49:EC:FC:69:6D:2D:42:56:76:8B:09:7F:A5:4A:AB:28:95:78:EE
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 48B842957AF47AF37B01721969394499054D01C9
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152868.roa
Signing time: Thu 24 Sep 2026 08:20:49 +0000
ROA not before: Thu 24 Sep 2026 08:15:49 +0000
ROA not after: Thu 23 Sep 2027 08:20:49 +0000
asID: 152868
IP address blocks: 188.220.201.0/24 maxlen: 24
188.220.203.0/24 maxlen: 24
188.221.31.0/24 maxlen: 24
188.221.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:b8:42:95:7a:f4:7a:f3:7b:01:72:19:69:39:44:99:05:4d:01:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 24 08:15:49 2026 GMT
Not After : Sep 23 08:20:49 2027 GMT
Subject: CN=1749ECFC696D2D4256768B097FA54AAB289578EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cf:95:7b:bf:9d:b6:c3:3a:ca:33:7b:3b:f6:
59:e3:09:9a:ad:ac:23:e9:b0:51:0e:85:78:96:65:
f5:84:c8:90:73:9f:f0:43:6d:ec:6d:46:b3:2f:82:
42:e7:c7:46:ea:d9:1b:b8:82:24:f4:b2:90:d8:c5:
e1:7c:37:1b:46:8e:d2:d8:6f:23:78:cc:3d:3e:91:
52:c4:be:67:7f:5d:b9:49:7f:85:f1:b5:de:09:62:
33:35:67:62:46:2b:08:81:6c:c4:ff:52:fc:af:79:
05:e3:9b:af:5c:de:5f:79:69:db:40:ad:70:57:c0:
b1:4a:0c:25:72:e1:ce:5c:d1:4b:89:4d:16:d6:a7:
6a:e2:e6:de:7c:cb:f5:35:99:03:64:c5:fd:74:e7:
9a:17:14:40:0d:0e:6a:f0:70:d2:f6:20:06:e7:21:
65:55:01:9a:e2:75:dd:fc:ff:e4:9c:0f:b4:db:3f:
91:78:5f:6e:ef:9a:cf:10:87:00:c9:f6:a3:4f:f6:
4a:35:1e:6b:b7:5f:5e:b7:8d:8b:c1:f2:07:62:c4:
0d:37:df:bc:c9:04:f0:af:bb:62:31:c9:82:7a:ae:
98:f1:e5:ff:87:e6:df:ed:ae:a9:cb:24:31:bd:11:
b7:0f:66:53:1f:4f:35:53:2c:73:b3:de:f0:6c:c5:
f6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:49:EC:FC:69:6D:2D:42:56:76:8B:09:7F:A5:4A:AB:28:95:78:EE
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.201.0/24
188.220.203.0/24
188.221.31.0/24
188.221.187.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f6:8b:b6:67:90:80:13:d0:f7:ee:96:2c:48:61:c5:e8:b3:
6a:75:89:e4:56:7e:96:bc:51:57:57:b2:42:f9:25:d7:17:1c:
8f:48:8a:fb:a8:2a:d7:07:aa:73:b9:82:e6:fb:c0:99:b7:87:
fc:d2:45:17:b4:66:3e:03:de:39:12:37:f5:75:20:49:3c:c6:
f0:c9:f9:bb:de:8d:07:9d:be:12:db:0d:56:f7:60:d0:5b:8f:
2a:94:56:4c:eb:f6:7e:60:da:e5:83:ad:40:57:d5:9c:5a:00:
00:04:97:c5:af:98:11:51:30:66:d7:19:2d:b1:2e:4e:d1:be:
5e:0b:b1:1e:f8:34:e7:74:e1:e5:d4:1b:11:0d:f9:7f:42:3f:
83:b9:fa:70:4b:da:71:90:85:b5:2d:d7:af:11:65:93:91:a3:
d6:9e:62:28:da:05:ed:01:2f:f1:b9:ad:c6:36:d9:ae:9c:ae:
e1:3b:c1:dd:01:c0:1c:a9:d7:6d:e9:9f:15:3c:d7:dd:99:01:
00:47:ad:88:f3:0c:05:ca:6f:d3:68:6a:a9:57:bf:86:c7:e8:
7b:35:25:2f:51:ab:6e:2f:05:1a:d9:10:9c:75:ae:0d:6f:e5:
c7:8a:64:0a:82:47:9e:17:82:99:7d:b4:31:ae:b4:85:63:fb:
52:fa:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:47:37 2026 by rpki-client