Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: sSev2AqFEX6yvLRgqukZfISUhS7z1KAcTU3KXeOg5qQ=
Subject key identifier: 18:E5:8E:DB:95:E4:1B:C2:D3:51:B9:5B:36:A5:60:C4:0C:DF:9C:8C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2687EACF930E55871FFE1FD93C53852472BB48D4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152179.roa
Signing time: Tue 01 Sep 2026 03:18:22 +0000
ROA not before: Tue 01 Sep 2026 03:13:22 +0000
ROA not after: Tue 31 Aug 2027 03:18:22 +0000
asID: 152179
IP address blocks: 143.14.76.0/24 maxlen: 24
146.103.16.0/23 maxlen: 24
146.103.48.0/24 maxlen: 24
147.79.19.0/24 maxlen: 24
148.135.173.0/24 maxlen: 24
150.241.129.0/24 maxlen: 24
155.117.63.0/24 maxlen: 24
155.117.109.0/24 maxlen: 24
155.117.112.0/24 maxlen: 24
155.117.118.0/24 maxlen: 24
155.117.168.0/24 maxlen: 24
155.117.169.0/24 maxlen: 24
162.141.68.0/24 maxlen: 24
167.148.197.0/24 maxlen: 24
168.222.11.0/24 maxlen: 24
168.222.91.0/24 maxlen: 24
168.222.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:87:ea:cf:93:0e:55:87:1f:fe:1f:d9:3c:53:85:24:72:bb:48:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 1 03:13:22 2026 GMT
Not After : Aug 31 03:18:22 2027 GMT
Subject: CN=18E58EDB95E41BC2D351B95B36A560C40CDF9C8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:d8:50:98:9c:2e:58:89:d9:f7:03:11:2e:
0c:31:ec:2d:f4:60:4e:7c:18:4d:81:92:19:48:06:
55:1e:12:ea:8e:f7:03:39:69:2c:79:e2:fc:97:31:
e5:40:db:c4:c8:7a:b5:d8:93:0d:cc:dc:71:4f:23:
3d:e0:9a:fa:99:6b:50:f5:db:79:e5:bb:bb:d6:23:
fd:2b:d2:7f:26:e1:8a:78:79:b9:92:ee:7f:96:2d:
ca:66:de:bd:08:60:1c:6e:90:d0:4d:de:42:7e:7d:
0a:09:20:c4:2a:4c:4b:99:96:cc:d0:c9:82:c1:e5:
bd:d0:57:84:b4:35:72:08:76:cd:ec:98:56:05:1a:
de:1d:ab:7a:df:c6:e3:11:e2:6d:b0:52:14:c0:10:
39:02:e4:63:1f:6f:fc:aa:41:ee:97:aa:fe:cd:0d:
a2:88:8a:bc:58:4b:78:3a:65:8e:90:4a:4c:40:f7:
f3:ca:bc:3b:15:78:55:4e:f3:b7:c4:fe:86:20:86:
85:a5:e2:f4:fd:b2:f0:38:43:70:c6:64:fc:35:de:
a0:30:01:e9:62:f2:09:5c:b3:dd:6c:0b:14:84:d0:
d6:26:e9:24:89:d7:0a:a5:e4:fd:9d:1b:01:d3:f3:
50:28:64:54:91:44:ab:bd:85:14:14:53:9b:1e:e1:
af:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E5:8E:DB:95:E4:1B:C2:D3:51:B9:5B:36:A5:60:C4:0C:DF:9C:8C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.76.0/24
146.103.16.0/23
146.103.48.0/24
147.79.19.0/24
148.135.173.0/24
150.241.129.0/24
155.117.63.0/24
155.117.109.0/24
155.117.112.0/24
155.117.118.0/24
155.117.168.0/23
162.141.68.0/24
167.148.197.0/24
168.222.11.0/24
168.222.91.0/24
168.222.119.0/24
Signature Algorithm: sha256WithRSAEncryption
92:6f:b5:ab:eb:69:86:a9:d8:e9:d5:b4:af:12:e5:06:cd:d6:
ff:00:22:e7:a6:e8:29:b3:4b:9b:18:16:c7:2b:7f:98:53:4c:
28:7b:d3:53:a4:9c:a4:d6:00:6d:d8:39:e3:ed:f9:46:ea:aa:
7d:fc:d9:66:04:55:37:dd:b6:58:c6:db:b6:5a:5b:18:e6:e5:
43:d3:a1:b8:ea:a8:19:2b:a1:33:27:c9:ee:be:fd:16:5b:67:
bb:cc:a2:ab:8b:32:5c:71:e5:40:f3:df:fa:60:ff:9d:0d:9f:
07:a5:40:ab:f6:8a:55:37:1f:14:27:17:d8:cc:fd:45:d1:85:
9d:a4:cf:b0:1c:e0:ab:14:48:42:f0:6b:02:33:fd:58:54:9d:
0b:76:60:7e:51:30:21:8f:81:ad:5d:1d:c7:41:22:ca:ad:33:
7b:c9:50:22:0b:74:33:af:2a:b0:46:c9:4d:43:2b:0a:2b:c5:
4b:9e:04:eb:5c:b6:bf:e2:c1:43:59:ec:37:46:b5:e1:25:6f:
f5:67:5f:ea:96:89:17:d9:a7:83:c0:e0:e7:36:15:22:01:f9:
0e:f8:06:d7:ab:f9:ad:cd:b9:9c:e6:62:0b:fc:97:25:ba:55:
95:e2:2d:0f:a1:63:69:04:12:0e:63:3d:a6:7d:34:e9:fa:8d:
cc:74:6f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:12:28 2026 by rpki-client